Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/pL2uqtMbX8Uz3VS4PlAIIMsisXk.roa
File: pL2uqtMbX8Uz3VS4PlAIIMsisXk.roa (raw, json)
Hash identifier: j49l54TLMI6uWlQFuOqXT5sOi1eKJK79R5Xml0k1KE4=
Subject key identifier: A4:BD:AE:AA:D3:1B:5F:C5:33:DD:54:B8:3E:50:08:20:CB:22:B1:79
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 018D60B42A14C08190732822E580920013A6
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/pL2uqtMbX8Uz3VS4PlAIIMsisXk.roa
Signing time: Wed 31 Jan 2024 18:07:16 +0000
ROA not before: Wed 31 Jan 2024 18:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8841
IP address blocks: 193.220.180.0/22 maxlen: 22
193.220.208.0/21 maxlen: 21
193.220.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:b4:2a:14:c0:81:90:73:28:22:e5:80:92:00:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jan 31 18:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4bdaeaad31b5fc533dd54b83e500820cb22b179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:7b:27:f5:9f:84:40:0c:68:43:a6:ce:9d:
f8:a9:d0:f3:57:13:50:54:b0:e5:7c:5d:33:6e:b3:
70:34:88:a3:31:cd:78:84:b7:47:02:51:7b:a0:fb:
3b:87:51:9f:5a:29:d0:23:d6:da:ed:1b:b3:37:c2:
fa:a9:b8:e4:e6:1e:6e:87:11:88:b0:c8:36:96:4a:
bf:17:ab:c7:cd:24:c6:30:c5:eb:8b:c5:39:cb:25:
d5:fb:35:62:5e:2e:6d:4b:ed:09:56:ec:31:4d:1d:
26:06:63:e3:b8:67:6c:fa:c5:a8:dc:d7:f9:62:97:
d1:ee:f6:de:34:fe:66:c5:2b:69:65:f0:cd:aa:d5:
5e:90:ee:52:81:d4:3d:d8:5a:b2:c3:50:40:d5:1e:
fe:60:05:f1:2a:be:c4:a6:79:83:74:66:69:93:9a:
9e:73:13:2c:88:61:27:3c:58:a0:23:0e:58:a7:6c:
7e:c2:5b:7a:9c:fb:13:55:b2:b6:f7:4a:11:1c:0a:
c5:b6:6c:1b:c8:7d:1f:c6:11:96:f7:40:b4:d8:ca:
df:16:4a:ce:fb:a5:b9:a5:e6:4c:4e:c4:40:20:0c:
54:44:af:92:a4:cd:2f:9b:40:48:3f:bd:c7:ba:3e:
6b:f3:f8:0e:98:28:f1:ac:92:fa:74:b1:ce:a0:99:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:AE:AA:D3:1B:5F:C5:33:DD:54:B8:3E:50:08:20:CB:22:B1:79
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/pL2uqtMbX8Uz3VS4PlAIIMsisXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.180.0/22
193.220.208.0-193.220.219.255
Signature Algorithm: sha256WithRSAEncryption
6f:78:d9:64:3f:18:32:c6:c4:dd:7f:47:f2:fd:6b:95:6b:1e:
32:25:6d:e9:81:d1:f3:9f:24:9e:9d:8d:43:7b:a2:76:ad:50:
9e:e0:7c:4f:87:0d:b3:8a:4c:17:be:c0:d7:d8:ed:17:b4:02:
63:7a:49:43:bf:2e:14:fa:49:1c:d4:6d:9c:66:6c:93:f6:fe:
56:9c:e6:87:41:3f:6d:38:c3:fe:83:ff:c9:93:ed:79:02:9d:
9b:de:fd:a7:10:b3:12:e5:83:ef:3a:4a:b2:e7:69:1f:6d:54:
61:42:eb:61:68:c4:81:c2:aa:3d:89:42:bb:34:06:93:5b:d7:
72:95:02:ef:cd:2b:79:db:58:d9:30:55:36:86:f6:e7:29:8d:
26:74:46:ff:eb:cf:4c:2b:73:68:7b:7e:8a:5d:fb:99:73:d9:
09:04:7e:ce:a9:22:3e:f3:9d:57:98:c7:5c:cf:92:43:42:b2:
68:f1:d4:2f:46:3e:85:c3:47:68:9d:ba:b8:6c:bf:6b:8e:ed:
ca:3a:5e:2c:e5:cd:88:6a:db:b7:e5:8a:8c:2a:a3:ae:46:22:
8f:1b:56:34:5e:4b:22:86:9a:7b:d4:9c:8f:54:df:de:c1:8f:
5f:58:5d:73:61:dc:c9:17:c0:49:bf:27:ff:bf:a0:d5:01:53:
72:7b:d9:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:29:15 2025 by rpki-client