Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/0a5BzF-rsubJm21DQ9st5zacSwg.roa
File: 0a5BzF-rsubJm21DQ9st5zacSwg.roa (raw, json)
Hash identifier: qNduNnDy9TX9ZmOlI8U1c06xAp3wkbN/HQnEcPhx/H8=
Subject key identifier: D1:AE:41:CC:5F:AB:B2:E6:C9:9B:6D:43:43:DB:2D:E7:36:9C:4B:08
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B68F2BE32740237CA9EE25DF83D01D
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/0a5BzF-rsubJm21DQ9st5zacSwg.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213175
IP address blocks: 93.179.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8f:2b:e3:27:40:23:7c:a9:ee:25:df:83:d0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1ae41cc5fabb2e6c99b6d4343db2de7369c4b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:86:28:92:42:14:81:aa:54:22:8a:e7:5e:
10:f9:59:ca:40:46:60:9a:1e:0e:6c:7c:fc:3a:37:
ba:78:41:9a:6a:b5:f3:d5:95:56:12:6a:2e:de:5e:
8e:88:06:cf:30:bf:aa:13:17:df:c6:06:f0:95:5d:
d3:bd:fe:a6:53:f9:38:47:49:1f:10:aa:8e:99:9a:
5a:fa:98:da:ea:7d:dd:e2:f4:21:15:96:c6:9c:73:
56:41:21:81:2f:26:4e:d6:f4:32:f9:3e:94:67:48:
f1:29:bc:4a:2e:df:18:06:df:d6:03:a0:b8:80:b8:
6c:b6:fb:78:bb:bc:81:23:5c:29:5e:27:61:48:90:
bb:08:aa:35:81:91:1f:1f:40:38:6d:e6:3b:c5:9e:
56:bc:1c:4d:86:8d:8b:d5:de:de:90:0c:1c:79:82:
08:57:28:37:7a:f5:c6:6a:7d:64:b6:f6:7b:6f:eb:
2e:29:8f:17:6f:d3:1e:86:d6:69:75:90:79:85:c2:
1c:c3:02:71:32:36:b7:37:31:b4:49:08:c5:d6:7e:
6f:12:6d:3e:0e:1c:ea:c0:96:ba:b9:87:ca:b7:c7:
df:43:b9:97:45:2b:29:be:5d:b7:d9:6c:72:48:f6:
eb:2f:6b:07:89:8e:67:3b:1a:34:d6:d5:b7:d4:c8:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:41:CC:5F:AB:B2:E6:C9:9B:6D:43:43:DB:2D:E7:36:9C:4B:08
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/0a5BzF-rsubJm21DQ9st5zacSwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2e:d5:d9:22:0b:a8:e6:94:80:5e:d0:14:f1:bc:6a:1c:51:
44:c5:b0:e6:59:9f:18:6d:68:87:c7:99:bb:3c:29:94:3a:95:
c2:5b:1c:c1:35:70:ee:01:54:94:51:9d:ca:2b:d0:a5:b3:65:
5d:ea:99:4b:92:bb:1d:84:8a:69:61:48:cf:e1:26:c7:3e:2b:
20:d6:d8:01:45:33:0c:a1:97:71:d6:6a:0a:2b:26:1e:84:c5:
bd:8a:af:4f:93:fb:09:b3:47:48:e0:9a:d9:85:1b:35:59:99:
56:c0:12:67:58:2d:16:bc:65:77:f4:2f:25:82:fc:40:91:85:
75:0b:0f:66:a6:77:04:ef:fe:89:f5:d4:c0:c2:b2:1c:f1:7f:
d6:35:b6:18:59:72:32:70:f0:40:11:3e:a2:b8:f2:eb:94:7a:
34:69:0d:0b:dc:85:55:3b:ab:5a:21:2e:70:0a:42:84:ab:66:
4d:61:f2:fd:ae:ff:c5:be:8b:8f:52:18:26:b8:bf:e8:37:4a:
14:9a:ee:a4:60:22:8a:13:09:38:3b:9f:f3:51:95:e2:97:d5:
a3:e3:69:5c:22:d8:5f:5d:d9:85:85:4a:b3:9f:b9:7e:7f:f8:
29:8f:69:dd:be:c8:df:32:dc:8f:ac:9c:8e:06:b2:f1:85:d7:
4a:24:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:54:13 2025 by rpki-client