Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7lTzxPENQum62Xl2cpX1MuarGFE.roa
File: 7lTzxPENQum62Xl2cpX1MuarGFE.roa (raw, json)
Hash identifier: +6Q9NmCtGCe9hZAGgyWVXJgGHjM/yrH9ubOXSvtSDy8=
Subject key identifier: EE:54:F3:C4:F1:0D:42:E9:BA:D9:79:76:72:95:F5:32:E6:AB:18:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194B86AB0653901CA014D37A93D9BFC5CC8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7lTzxPENQum62Xl2cpX1MuarGFE.roa
Signing time: Thu 30 Jan 2025 18:13:07 +0000
ROA not before: Thu 30 Jan 2025 18:13:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.88.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:6a:b0:65:39:01:ca:01:4d:37:a9:3d:9b:fc:5c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 18:13:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee54f3c4f10d42e9bad979767295f532e6ab1851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:6e:b5:a6:08:21:a6:4f:23:b5:0c:e2:7b:
72:61:93:47:f5:12:d4:c7:5d:35:6b:93:ca:12:c5:
d5:37:29:f3:03:e1:39:66:bf:9c:00:a8:74:fa:15:
f8:5e:61:1a:d1:08:3d:b7:ac:67:51:46:d6:a0:b1:
c0:b4:21:30:c3:31:57:11:b4:65:ea:17:3f:a6:21:
9b:b0:97:b3:43:2f:7f:3d:67:e8:b0:f0:90:90:5e:
94:93:b0:0f:e1:77:5e:b0:93:5c:26:f8:54:ec:48:
f7:b9:da:d9:69:ee:73:11:e0:b3:79:2c:06:2c:14:
ba:cf:97:fe:75:56:61:ef:ae:9a:16:0a:05:fc:f8:
1d:ef:ac:32:48:b6:11:16:db:ec:cc:1b:76:ac:fe:
86:72:d9:52:73:d4:08:ad:af:b5:9a:3a:2f:e0:8d:
8d:4a:33:cc:4b:ed:09:ea:58:5a:0c:34:c6:03:70:
0a:99:8f:24:e9:62:c7:86:ea:fe:58:1c:ae:03:5f:
d8:56:1f:c3:47:2a:49:c3:54:12:61:26:19:2b:ad:
89:5b:4c:e3:94:5c:35:5b:32:6c:bc:64:11:79:d1:
52:ba:ed:88:e8:90:af:4a:0c:1e:9d:94:12:14:20:
40:b9:2b:1f:79:05:24:03:e6:f4:3e:38:ff:ab:c0:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:54:F3:C4:F1:0D:42:E9:BA:D9:79:76:72:95:F5:32:E6:AB:18:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7lTzxPENQum62Xl2cpX1MuarGFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.204.0/22
Signature Algorithm: sha256WithRSAEncryption
54:33:84:08:f8:5b:47:0a:3b:41:21:78:e2:e3:ed:60:d7:5b:
d8:ad:c8:52:2c:0a:d4:06:90:ff:ec:b7:c5:f8:ff:dc:42:4a:
74:2e:ad:09:3c:7a:c0:d6:86:c7:df:2d:2d:18:b1:4d:46:a9:
cb:6b:77:7c:ed:a5:2e:93:40:20:e0:42:a6:92:78:2f:ef:3f:
11:1c:d0:cb:1a:84:12:0f:82:10:be:73:86:5c:d8:a6:a3:c9:
31:c0:db:a8:c9:3a:53:87:81:18:d1:67:66:42:b1:4d:5e:ba:
fc:09:cd:0c:85:95:78:b4:96:7a:1c:71:de:e8:ef:29:b8:d7:
71:fc:15:f7:f5:3b:fd:20:e9:1c:5c:5e:37:3e:a4:67:98:48:
d8:b0:b3:2e:59:d5:81:4f:46:8b:6b:ff:d3:5c:1c:fd:07:a0:
30:b8:d3:7b:e2:d9:e6:a4:eb:4b:be:d0:ff:c7:7d:02:3a:8f:
f1:d3:ee:41:a6:36:05:62:bb:d0:2b:21:c1:e8:63:35:b7:d1:
7c:c5:23:df:c2:19:7f:fa:de:c4:ac:9a:1d:6a:4d:c8:8b:86:
59:79:40:06:19:16:d9:6e:41:71:44:ab:5a:df:13:52:7a:a9:
9b:0d:14:f2:03:b8:1f:e6:a2:dd:f8:0d:46:50:bc:4f:0c:2c:
5e:55:27:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:21:23 2025 by rpki-client