Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/RiCrEdYXHcvBK9LMdmlzspPTjbg.roa
File: RiCrEdYXHcvBK9LMdmlzspPTjbg.roa (raw, json)
Hash identifier: TrMZBQQ4NLBsDhigUVDxKfIcEv8PPCsRC368z5j3uZk=
Subject key identifier: 46:20:AB:11:D6:17:1D:CB:C1:2B:D2:CC:76:69:73:B2:93:D3:8D:B8
Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial: 018CC3B70B849E2CA2A74D7B5117F33ED8E5
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/RiCrEdYXHcvBK9LMdmlzspPTjbg.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20624
IP address blocks: 193.178.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:84:9e:2c:a2:a7:4d:7b:51:17:f3:3e:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4620ab11d6171dcbc12bd2cc766973b293d38db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:4d:1a:00:d2:f5:5f:22:e0:da:4b:87:26:
33:44:7f:0d:1c:6f:f8:1b:33:2e:e5:1b:0b:a4:9a:
1d:7f:b5:d6:e5:21:22:b4:88:fb:6d:18:71:8a:a1:
11:93:9c:94:a9:ec:4a:41:89:1b:6e:8f:d2:a1:03:
05:67:2d:f3:44:1b:e5:d8:ba:9a:3c:20:ca:97:e4:
dc:74:34:cc:f2:30:96:86:ae:77:8d:29:6b:21:85:
a3:af:e7:15:69:de:71:fc:65:e1:c3:f3:e7:af:13:
c5:f6:9c:10:9f:24:be:df:8d:3f:ae:ce:9f:4d:2f:
93:3f:25:55:d1:48:85:af:06:d5:2e:64:7f:9a:5b:
47:a6:fb:45:f4:f2:f8:30:62:d5:e2:79:3e:1f:39:
c8:ca:57:2a:76:3a:89:5e:23:3f:48:fb:b7:52:ed:
96:eb:c2:ac:ef:89:fc:20:c0:15:e2:d9:6f:5a:24:
4b:6f:be:6d:12:70:88:76:2f:c0:f6:ac:f0:83:e3:
12:06:a2:ad:91:57:3b:35:ce:f4:df:5f:e5:e5:17:
3f:0c:7e:c9:3f:3c:30:b3:94:4d:d2:da:f9:34:d9:
23:de:55:b1:59:b5:60:c6:a7:04:30:de:68:d3:7b:
90:d3:4e:37:4e:73:d0:8f:d9:87:ec:45:5a:80:a9:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:AB:11:D6:17:1D:CB:C1:2B:D2:CC:76:69:73:B2:93:D3:8D:B8
X509v3 Authority Key Identifier:
keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/RiCrEdYXHcvBK9LMdmlzspPTjbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:26:5d:1c:2c:d0:92:b0:ec:fb:a7:d8:32:ea:24:ed:a6:78:
d4:43:ec:4d:7b:1b:28:7c:b6:f2:9c:1e:67:bf:c4:28:a3:99:
48:ec:4d:53:a1:a4:f2:bc:7a:3d:ba:2f:d9:57:f2:5e:d8:3b:
9d:a8:7c:d8:cd:1a:12:8d:07:8e:17:b6:81:b4:cf:e7:93:1d:
f4:61:e5:19:bc:11:7f:3e:1d:78:77:2e:88:06:7d:70:46:f3:
f4:0c:ea:f0:4a:cf:85:7a:1c:5d:ec:3f:11:5f:0b:58:f6:1b:
4e:3b:ea:f5:46:71:8b:69:98:48:f9:21:88:07:57:6d:bd:09:
bf:24:4c:ad:d6:9b:12:2d:99:80:cf:12:4a:86:ec:c3:92:31:
57:50:21:3a:db:49:41:ef:a0:65:29:6b:5f:be:a2:69:fa:80:
ef:9e:19:86:50:87:19:8c:0e:d8:09:1c:e6:c0:de:2c:30:c8:
cf:5e:fb:26:aa:47:36:f6:8f:75:e8:79:92:40:52:d5:2b:87:
70:b4:4b:c0:c0:2e:9a:6d:2d:28:59:35:71:15:31:fa:38:eb:
4d:81:6f:bd:a6:e0:10:f4:3b:65:b9:82:c7:72:85:5e:20:21:
77:ab:b1:02:57:4c:e6:70:7f:f4:11:81:10:68:46:d5:7a:f7:
85:2b:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:28 2025 by rpki-client