Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/6964LXn_UU5M59fVq1PHWY4TsFg.roa
File: 6964LXn_UU5M59fVq1PHWY4TsFg.roa (raw, json)
Hash identifier: KWxDjHMqt8HUSP1P1V0zArvJswS6Nj1pvlih18XGWgs=
Subject key identifier: EB:DE:B8:2D:79:FF:51:4E:4C:E7:D7:D5:AB:53:C7:59:8E:13:B0:58
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0193AAD3E4DFCF325F348ACC0EB793032ABA
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/6964LXn_UU5M59fVq1PHWY4TsFg.roa
Signing time: Mon 09 Dec 2024 09:50:33 +0000
ROA not before: Mon 09 Dec 2024 09:50:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.212.204.0/23 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 07:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:d3:e4:df:cf:32:5f:34:8a:cc:0e:b7:93:03:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Dec 9 09:50:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebdeb82d79ff514e4ce7d7d5ab53c7598e13b058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:ed:5a:b6:5f:a8:74:fa:cb:a1:eb:57:03:
35:52:ae:a1:e2:ac:b7:96:d6:b5:89:5b:2e:16:cd:
84:6f:13:c4:cf:11:dd:a7:d2:2d:aa:54:9a:99:32:
13:3f:58:e4:35:60:2e:f6:99:37:11:f5:39:ad:45:
ec:bd:fa:d6:3a:b4:a1:01:b7:f3:f1:34:e7:3c:b1:
a7:3b:f6:69:63:2f:ae:3a:22:f4:fc:6e:e8:b6:e3:
1e:b9:33:43:92:ae:f4:87:bc:e9:e8:10:4c:b1:0a:
a9:5f:40:30:d4:c7:d4:4a:77:ae:4f:cc:d6:6f:44:
3e:6e:ce:0c:79:53:00:a1:39:6f:91:31:a5:f5:90:
ad:29:00:e9:32:64:62:0b:d8:a8:ee:37:2f:98:8d:
45:3a:f8:49:0c:3f:ba:f3:bf:eb:9f:22:1b:e1:85:
c4:73:6f:22:a4:a2:17:74:11:5b:f8:b9:73:d8:50:
18:22:e2:65:90:20:2f:ed:58:b9:fe:44:85:d8:6f:
92:09:b0:88:10:89:7b:90:24:0e:5b:09:2b:c7:3e:
fc:ed:97:6a:20:a5:73:2a:bf:bc:e6:5a:a0:3e:20:
c2:a0:fe:dd:0e:b5:85:0c:87:3f:38:12:4e:db:cb:
98:f6:1a:06:24:44:e4:46:01:e7:ee:c9:cb:59:32:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:B8:2D:79:FF:51:4E:4C:E7:D7:D5:AB:53:C7:59:8E:13:B0:58
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/6964LXn_UU5M59fVq1PHWY4TsFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.212.204.0/23
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:7b:8c:9c:de:36:82:67:70:89:05:34:87:67:2a:22:97:f5:
57:5d:d4:74:a8:6d:a0:0b:28:06:6b:1b:1a:d1:c5:2c:d2:2a:
60:94:96:e2:91:e8:44:69:6c:e2:88:aa:37:9b:1a:ad:fe:2d:
47:63:bd:fc:2a:c7:eb:11:9a:f1:c9:9e:31:54:90:c9:4b:fd:
85:05:97:ef:3d:82:67:ba:ca:f0:e3:b3:0a:29:bd:af:a1:4c:
6e:99:cd:fe:a0:51:dc:4b:54:39:db:77:f4:9f:b2:e9:37:87:
3f:43:28:0f:9e:fc:60:d6:b9:9a:d3:56:03:43:d4:98:a5:bf:
44:69:22:54:4c:bb:e3:30:13:38:ec:b5:cd:da:b8:aa:d8:5a:
ed:30:2c:b8:9f:50:4d:57:f8:6c:6c:4f:97:8c:f4:a1:8e:0e:
54:50:b8:4a:60:e5:47:b2:4c:39:d9:35:2b:25:da:9d:8f:ac:
1c:00:a7:06:81:f3:b7:cb:f0:fa:1e:9a:6e:14:b0:9c:ec:34:
8f:d6:b9:08:b7:43:01:34:f3:55:ef:bb:56:0b:ad:3f:ce:75:
04:d5:94:55:b4:97:c9:4d:35:61:19:d2:2a:04:11:6b:79:a1:
8e:5c:c3:a8:68:78:60:ac:f0:c8:ce:51:b9:f2:b8:42:d5:dd:
5f:40:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:45:39 2025 by rpki-client