Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/T43bpD0NLG6c8leFevtSo4e93Ic.roa
File: T43bpD0NLG6c8leFevtSo4e93Ic.roa (raw, json)
Hash identifier: JzPQsGQ7I3dUjfjv2L6a5FD8eIpFhzegxiWiAOwM0rE=
Subject key identifier: 4F:8D:DB:A4:3D:0D:2C:6E:9C:F2:57:85:7A:FB:52:A3:87:BD:DC:87
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 0193729C5C5A7F4BBA05B7D961F714B033CE
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/T43bpD0NLG6c8leFevtSo4e93Ic.roa
Signing time: Thu 28 Nov 2024 11:51:10 +0000
ROA not before: Thu 28 Nov 2024 11:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41923
IP address blocks: 193.34.56.0/23 maxlen: 23
193.34.56.0/24 maxlen: 24
193.34.57.0/24 maxlen: 24
193.34.58.0/23 maxlen: 23
193.34.58.0/24 maxlen: 24
193.34.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:9c:5c:5a:7f:4b:ba:05:b7:d9:61:f7:14:b0:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Nov 28 11:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f8ddba43d0d2c6e9cf257857afb52a387bddc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:76:52:13:1c:a9:1b:c3:8c:24:69:81:75:
54:ff:72:71:de:4e:e6:1e:81:82:bf:68:93:05:1f:
e7:67:8b:d5:fc:21:3b:bc:39:1c:ce:e9:1a:1c:61:
a3:2b:a8:bd:5a:9a:49:b0:83:82:fd:5a:17:51:d5:
e2:f5:1f:97:a9:28:fe:4f:7e:00:78:e5:f7:53:d1:
d9:48:1b:c1:fd:93:d5:4f:b1:a1:31:8e:49:19:af:
d0:5e:86:ec:cd:5f:13:d0:3b:3d:d0:2c:bf:91:3a:
07:aa:9b:52:9f:e4:03:a1:9d:8f:12:8e:01:b0:60:
33:cc:a8:6d:6f:f8:eb:b0:e0:fa:59:ad:68:5b:3b:
96:d9:ba:bf:b1:35:2c:a7:dd:d4:25:0d:69:e4:fc:
1e:b5:2c:30:0a:3f:9b:30:f2:b4:9e:2a:33:00:19:
f7:3b:ca:7b:a8:0e:bc:68:8c:5f:e5:8b:ce:38:e9:
2a:8b:ec:29:90:c0:ca:37:e0:c9:b1:92:99:87:27:
24:1b:3e:e1:c9:b3:cc:c9:49:3e:a3:3c:a6:ff:47:
2e:e7:71:8f:3e:e2:08:f3:19:9b:a1:70:56:8d:14:
8b:fb:2b:be:d9:d0:4b:e0:29:04:7c:d1:09:fe:9c:
06:e4:b4:82:0c:96:e1:e5:7c:1b:90:30:dd:1b:79:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:DB:A4:3D:0D:2C:6E:9C:F2:57:85:7A:FB:52:A3:87:BD:DC:87
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/T43bpD0NLG6c8leFevtSo4e93Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.56.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:9e:75:13:fe:c2:53:83:f7:09:47:1a:c7:bc:cb:ac:88:b9:
c1:f1:a4:55:48:94:b3:9c:28:31:0a:ab:7c:c6:c1:0b:c6:1e:
fa:70:55:cf:2f:a7:7b:24:91:c7:7b:48:5c:bc:d8:11:27:83:
c3:3c:28:77:7b:08:3e:36:6b:52:4a:7a:1d:16:fa:dd:b8:2a:
ac:71:09:d7:56:64:6f:88:d9:08:8b:90:53:93:92:40:d5:24:
2f:da:bb:9b:af:28:81:57:82:90:c8:4e:38:e9:61:0c:b5:2f:
a0:7f:b2:2c:78:cf:d1:d7:95:9e:48:c6:7e:18:aa:72:fc:c8:
d4:19:70:68:48:dc:28:e9:c6:38:2f:a0:25:03:30:a8:b8:ed:
be:fb:09:70:30:3f:f8:d5:90:fe:54:c5:90:91:97:cb:c6:84:
e6:3c:84:cb:e9:65:04:4f:de:89:e1:86:72:c0:26:70:96:39:
1c:7c:d4:e7:46:0a:4c:b6:b2:11:79:b0:19:09:29:bb:27:97:
a6:80:66:d8:fa:14:b6:05:e1:ee:a8:17:8f:10:bf:1b:99:a1:
0d:25:da:67:bb:eb:2a:78:22:41:09:ea:4b:a7:e2:6b:f7:90:
c2:ab:d0:f4:91:6c:9f:ed:22:2c:b7:48:08:42:79:66:e4:04:
48:1b:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:01 2025 by rpki-client