Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/023sihyz6k4LxzMjVPq_IQZm1xk.roa
File: 023sihyz6k4LxzMjVPq_IQZm1xk.roa (raw, json)
Hash identifier: rzdpK+a/zXmJS7L6BHtZfwDcS2d0P9EtLAAkNC9EOg8=
Subject key identifier: D3:6D:EC:8A:1C:B3:EA:4E:0B:C7:33:23:54:FA:BF:21:06:66:D7:19
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 0193DE868D17D25C83C69F9FCC3732CC054C
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/023sihyz6k4LxzMjVPq_IQZm1xk.roa
Signing time: Thu 19 Dec 2024 10:46:20 +0000
ROA not before: Thu 19 Dec 2024 10:46:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215082
IP address blocks: 77.93.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:86:8d:17:d2:5c:83:c6:9f:9f:cc:37:32:cc:05:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Dec 19 10:46:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d36dec8a1cb3ea4e0bc7332354fabf210666d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:55:fd:2f:a0:ae:8f:17:38:1f:6f:04:ee:
74:2e:d5:ff:1a:0e:ed:c4:37:0e:04:ba:4b:f6:4b:
ae:c6:01:2f:a1:ef:e7:0d:9a:ac:38:d5:0d:c2:3a:
a1:40:ea:a0:9d:41:86:85:22:89:8a:f7:b6:83:21:
4a:b1:72:28:bd:3d:f0:81:d9:37:5c:4e:60:88:ba:
68:e0:c1:bc:35:92:c7:9f:b0:80:45:d0:e3:26:d0:
c4:1d:bf:bc:74:35:df:7f:46:be:ec:c8:5b:53:e7:
69:61:7c:9b:4c:86:29:e3:6e:ec:dd:64:fe:7d:4d:
02:7e:29:fa:c6:b6:c4:40:ff:ca:20:71:aa:ad:4a:
49:95:2a:58:ec:cc:9b:08:65:1a:7a:99:f7:e9:dd:
fc:4a:08:5e:c0:3b:46:49:22:a9:a6:4d:cc:c6:87:
ef:34:c7:44:ca:12:ef:65:bb:bc:dd:52:9f:c1:2a:
37:2d:d5:d7:f5:72:bb:46:fe:15:a7:f2:95:a0:98:
dd:2b:0d:37:61:a0:51:80:26:35:66:07:4f:fc:fd:
28:cf:e4:df:92:3d:02:e2:38:28:74:99:73:12:06:
7b:5d:96:ff:6b:52:0d:d8:d1:fe:b1:1e:35:9e:2f:
88:cd:c6:6c:d3:38:b0:82:f1:72:b9:9a:c3:de:aa:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:EC:8A:1C:B3:EA:4E:0B:C7:33:23:54:FA:BF:21:06:66:D7:19
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/023sihyz6k4LxzMjVPq_IQZm1xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4c:40:7f:b0:d1:5e:9c:6f:ff:44:57:36:49:52:cf:45:21:
03:42:ad:1c:22:f0:d7:41:c0:25:8f:06:05:54:1e:7d:5c:b5:
10:0d:54:5a:52:ee:8a:ec:6a:e9:41:8a:51:d9:c7:94:60:ae:
27:94:51:ba:e3:d6:01:ba:c8:eb:ac:69:2a:dd:cf:cc:af:b4:
63:54:d3:27:0c:67:8f:77:5b:c8:d3:61:29:11:70:7f:c5:ae:
f3:53:d1:b2:96:1e:c3:ec:76:6b:d3:83:cb:14:b6:42:bb:bf:
e1:2f:e2:d8:76:31:5c:0d:13:c5:09:05:19:45:a8:f1:06:4f:
d4:98:14:00:41:54:a3:da:7e:3e:88:ff:eb:81:f0:1b:81:88:
e3:aa:eb:19:54:f9:96:9c:f9:9a:3a:a6:95:5a:5f:69:40:7f:
98:76:4f:12:fd:b2:a8:66:32:36:e0:d9:f7:e7:af:b8:c4:87:
21:99:37:e0:09:63:44:50:40:c3:81:82:a7:90:fc:b6:39:2f:
a1:c4:da:84:69:da:1c:bd:4e:b3:9f:ac:06:6c:05:f8:e7:94:
4f:e1:c3:38:63:1a:0a:17:02:ea:97:45:8b:ec:74:e0:f3:12:
29:88:c2:ad:14:a0:f4:05:28:7d:8c:67:b5:80:05:d0:83:5b:
16:99:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:57:24 2025 by rpki-client