Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/oHZnfQqIvKd-NU7ymAdtRpN3kYk.roa
File: oHZnfQqIvKd-NU7ymAdtRpN3kYk.roa (raw, json)
Hash identifier: ZBi4u23v3om+J0P+v/iQuYfK9TGH/WQkqA+G1MVfMa4=
Subject key identifier: A0:76:67:7D:0A:88:BC:A7:7E:35:4E:F2:98:07:6D:46:93:77:91:89
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 0193BACAA2DE1B9397C4CB390DF72D2893BE
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/oHZnfQqIvKd-NU7ymAdtRpN3kYk.roa
Signing time: Thu 12 Dec 2024 12:14:22 +0000
ROA not before: Thu 12 Dec 2024 12:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51412
IP address blocks: 193.150.152.0/21 maxlen: 21
193.150.156.0/22 maxlen: 22
193.150.156.0/24 maxlen: 24
193.150.160.0/22 maxlen: 22
193.150.160.0/24 maxlen: 24
193.150.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:ca:a2:de:1b:93:97:c4:cb:39:0d:f7:2d:28:93:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Dec 12 12:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a076677d0a88bca77e354ef298076d4693779189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:5f:8e:78:fd:b9:26:c8:ba:e5:c6:8f:d6:
1b:59:f8:48:4b:28:08:9b:cd:64:5c:54:df:9b:e3:
2f:1e:20:e7:d9:21:7f:3f:f5:89:d5:a0:84:ef:a2:
4d:2b:59:90:08:1f:b7:99:df:20:17:a7:03:d4:76:
2a:e9:68:3f:aa:b7:c5:35:e2:55:36:5f:36:69:fd:
b1:57:79:b0:01:3f:a0:e2:da:77:38:a0:0c:9f:5e:
07:2b:7b:c4:ab:a6:76:54:d8:39:16:ec:98:4b:a7:
49:73:8e:83:3f:6b:fe:21:be:4d:de:35:13:6a:d4:
a8:9b:16:b9:9b:0f:98:dd:2a:d6:70:28:0d:77:3f:
ee:4e:c5:90:27:8a:2e:c3:ac:c3:90:90:06:94:70:
af:e8:79:ad:5b:37:e2:a5:88:68:b7:2b:1f:37:6b:
c7:f7:d9:66:3e:50:27:46:66:63:86:1a:c4:f3:d5:
e7:d8:dc:c6:9e:66:be:d5:a4:2c:32:f4:4e:c1:a0:
80:b3:5d:b6:f8:18:82:e5:2d:ee:95:be:30:96:c9:
f7:cc:e0:d7:95:ae:f3:13:6a:58:21:de:86:1e:ec:
0a:e6:5f:86:06:eb:5c:cc:a1:d2:71:05:90:55:b4:
d5:7d:7c:bf:a2:c7:f0:0c:e6:5f:c0:fc:29:19:84:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:67:7D:0A:88:BC:A7:7E:35:4E:F2:98:07:6D:46:93:77:91:89
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/oHZnfQqIvKd-NU7ymAdtRpN3kYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.152.0-193.150.164.255
Signature Algorithm: sha256WithRSAEncryption
1c:88:24:1d:f0:ab:46:44:b3:87:73:95:8c:2c:6f:69:22:96:
a7:62:83:91:ec:1e:14:ab:48:af:41:d8:5f:6d:e7:af:db:63:
66:f9:ae:a0:52:7e:1b:07:05:e7:a7:ef:87:8d:ab:e2:52:dc:
27:c7:53:88:f4:88:eb:b4:16:3e:dd:0f:5d:1a:f7:2f:f5:32:
6f:22:3b:64:41:9f:3e:4b:55:ee:c5:70:1b:ec:2a:7b:a6:7b:
94:1f:bc:6b:66:70:1d:7f:53:66:2f:3a:48:15:99:8a:d9:ab:
fc:31:54:88:47:81:27:c8:4b:c5:df:2b:90:63:a6:60:5d:95:
bb:bc:05:73:4e:69:32:dd:d4:8c:5e:9e:a5:77:4d:1a:a9:f8:
2f:d3:56:74:ff:45:4f:bc:cf:23:54:9e:c4:5b:64:65:91:e2:
c8:1f:7b:3b:5b:0d:82:0e:62:f4:51:ad:ec:c8:49:73:4d:cc:
d7:0b:56:db:50:e0:35:b4:1b:5e:7f:ab:08:15:f7:0c:29:3e:
04:c2:a7:fd:e3:6a:f2:0a:77:45:37:90:e3:e1:43:0d:10:0c:
dc:71:01:58:85:87:ca:26:90:87:f8:7c:5c:68:24:d9:52:77:
e6:88:7b:33:eb:c3:07:05:f0:15:21:ad:38:39:05:26:b9:58:
44:bd:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:21 2025 by rpki-client