Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CedTTGao53gLlQuVSm_RqTnf6HE.roa
File: CedTTGao53gLlQuVSm_RqTnf6HE.roa (raw, json)
Hash identifier: dEIPaZ3lbdWqRVXawTmo73sDjZeYFYIey4MMEIFGbq8=
Subject key identifier: 09:E7:53:4C:66:A8:E7:78:0B:95:0B:95:4A:6F:D1:A9:39:DF:E8:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01953DA20795837DE58DC45FD0B4FBC08014
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CedTTGao53gLlQuVSm_RqTnf6HE.roa
Signing time: Tue 25 Feb 2025 15:03:03 +0000
ROA not before: Tue 25 Feb 2025 15:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198831
IP address blocks: 93.88.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 16:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:a2:07:95:83:7d:e5:8d:c4:5f:d0:b4:fb:c0:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 25 15:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e7534c66a8e7780b950b954a6fd1a939dfe871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:f5:af:8d:7e:db:95:74:01:07:49:ad:13:
15:1b:93:14:96:4e:47:21:e4:7b:21:83:d9:fc:f9:
46:a8:9e:d9:8c:af:ac:fe:6a:eb:79:17:b0:5b:54:
e5:c0:cf:52:8c:8f:9f:1c:ec:32:c6:6d:63:a6:95:
76:a3:3b:b0:be:93:86:2e:82:03:b4:7e:46:ec:d6:
58:fe:ec:51:a2:19:c8:8c:18:5c:31:77:49:33:b2:
b3:9c:3f:07:af:85:05:df:7b:23:fc:40:cb:cf:35:
7f:24:e4:94:48:c3:77:21:ff:d4:04:b8:89:3c:a2:
ea:22:ad:9b:7a:6e:4f:c7:fb:9c:ca:dc:6a:21:de:
6d:75:c7:59:76:a9:33:c4:da:fd:df:e2:f5:e0:87:
2d:ef:14:bd:5e:08:15:20:97:fc:a3:ab:a9:7c:ed:
f5:b4:a3:db:df:9c:33:89:bb:13:1f:92:29:1c:01:
5d:40:4a:c2:4d:ff:44:5c:83:2a:95:a5:32:4a:59:
13:a9:7b:1a:f6:f1:7f:49:09:e5:6d:cc:6c:df:7f:
08:63:30:14:c7:b0:65:0b:f3:94:81:b2:9b:51:e5:
3c:87:95:ba:1b:bb:b4:98:92:2b:23:21:36:04:c3:
1a:32:61:26:d4:b4:70:4a:36:85:0a:91:2d:11:7b:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:53:4C:66:A8:E7:78:0B:95:0B:95:4A:6F:D1:A9:39:DF:E8:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CedTTGao53gLlQuVSm_RqTnf6HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a7:bb:41:9a:89:73:e5:03:87:e9:7c:df:86:f8:5d:9b:40:
d6:8d:30:8b:ae:ad:b8:2c:7c:29:3e:ae:e4:9c:ee:8a:e0:9f:
b6:9e:c4:f6:a5:33:6e:20:f6:01:12:5a:d4:bb:a5:7d:a1:43:
7f:18:b0:ed:f9:14:99:a2:66:a0:1e:a0:57:7f:1e:0b:2b:2a:
04:30:cd:a3:b6:87:0e:1a:78:a4:e5:39:4c:10:b2:10:c5:4a:
db:c4:bd:e4:57:ee:1f:bd:ee:f2:d1:ac:7f:bf:31:17:4f:92:
a9:43:0d:db:b7:92:18:6d:d1:23:61:12:1c:1f:fc:84:17:17:
2a:a7:45:b2:a6:22:f7:0c:fd:ac:8e:72:08:2c:54:10:42:56:
0f:20:06:d8:e2:d1:8b:a8:b8:da:4e:b2:ee:5c:2c:6b:f5:96:
5d:07:39:fb:33:11:f8:2d:81:f1:85:2f:1c:20:a5:17:0c:13:
a0:ae:e5:af:e4:3a:63:5b:45:fd:97:06:c2:1a:eb:24:07:3b:
e4:fa:3d:d1:8d:10:fa:bb:ab:46:43:db:c7:98:fd:01:ea:74:
f3:a2:f4:c5:af:5c:8b:aa:5a:dc:65:29:d7:80:5c:e4:19:3e:
b1:82:f0:49:8b:96:3b:b6:5d:41:03:f3:ce:55:a8:cc:55:35:
86:c8:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:05 2025 by rpki-client