Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/G1opfK27vF2pDhaMbqge7axPNDA.roa
File: G1opfK27vF2pDhaMbqge7axPNDA.roa (raw, json)
Hash identifier: bR4zvhdDSuSWK9PY6hFAD23rOQjvfH6jxF5CmFjcvW0=
Subject key identifier: 1B:5A:29:7C:AD:BB:BC:5D:A9:0E:16:8C:6E:A8:1E:ED:AC:4F:34:30
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 0193DE6E818783073958B28B46CAD5D7AA84
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/G1opfK27vF2pDhaMbqge7axPNDA.roa
Signing time: Thu 19 Dec 2024 10:20:04 +0000
ROA not before: Thu 19 Dec 2024 10:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 193.72.144.0/24 maxlen: 24
193.72.145.0/24 maxlen: 24
193.72.146.0/24 maxlen: 24
193.73.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:6e:81:87:83:07:39:58:b2:8b:46:ca:d5:d7:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Dec 19 10:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b5a297cadbbbc5da90e168c6ea81eedac4f3430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:11:c2:b3:3c:fc:8a:86:4e:8d:3a:1b:62:
c0:5f:26:62:aa:9c:dd:d2:8f:27:9e:01:3d:60:a2:
f2:05:a7:e5:0f:af:69:f3:be:42:1b:8b:a1:42:14:
50:55:8c:21:39:cd:d3:fd:40:84:26:86:ac:94:81:
47:b3:dd:01:6f:12:99:80:b8:71:e7:f3:89:95:a6:
09:72:d8:2b:fd:e8:6e:51:51:82:1d:d3:f7:32:84:
d5:29:ff:d8:8c:60:03:44:6d:28:85:17:96:16:c8:
93:8b:9c:56:a7:3e:60:d4:9a:d2:20:c7:70:fa:31:
6c:c0:74:22:be:ba:5e:b5:63:5e:fc:0d:1b:c0:16:
5e:cd:e2:93:eb:e3:35:97:48:56:35:e3:f7:9c:26:
04:4e:bf:63:26:1f:75:9a:a4:d1:a6:87:c4:20:7f:
79:1b:8d:e3:7c:9b:40:61:8f:fd:e0:fa:09:95:c0:
7e:a3:64:c3:f6:d9:48:f9:f3:96:9c:4b:f7:09:24:
25:48:da:fc:b3:9d:be:1d:16:85:90:c8:1a:7a:f5:
38:17:9f:6d:4c:e2:75:b5:de:69:43:4b:7c:ac:a2:
84:aa:17:0f:c3:74:25:a8:35:d2:34:ef:a4:92:3f:
7f:de:a1:7c:65:57:97:19:a7:06:c0:7a:22:0a:32:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5A:29:7C:AD:BB:BC:5D:A9:0E:16:8C:6E:A8:1E:ED:AC:4F:34:30
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/G1opfK27vF2pDhaMbqge7axPNDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.144.0-193.72.146.255
193.73.238.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ea:58:8e:20:29:77:29:b0:24:ee:85:6c:e2:51:82:e1:3f:
40:59:5c:82:93:17:bb:7b:1c:49:98:31:d8:85:cf:c8:37:73:
a7:e9:bd:e3:0f:74:b1:8b:00:f4:13:d8:74:d9:01:6e:af:a9:
4d:19:7f:98:43:e6:8b:d3:4f:cf:30:6d:40:c5:c4:0c:84:1c:
a7:32:8a:af:e2:83:9d:9b:17:8a:77:d2:79:f0:3a:b0:77:1e:
17:3b:8e:d8:8a:79:48:94:3b:95:38:cc:70:23:8c:a2:b2:eb:
1e:95:3d:38:17:65:13:cb:f8:fd:73:7c:cc:00:df:f4:27:38:
fa:f1:c8:8b:05:be:23:a3:7b:b6:1e:f5:14:a7:8d:cf:69:ff:
af:bd:ed:f3:2e:c8:c5:d9:7d:05:b3:13:8a:10:60:ab:dd:47:
7e:c6:43:7d:00:2b:65:3b:fc:59:7c:c4:7f:6e:87:bd:a3:68:
12:ca:82:41:b5:12:df:5b:46:fb:a6:aa:83:09:2b:b3:ac:fa:
ed:5d:c1:52:6b:48:3c:ae:a4:3f:d8:a6:c1:35:d9:f4:d3:c4:
70:04:52:97:91:39:96:45:86:02:bd:52:d8:ac:9e:f7:85:46:
83:fb:1e:91:b7:30:3b:2d:cd:85:c2:b4:9a:b3:c7:f1:46:42:
09:ea:c1:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:13 2025 by rpki-client