Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/xdDe3nIDzeQmtPXR8lzj_VyL8Rs.roa
File: xdDe3nIDzeQmtPXR8lzj_VyL8Rs.roa (raw, json)
Hash identifier: h4LFYS/y9Q23RlO7NBfyA9PndM25OioyAGXbo44B7n0=
Subject key identifier: C5:D0:DE:DE:72:03:CD:E4:26:B4:F5:D1:F2:5C:E3:FD:5C:8B:F1:1B
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 018CC795151EA01778E3A5E78AEC83D70949
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/xdDe3nIDzeQmtPXR8lzj_VyL8Rs.roa
Signing time: Tue 02 Jan 2024 00:31:25 +0000
ROA not before: Tue 02 Jan 2024 00:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44211
IP address blocks: 195.93.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:15:1e:a0:17:78:e3:a5:e7:8a:ec:83:d7:09:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jan 2 00:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5d0dede7203cde426b4f5d1f25ce3fd5c8bf11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:a1:ef:35:95:1e:35:17:ab:db:1e:c6:d4:
16:38:9a:bc:89:39:64:fe:42:da:f7:7c:87:12:84:
23:8b:e1:5c:81:92:43:c0:84:74:7e:93:bd:11:11:
55:56:95:d9:2d:b6:74:47:50:51:63:04:df:45:32:
83:e3:06:0e:da:56:68:33:01:ac:81:e5:76:48:91:
d7:bb:04:e2:9a:4b:16:f7:28:d8:1b:e9:54:23:45:
23:04:17:59:54:ac:0e:6b:7d:29:e5:89:35:11:26:
95:02:b4:e2:a2:df:b9:ed:bb:4e:bc:e5:2b:5e:e4:
2e:63:5c:b0:f6:bd:8f:4d:c7:eb:19:45:12:fd:5f:
dc:58:74:74:9b:3f:68:c6:63:32:4d:9c:ab:4b:ec:
8d:15:0b:9d:49:2a:5b:e1:b5:15:c1:f3:11:58:97:
e8:15:15:e5:06:38:f9:f6:c0:c8:33:9a:60:e9:0b:
50:ef:59:ba:70:72:76:b4:2a:2b:8e:d5:22:5a:3c:
5e:e6:72:1d:7a:ee:d8:5e:80:0b:3d:c0:8b:9b:d5:
f5:21:49:dc:4b:e4:03:02:80:96:68:82:1d:7d:e9:
c0:7e:6c:40:41:d6:62:d1:10:f0:f4:c9:ed:77:92:
a3:3d:ab:7a:2a:a3:7b:4e:9d:9e:8a:a7:80:10:42:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:DE:DE:72:03:CD:E4:26:B4:F5:D1:F2:5C:E3:FD:5C:8B:F1:1B
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/xdDe3nIDzeQmtPXR8lzj_VyL8Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:45:f5:4f:54:d4:e3:09:fc:a5:d5:50:f5:66:dc:b5:1e:2d:
ff:2f:67:2f:ab:30:70:13:ce:9b:0d:04:a9:ed:eb:85:46:98:
7b:69:90:02:ba:2c:92:c3:fe:a5:b6:20:5a:27:04:e5:a4:ab:
a0:f5:92:de:a6:1a:f2:88:da:b0:19:7d:34:d9:3e:3e:7e:a2:
86:36:1c:95:40:56:9e:b9:64:58:32:92:50:43:ef:b9:df:b0:
c2:68:a5:3c:81:4c:bd:cd:c1:6b:2f:57:27:90:76:9e:c7:b4:
e3:ad:7f:b4:c0:37:ac:eb:5a:68:2f:dd:4a:6b:67:15:f4:fd:
a9:75:b4:43:32:dd:3c:28:b2:47:92:9d:9b:26:28:34:f1:91:
8e:6d:c1:4d:27:0d:94:fe:5f:ec:a8:16:bc:6f:b9:6b:a5:a2:
56:05:d6:d2:86:f7:71:7b:49:8b:b9:68:10:be:5a:f5:13:db:
ed:3e:53:5c:9f:12:96:e8:06:a4:4b:76:49:4e:d7:b4:e2:d4:
62:7f:65:b4:ff:ed:16:02:62:fa:dd:79:0e:33:b0:e1:80:74:
e5:5a:79:0e:25:2f:45:22:29:a8:58:61:e0:d8:f0:8b:5e:bf:
03:74:f7:d6:f1:ed:a6:6e:20:f6:09:86:69:55:3d:64:42:56:
4e:9a:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:31 2025 by rpki-client