Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/TjqciZwpnoOI2tBR3kapvaeyIvM.roa
File: TjqciZwpnoOI2tBR3kapvaeyIvM.roa (raw, json)
Hash identifier: a3owFUTUOHZ9MBZhiC4/TvK+rvNY1EHKzWk3LpeQo14=
Subject key identifier: 4E:3A:9C:89:9C:29:9E:83:88:DA:D0:51:DE:46:A9:BD:A7:B2:22:F3
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 018F2EF3EAD93FB5B6417F610B1D16B15A23
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/TjqciZwpnoOI2tBR3kapvaeyIvM.roa
Signing time: Tue 30 Apr 2024 12:21:28 +0000
ROA not before: Tue 30 Apr 2024 12:21:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215463
IP address blocks: 193.138.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:f3:ea:d9:3f:b5:b6:41:7f:61:0b:1d:16:b1:5a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Apr 30 12:21:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e3a9c899c299e8388dad051de46a9bda7b222f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:8e:31:fb:24:04:ec:c5:bc:eb:6b:3f:89:
ab:8b:8e:69:fb:b2:2d:6e:ec:e9:36:43:22:28:90:
9c:88:c5:18:4d:68:b8:50:c1:e7:de:d0:b4:1b:c1:
ac:d1:4f:7f:b1:ec:59:b3:8e:c9:e1:5c:50:83:c4:
b9:e1:23:ae:89:a6:52:a4:d4:ac:77:9e:0d:3f:d7:
37:5a:1a:43:c3:dc:2d:16:69:fa:29:69:bc:20:af:
38:e5:81:42:56:dd:1f:da:57:71:88:d0:a9:dc:93:
66:29:48:4b:32:47:ab:c1:07:a5:7b:18:50:bd:da:
4f:bb:b6:81:e2:9e:49:ee:e3:bc:59:f1:25:da:7e:
7a:fd:e9:35:fd:76:1b:62:9e:18:d1:b2:5a:76:26:
5b:95:09:25:9f:7a:ca:97:03:05:de:93:f4:4a:ac:
26:9b:e9:8e:be:16:ba:a0:63:d5:98:72:fa:51:9a:
3c:70:44:85:18:79:8a:68:70:54:71:04:01:97:07:
b3:cf:89:3c:03:67:05:65:be:a9:0b:49:9d:9f:3b:
8e:cb:21:d8:88:bd:53:3e:d8:99:e2:f1:5e:20:b7:
05:bc:1d:2e:0a:12:e4:18:d4:13:9f:f9:16:23:b2:
39:28:2d:44:58:5b:97:aa:d1:f8:0c:81:25:c9:b2:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3A:9C:89:9C:29:9E:83:88:DA:D0:51:DE:46:A9:BD:A7:B2:22:F3
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/TjqciZwpnoOI2tBR3kapvaeyIvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7d:04:9f:8a:09:ed:90:7e:95:47:62:d5:90:93:f6:47:9a:
52:68:96:c9:e5:21:6c:f0:d2:ec:5e:a4:b1:3b:5d:2a:67:e8:
88:47:5d:2c:34:74:0c:ce:10:ba:f9:75:a1:a2:03:e4:60:fd:
cf:7c:f1:a5:b9:04:cf:63:c0:03:4c:14:61:67:d2:0a:d0:18:
69:c8:9e:a4:db:cb:e6:06:20:b6:1c:91:f0:cb:af:d2:7c:64:
3c:f5:1c:ee:ab:17:6a:d9:d0:24:cd:fc:6c:74:d4:37:ad:c4:
e3:bb:c3:17:98:01:2d:0b:4a:1a:4b:30:77:45:1c:63:d9:16:
2e:30:47:58:6f:39:c6:26:52:16:eb:16:f6:bd:a0:85:99:79:
11:53:fe:c8:dd:95:e2:a8:25:fd:cd:6e:b0:ca:06:bc:c6:a7:
1c:d2:39:8f:60:01:cd:db:72:2d:bd:6e:71:4f:40:f9:37:d2:
07:8c:96:03:7e:d5:41:35:6b:6a:00:4c:de:d0:1f:32:d8:8d:
d7:af:f7:2b:71:7b:cc:f4:76:46:6d:48:b6:88:f6:89:19:5e:
02:56:49:26:0c:68:0e:61:e5:60:f0:75:d4:04:54:b1:3b:70:
69:18:a9:00:33:96:3f:79:85:57:51:55:24:ac:c7:4f:5e:b0:
91:eb:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:21 2025 by rpki-client