Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/lX65egeFWwbalEnYLVBWhQmEak4.roa
File: lX65egeFWwbalEnYLVBWhQmEak4.roa (raw, json)
Hash identifier: Y03XwE1obPrgfIKFQmD0Dl/wZ4A8zRqDa9g2Ncrwcek=
Subject key identifier: 95:7E:B9:7A:07:85:5B:06:DA:94:49:D8:2D:50:56:85:09:84:6A:4E
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019034351D2E1F6B51038AAD28DA130F9D05
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/lX65egeFWwbalEnYLVBWhQmEak4.roa
Signing time: Thu 20 Jun 2024 05:53:34 +0000
ROA not before: Thu 20 Jun 2024 05:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41923
IP address blocks: 193.34.56.0/23 maxlen: 23
193.34.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Nov 2024 11:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:35:1d:2e:1f:6b:51:03:8a:ad:28:da:13:0f:9d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Jun 20 05:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=957eb97a07855b06da9449d82d50568509846a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:34:e1:a9:20:46:b3:73:36:61:a3:3d:1a:
49:dd:16:b5:92:ac:6a:f5:97:f3:a0:2a:50:ee:ca:
e6:25:10:7f:7a:c3:94:61:c2:e8:37:22:59:2b:9f:
80:b0:0e:cf:c1:27:3e:17:5e:f2:a9:6b:c0:ed:4d:
af:c1:3d:17:59:e2:3a:ca:04:1d:7a:2c:e7:91:cb:
63:f1:49:57:89:fb:7f:38:e0:60:30:65:3c:ec:24:
a5:0a:71:e3:3c:90:29:c0:4f:b2:97:17:26:bf:e0:
6f:99:7a:a3:92:9a:c7:5e:c6:b2:07:e0:7e:c7:be:
46:0f:f6:b6:54:65:7f:03:08:85:74:24:b4:9e:53:
a7:9c:18:4e:c7:64:aa:06:10:e2:0f:f2:5b:cd:81:
25:61:9b:9d:b5:d5:a1:7b:b6:3e:b1:f0:f1:c1:e7:
be:f7:5d:35:d3:7e:c7:e8:aa:c0:ca:a6:eb:43:7b:
76:96:0c:c4:46:98:da:66:31:0f:7d:2a:19:55:06:
1e:4f:1f:c6:ec:f1:e9:f8:6a:c0:f3:17:24:f4:b6:
dc:a8:0c:be:6c:e5:79:ad:dd:40:2d:32:8a:ce:13:
58:92:da:25:70:10:a8:12:5f:95:dc:22:c4:fc:a5:
b9:2d:85:4c:27:67:a9:6c:35:b5:72:b7:a6:31:09:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:B9:7A:07:85:5B:06:DA:94:49:D8:2D:50:56:85:09:84:6A:4E
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/lX65egeFWwbalEnYLVBWhQmEak4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.56.0/22
Signature Algorithm: sha256WithRSAEncryption
03:89:d0:03:82:7f:fc:50:eb:20:8e:dc:7b:13:14:70:dd:51:
bc:c5:21:da:cf:6d:e1:23:87:fc:02:4b:65:23:a3:2b:f2:88:
56:04:61:16:57:f6:49:1a:54:26:8b:7a:a5:25:be:94:a6:23:
8f:9f:f2:b4:30:56:96:fe:e0:da:53:2c:e0:07:aa:91:d1:e2:
63:cd:90:e2:36:ec:b5:3a:cd:3f:8f:a9:0d:46:8d:ae:56:c5:
55:58:a8:ba:13:50:fb:57:cf:a4:cf:f9:5d:4d:45:42:bf:41:
9d:b4:8e:67:22:e3:01:eb:f0:dd:36:d1:4e:50:bc:46:e3:6e:
f4:ad:dd:09:77:60:46:c4:6f:59:34:1d:00:d1:51:b0:2e:f2:
d8:ea:50:e7:ac:d7:ab:11:25:2e:46:fd:b9:32:61:fd:6d:3d:
d3:f2:bd:d3:3c:6f:c2:9f:c0:86:f7:f2:aa:15:dc:ca:44:6f:
f2:dc:47:5c:5d:6a:03:0d:0d:34:dd:44:be:60:8e:67:e4:69:
d9:31:38:52:b1:a7:55:d1:8e:74:f8:69:ea:af:7d:fd:0c:10:
2e:9f:6c:b6:77:06:61:a7:a0:47:36:48:de:40:2e:61:c0:ad:
a3:46:b4:0c:d4:3f:45:61:40:b1:34:ad:9b:4f:15:2b:ff:33:
78:f3:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:27 2025 by rpki-client