Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/VoQLtcjX9GEXKUuPr0klR0y7zl0.roa
File: VoQLtcjX9GEXKUuPr0klR0y7zl0.roa (raw, json)
Hash identifier: yeROayyak3Hg9+ZTFKUjAc+rpMt+uhMzirUcdTuRakI=
Subject key identifier: 56:84:0B:B5:C8:D7:F4:61:17:29:4B:8F:AF:49:25:47:4C:BB:CE:5D
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 018CC7272B20BA9D5FBFBE3FABFC5293F696
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/VoQLtcjX9GEXKUuPr0klR0y7zl0.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41227
IP address blocks: 193.29.17.0/24 maxlen: 24
193.29.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2b:20:ba:9d:5f:bf:be:3f:ab:fc:52:93:f6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56840bb5c8d7f46117294b8faf4925474cbbce5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:8f:4c:e1:62:c8:fb:88:96:01:f5:0d:cf:
ed:89:7a:bb:7e:52:8b:2b:6c:27:26:20:e6:35:63:
67:58:6a:7f:86:5e:f6:d3:cd:8e:c7:f3:d3:8e:25:
22:15:b5:20:18:b8:48:93:f5:6e:2d:60:19:1d:74:
02:b0:2d:37:f1:dc:80:36:77:ee:32:c5:6e:9d:b6:
6b:44:bd:1c:94:9e:c5:c5:42:a5:1a:80:62:fb:93:
22:ca:7b:04:7e:d1:86:0d:c0:aa:d1:41:b2:ed:b9:
0b:36:a8:3d:16:fe:7b:53:d5:e9:30:1e:05:e0:6b:
ed:3b:7b:2c:e7:46:c6:3c:3f:96:2d:4b:cf:e5:ae:
0d:08:a3:04:f1:9c:f3:c1:d4:f3:5b:13:7d:0f:84:
85:7a:97:cb:f6:a0:54:fd:33:c9:10:97:1b:7e:38:
e6:8e:46:01:ed:8d:76:07:ae:4f:d7:50:12:81:a9:
87:31:f9:3c:df:95:9d:9e:fe:fc:a9:f5:b4:71:64:
d3:92:22:57:1b:8d:2a:3d:3b:b2:0d:97:35:73:69:
68:c3:1a:59:d3:32:67:e7:d3:56:2a:06:c9:48:70:
1f:0b:d1:b8:a2:7a:f2:64:b9:0e:f9:60:fa:e7:f7:
6a:97:0f:7e:41:00:84:09:cc:65:02:47:d7:92:ce:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:84:0B:B5:C8:D7:F4:61:17:29:4B:8F:AF:49:25:47:4C:BB:CE:5D
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/VoQLtcjX9GEXKUuPr0klR0y7zl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.17.0/24
193.29.24.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b4:35:dc:bd:ab:53:c4:92:c1:5d:e8:97:4c:fa:0d:5b:f0:
66:59:6e:58:41:db:4a:ef:e3:a0:9e:8d:db:72:47:0d:e9:96:
4f:ee:bc:9b:cc:2a:ff:8b:37:7a:4b:89:c1:e9:b2:8c:cf:74:
25:67:e3:81:b2:2d:fe:6f:c2:bc:08:ad:80:f0:25:2e:bc:70:
d6:34:d6:90:0a:04:b6:89:20:94:5e:b7:86:44:48:41:cf:b0:
58:ba:ee:83:aa:d5:7c:3f:f7:e3:05:a1:fb:60:d8:aa:1f:ea:
d2:d4:57:75:9d:98:19:b5:56:27:71:4a:30:30:6d:fa:a1:ca:
10:3c:6c:23:d6:6e:1d:50:3e:6c:e3:ad:23:e2:9d:96:b6:1b:
36:d8:91:85:63:bc:5f:04:88:5e:ba:1b:ae:18:74:7d:d8:6a:
81:24:9a:1c:ca:33:da:e2:99:dc:ae:b0:54:23:16:74:45:93:
13:e3:80:ea:75:77:05:81:6f:b6:4c:22:64:62:c6:a3:d9:c4:
74:f1:af:4b:f2:c6:f3:91:be:bb:20:05:4b:e0:71:f5:2b:8d:
2b:19:0a:c1:41:7c:28:9a:8f:cb:7d:ab:a0:2a:e6:af:d0:c2:
c3:52:d8:a1:3c:d4:92:d2:12:a7:e5:e7:06:a4:5e:25:17:b0:
84:d9:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:07 2025 by rpki-client