Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/5umaz0qktz_P0scu_YwKhm-isDI.roa
File: 5umaz0qktz_P0scu_YwKhm-isDI.roa (raw, json)
Hash identifier: 8kWQDvVBr02Gb2a7CkKq3YIqsYFrbNlrwfbddrcBG/c=
Subject key identifier: E6:E9:9A:CF:4A:A4:B7:3F:CF:D2:C7:2E:FD:8C:0A:86:6F:A2:B0:32
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 01938386CECD79540AFBE205FDF29DDA94D3
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/5umaz0qktz_P0scu_YwKhm-isDI.roa
Signing time: Sun 01 Dec 2024 18:41:10 +0000
ROA not before: Sun 01 Dec 2024 18:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214042
IP address blocks: 193.37.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:83:86:ce:cd:79:54:0a:fb:e2:05:fd:f2:9d:da:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Dec 1 18:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e99acf4aa4b73fcfd2c72efd8c0a866fa2b032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:9d:64:90:80:c2:42:6c:c2:15:07:6a:0a:
b1:c0:b9:18:5f:31:a5:59:ae:23:04:75:b4:8f:14:
ce:81:9d:8a:34:96:c0:83:8f:f7:de:39:c1:ac:e8:
d6:88:c2:7e:10:d3:d9:b7:57:7a:c3:5d:ca:d8:93:
d5:36:c1:bd:a2:54:9c:ad:b2:55:6a:9b:27:c2:5c:
01:01:a9:4a:92:9e:22:e2:de:56:d0:cd:6f:87:2e:
ee:7b:19:66:ed:fa:c3:40:6f:df:3f:fc:aa:39:06:
a4:5e:49:95:bc:55:d5:07:fb:a3:10:20:9f:85:e8:
a7:1b:de:d7:24:fa:15:9e:2e:ab:e0:ff:bb:67:3c:
ff:62:f2:df:05:48:31:52:52:a2:7f:fb:b3:2c:a1:
54:81:d8:d0:64:9c:c5:8a:78:85:28:b0:a6:a7:dd:
de:09:71:c9:9d:86:b5:39:a0:65:89:88:a6:44:a9:
71:09:b0:01:41:32:d0:bb:45:47:f9:3a:3d:a5:5f:
93:e2:fd:04:02:ae:13:c7:3c:bd:58:ef:76:c8:1b:
f9:6f:89:97:ab:0d:30:c0:ce:56:e4:a5:f4:ac:ee:
e5:23:85:65:a3:1f:1b:90:60:da:f8:af:67:ab:fd:
07:24:c5:b9:10:b1:4a:7e:dc:a5:fb:e3:ce:e8:c1:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:9A:CF:4A:A4:B7:3F:CF:D2:C7:2E:FD:8C:0A:86:6F:A2:B0:32
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/5umaz0qktz_P0scu_YwKhm-isDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f5:29:3e:f9:00:e6:b3:a2:d0:e7:f7:7a:0d:e6:7a:8e:79:
7c:35:fc:b6:12:5a:6d:84:3c:38:6a:f2:db:a0:ed:8d:6b:18:
9c:5e:47:48:94:b3:bf:fb:78:48:e6:ee:55:94:a2:9e:bd:b3:
e1:e7:f8:9b:0c:b9:91:85:94:4f:80:34:fe:43:10:37:c8:11:
ab:db:10:83:d7:fc:b1:af:15:7c:6b:87:88:74:80:3b:9f:15:
7d:24:90:81:96:ea:f7:3c:07:f0:ab:70:d9:1b:3a:cf:ed:c7:
24:5d:9a:2e:57:f0:94:28:91:90:eb:a3:ec:87:3d:07:cc:d4:
e7:5a:1a:6a:aa:24:73:b0:e9:36:bb:79:60:19:2e:25:4d:1f:
99:62:8e:34:98:1b:f2:60:25:8e:2a:9e:f7:1a:52:76:76:aa:
ad:96:c6:ec:70:75:f6:76:2e:05:cb:eb:8f:98:12:b0:b9:f5:
db:6e:c7:be:b7:8a:91:5d:cb:51:4b:5c:54:2e:f2:ff:8b:8d:
11:f6:fd:66:db:8d:5a:93:e5:58:04:c7:3c:53:ac:e3:aa:1b:
60:a6:bd:43:4a:da:05:79:75:f0:08:1c:8b:e8:7c:10:3e:ec:
b0:a8:33:68:a2:de:ad:32:c4:e3:49:d1:c5:db:a7:11:e8:2b:
2e:07:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:49 2025 by rpki-client