Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/eTHpQhpTw3r5r5QQdjWZ3Edo_0I.roa
File: eTHpQhpTw3r5r5QQdjWZ3Edo_0I.roa (raw, json)
Hash identifier: 0cstVG3jBfY/NPq0RuWkZc42rQg0BFmbIx9qH7xDLE8=
Subject key identifier: 79:31:E9:42:1A:53:C3:7A:F9:AF:94:10:76:35:99:DC:47:68:FF:42
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 018CCA29AD935C6B76AB71A0062F54E37569
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/eTHpQhpTw3r5r5QQdjWZ3Edo_0I.roa
Signing time: Tue 02 Jan 2024 12:32:58 +0000
ROA not before: Tue 02 Jan 2024 12:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200700
IP address blocks: 185.93.31.0/24 maxlen: 24
185.93.28.0/24 maxlen: 24
185.93.28.0/23 maxlen: 24
185.93.28.0/22 maxlen: 24
185.93.29.0/24 maxlen: 24
185.93.30.0/24 maxlen: 24
185.93.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ad:93:5c:6b:76:ab:71:a0:06:2f:54:e3:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Jan 2 12:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7931e9421a53c37af9af9410763599dc4768ff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:e7:5f:2a:5d:68:8c:9d:8f:79:4e:29:32:
98:b7:04:97:4a:bb:54:ff:bf:89:87:d9:5a:0e:3d:
58:9c:7f:e9:fa:c3:13:42:a5:dd:ee:3c:95:3d:70:
3d:80:a4:12:2c:20:ba:c8:d6:6b:b3:6e:17:e9:11:
86:96:93:49:cc:fc:ee:95:12:a7:81:21:ff:aa:53:
9d:b1:b2:a3:23:fe:13:48:b7:d3:6e:d9:04:ef:6a:
7c:07:02:7b:ba:47:13:00:2e:a4:6e:20:14:43:80:
50:30:f0:ef:b1:bc:5c:26:9d:77:e8:a8:8c:4a:30:
90:35:13:31:ca:44:ca:c3:ab:64:a6:df:be:6e:3d:
ca:e8:cf:ca:8d:5b:bb:09:2e:4e:1a:55:04:dc:37:
41:f9:35:14:ac:ab:88:7f:16:9b:23:16:6e:a5:13:
26:bb:56:91:d3:20:74:6d:63:1c:da:76:6d:1c:a3:
60:06:db:3f:30:3f:9e:21:8c:26:94:3c:95:5f:0f:
74:e3:91:c7:ea:fa:ea:2c:89:d9:a8:e7:f3:ce:9d:
d6:8a:c0:fa:54:c0:82:19:02:0a:62:64:04:bf:cc:
17:88:a6:75:52:36:51:bc:2e:ef:35:2b:10:9f:61:
e9:85:d1:75:f8:24:0b:87:59:3e:47:92:1e:64:d8:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:31:E9:42:1A:53:C3:7A:F9:AF:94:10:76:35:99:DC:47:68:FF:42
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/eTHpQhpTw3r5r5QQdjWZ3Edo_0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:31:bf:04:c2:e6:51:2d:bd:4d:2b:b8:b5:3b:f8:80:9f:52:
29:7f:8e:ff:2b:ed:2f:a6:cf:fe:64:b0:21:30:09:b6:13:93:
69:17:65:8d:3e:90:be:ae:68:18:91:74:da:e3:1a:a5:dc:a5:
84:15:e3:05:77:f8:10:71:e6:3b:79:cf:f6:15:c8:4b:98:81:
29:93:43:2b:53:fe:65:20:4d:74:d2:05:c0:66:29:22:5e:7e:
8e:27:cb:ea:8f:47:e0:eb:ac:64:8d:6f:3d:77:c8:38:11:07:
8d:50:e5:d1:36:91:bf:ad:fd:fa:16:7f:da:fa:8b:d9:ac:ce:
bd:0c:3f:0d:d0:7f:81:d4:9f:44:ca:f3:60:20:47:53:97:dc:
43:94:da:94:43:d3:a4:b3:1f:33:e8:48:2c:a1:84:bf:ed:e6:
0a:47:d8:20:e6:af:12:e0:b5:cc:2d:21:d3:eb:9c:4e:fc:91:
71:cb:48:48:1b:4a:72:31:ab:87:73:9b:34:20:ef:47:5c:66:
80:f3:cd:b3:3d:39:1a:d4:06:1f:cc:d4:c5:b4:a6:ec:1c:d8:
a6:fe:da:bd:24:66:f0:0d:cc:a4:df:21:04:91:d4:67:95:2b:
8e:22:98:6b:a5:27:00:3c:3f:a3:1f:33:f1:e9:f8:77:49:89:
88:0e:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:17 2025 by rpki-client