Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l_QpNWgVPOB-B56Y0oZSFb6Atug.roa
File: l_QpNWgVPOB-B56Y0oZSFb6Atug.roa (raw, json)
Hash identifier: /VnGbW4Y9xlg5NKbwKqCT/mDXlfMpOnQpt8i9DmZRLM=
Subject key identifier: 97:F4:29:35:68:15:3C:E0:7E:07:9E:98:D2:86:52:15:BE:80:B6:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194CB7E5516AA9995FBA373C739AC724E85
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l_QpNWgVPOB-B56Y0oZSFb6Atug.roa
Signing time: Mon 03 Feb 2025 11:07:21 +0000
ROA not before: Mon 03 Feb 2025 11:07:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 93.88.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 18:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:7e:55:16:aa:99:95:fb:a3:73:c7:39:ac:72:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 3 11:07:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f4293568153ce07e079e98d2865215be80b6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:90:46:e6:4a:35:1e:53:a4:42:01:a6:c5:
0f:5a:c5:f7:2d:39:cd:21:2c:1d:3a:a1:b5:2f:6c:
ca:2b:0b:83:df:67:5b:c4:d2:43:ed:5a:56:c7:7e:
d3:e1:50:88:73:cf:41:65:25:c7:55:97:f6:0d:f0:
48:40:7a:ca:b6:48:70:d3:fc:f6:b5:94:06:1e:f4:
ec:6d:9d:5f:f0:73:f8:b2:38:42:5c:3e:b1:97:78:
c9:e6:6d:88:1d:d4:4b:32:80:70:91:79:2e:f2:b2:
46:79:e9:54:f2:38:39:c2:e1:c4:66:52:82:f7:e4:
f6:5e:75:35:53:4d:f7:6a:e1:d5:ae:70:6e:a1:fe:
7b:c7:a6:96:9b:32:b5:1d:70:e2:56:60:d8:1c:4b:
c8:ec:f5:5b:25:cf:81:9c:00:59:69:c4:8b:3b:c8:
58:79:a7:ab:46:6b:65:ca:3f:68:41:18:3a:92:47:
c1:db:a3:2c:a7:75:39:a3:4b:70:5f:4d:bf:57:ee:
61:eb:f6:48:b8:54:3f:99:95:2b:8f:4e:1a:e5:41:
db:71:57:7a:60:1b:fa:94:de:d2:98:64:04:ea:da:
71:18:37:69:fb:ff:6e:f5:06:b8:dd:d1:4b:44:a7:
58:89:fa:a6:c0:a3:35:ae:5b:c5:6e:2b:74:4d:4e:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F4:29:35:68:15:3C:E0:7E:07:9E:98:D2:86:52:15:BE:80:B6:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l_QpNWgVPOB-B56Y0oZSFb6Atug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:e5:91:4e:2c:00:cd:6a:cc:36:9c:c6:ce:0f:95:84:04:65:
03:a3:e6:4c:89:e2:e1:f0:f0:59:96:44:4f:e7:95:2d:9b:ad:
31:4e:8c:9a:2d:b5:62:76:b7:bb:f9:71:d8:50:69:8e:51:20:
e9:04:b9:4a:7d:5b:38:64:9e:fb:ba:86:b2:6a:4c:2e:d1:4e:
06:b3:07:da:ea:45:b5:10:2a:2f:17:22:2d:f1:7c:cf:fa:61:
3c:b1:2e:4b:95:7b:e3:5e:c3:77:0e:e4:a4:b3:c2:a0:7e:91:
6b:71:01:2c:16:d9:cb:47:34:34:7f:69:61:6b:47:3c:c9:e4:
cd:52:12:0c:80:88:3f:86:70:ed:1c:5b:16:b8:83:02:81:3c:
f4:e4:a9:e5:62:c7:40:6b:c5:84:b4:68:af:0e:89:e1:bb:c8:
ec:84:45:0f:4c:6a:d2:e3:69:f1:89:d9:79:cc:a3:59:8d:24:
11:0f:a3:8f:c1:f2:ef:eb:df:72:be:57:ee:91:23:88:fb:18:
13:26:81:14:06:e5:88:ea:2d:19:ab:d8:82:f4:27:a9:4e:95:
52:c0:b0:6e:ab:65:cb:d4:d4:51:88:08:db:bf:d3:bc:f4:50:
c1:99:60:a0:8d:2a:6c:5f:84:1b:cf:a1:87:10:eb:64:30:25:
61:0b:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:25 2025 by rpki-client