Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HTp1R8bLzZgpw1iC8SUwTiZ464Q.roa
File: HTp1R8bLzZgpw1iC8SUwTiZ464Q.roa (raw, json)
Hash identifier: dqPAvT6tHbF7neJLesnd+OLK8AllI9CUfGotk6edWNE=
Subject key identifier: 1D:3A:75:47:C6:CB:CD:98:29:C3:58:82:F1:25:30:4E:26:78:EB:84
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0193B9EFD6F051BC351D5B55799D6DEFA7BB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HTp1R8bLzZgpw1iC8SUwTiZ464Q.roa
Signing time: Thu 12 Dec 2024 08:15:23 +0000
ROA not before: Thu 12 Dec 2024 08:15:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57371
IP address blocks: 93.171.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:ef:d6:f0:51:bc:35:1d:5b:55:79:9d:6d:ef:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 12 08:15:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d3a7547c6cbcd9829c35882f125304e2678eb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:ee:9b:53:9a:8a:d6:cd:11:76:e9:e4:86:
b9:53:7c:f6:d7:2b:75:28:74:ec:d0:17:5a:aa:5f:
cd:12:52:23:8a:69:fd:91:37:25:dd:76:0a:90:87:
6b:68:7b:ec:77:46:83:40:a9:70:da:88:fc:7c:b9:
ab:25:73:67:e7:08:a9:a2:ab:9f:c3:71:87:42:f5:
8a:9a:5f:bb:74:38:ba:0f:05:4a:66:24:33:42:f3:
a8:9e:62:55:40:d3:eb:fb:7d:28:54:1f:a8:5a:18:
d9:bb:6a:27:e5:b0:25:32:fb:33:e4:60:50:4b:ce:
2d:79:2c:b9:82:a9:85:a4:94:05:51:6d:6f:9c:58:
8e:9f:58:38:fe:04:43:18:2a:fd:05:33:5d:ae:4c:
8f:85:97:22:26:c1:d9:c0:9c:2c:61:9a:94:b8:52:
e6:01:78:03:02:34:99:4e:c6:da:c0:52:5e:66:ff:
b4:c2:bf:d1:5c:13:91:68:47:d3:78:c8:ba:31:9f:
94:17:da:52:82:9c:24:f5:0d:aa:71:59:be:c2:24:
6c:a4:da:68:49:77:8e:90:97:1c:e9:19:55:ba:09:
e7:ba:7e:c2:3c:58:20:f8:e0:ef:3d:2c:2a:4e:de:
01:1e:4a:5f:2a:cd:d8:aa:84:00:f5:8c:4a:ce:92:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:75:47:C6:CB:CD:98:29:C3:58:82:F1:25:30:4E:26:78:EB:84
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HTp1R8bLzZgpw1iC8SUwTiZ464Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.144.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:c1:75:d6:7c:40:11:76:d5:c9:0c:8e:01:23:5c:b3:98:a5:
9e:50:74:c7:38:9a:b6:42:8f:77:8a:a4:e9:bf:c0:89:61:63:
f9:28:8c:2e:d8:de:11:ae:98:c3:30:ab:7e:ed:39:51:d8:a0:
5a:ec:7e:95:37:64:3c:6d:36:7f:54:a8:a3:05:85:c8:52:8e:
c7:4f:18:6c:ae:76:73:6d:e2:d1:a2:f7:cd:3e:a4:19:d2:14:
2c:4b:8f:59:3a:6a:38:81:d5:ca:a1:77:c1:98:04:88:51:80:
22:7b:ec:02:35:37:21:62:7f:5e:e4:50:c7:67:05:53:72:6d:
a5:c4:ee:29:e8:f4:ec:d2:18:45:13:ad:c9:6d:45:49:5a:cd:
bf:95:d0:d8:6e:03:36:0e:8e:2b:32:98:7e:22:a8:b4:5c:a3:
b0:7e:3c:84:4b:2c:ad:f9:a5:2b:81:06:a0:04:46:b1:9c:a5:
9e:a5:88:31:33:33:78:67:51:30:8c:f0:32:3c:2d:0b:5f:84:
2b:5f:85:8d:4a:d9:75:96:d3:96:1a:b4:66:1f:19:0a:9c:60:
b6:77:7f:ec:9e:a3:36:b4:43:e5:87:31:8d:24:77:2d:2a:11:
54:29:a5:7b:e5:f4:73:10:dc:45:d2:19:4d:91:f4:8b:1c:c8:
38:15:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:34 2025 by rpki-client