Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/XUi9PVQfPpNngatcYF8hvrmyCl4.roa
File: XUi9PVQfPpNngatcYF8hvrmyCl4.roa (raw, json)
Hash identifier: wCpb4R7ywY+pxu5Wov1rK1xFO8XTuPBrMMQHBOhpAQE=
Subject key identifier: 5D:48:BD:3D:54:1F:3E:93:67:81:AB:5C:60:5F:21:BE:B9:B2:0A:5E
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 01934D82AD2B20F9E7C320F96BCFAA66D9A1
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/XUi9PVQfPpNngatcYF8hvrmyCl4.roa
Signing time: Thu 21 Nov 2024 06:57:09 +0000
ROA not before: Thu 21 Nov 2024 06:57:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20904
IP address blocks: 193.143.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:82:ad:2b:20:f9:e7:c3:20:f9:6b:cf:aa:66:d9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Nov 21 06:57:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d48bd3d541f3e936781ab5c605f21beb9b20a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:9f:c3:7c:13:9f:82:a3:ab:26:99:43:65:
63:fe:80:ff:a3:d9:29:00:1f:0f:69:88:e4:1a:71:
c5:b6:95:0c:9e:e9:69:c3:0d:8d:51:d4:c1:fd:4b:
45:dd:60:aa:8c:1d:b7:7a:7d:ed:86:87:4c:c7:d8:
73:8e:d8:30:ff:df:05:f3:71:11:b1:63:c3:e6:91:
ad:25:1c:ce:0a:53:45:9f:6b:94:25:fe:44:0f:58:
43:61:9c:fb:c2:3f:d3:2b:f7:24:4b:43:d7:7f:f4:
0c:2e:1b:36:2a:78:c1:8d:4b:7f:76:ce:cc:cd:d5:
72:5a:af:74:03:29:9a:e6:a9:e0:33:0d:c2:d0:1b:
e9:5e:11:f2:d4:e9:e0:c0:7b:a5:9a:9f:18:ce:04:
7a:ec:d1:27:91:a8:b5:8d:4f:2e:b2:81:9f:09:b1:
a4:db:84:d4:cb:20:06:d8:87:a6:d4:e7:65:21:21:
c9:4f:1a:66:42:08:dd:a1:ea:3a:12:6d:66:3e:e7:
b2:48:9e:26:3b:1d:d8:c4:41:ba:ea:12:26:27:c6:
df:6b:59:a6:20:9b:8b:36:5c:9a:06:25:a0:bc:28:
9c:04:59:2e:e4:05:26:59:bd:41:55:86:0c:2b:a0:
b8:5b:7d:26:d2:d4:e5:36:8e:b7:4c:19:02:12:13:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:BD:3D:54:1F:3E:93:67:81:AB:5C:60:5F:21:BE:B9:B2:0A:5E
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/XUi9PVQfPpNngatcYF8hvrmyCl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:00:5d:fe:b4:a4:82:f4:26:cb:81:a9:7f:5d:78:4c:8a:46:
e7:6b:77:44:89:cd:d5:5f:83:f5:da:0d:0e:8b:e6:88:10:78:
8a:bd:0f:9c:8b:d2:c6:d0:20:df:a9:55:61:86:c6:b1:3e:c9:
0d:4b:db:40:b5:78:f6:e6:e6:e2:a9:75:b9:e2:fa:8f:93:85:
b8:50:b9:58:6e:bd:fa:ff:7e:97:47:40:43:b1:80:0c:75:93:
c6:b7:26:6f:8f:bb:25:f8:ac:01:ba:04:89:94:cd:74:39:a9:
26:59:43:29:42:91:df:db:61:35:d8:21:3d:f0:28:54:50:39:
93:e2:77:ae:6a:fb:a8:01:0d:ba:f3:d3:9e:96:ab:1b:9a:76:
e0:d5:9b:72:d9:a6:99:d7:bd:5b:5c:11:f6:22:83:73:5c:be:
ce:0e:c2:fe:15:03:a9:2c:fd:ca:ff:4c:50:06:5c:a7:c3:2e:
98:36:aa:c0:0c:ab:3f:e2:f1:d8:aa:2c:5a:ea:af:ca:eb:b9:
17:61:9e:53:b9:ff:00:e6:fc:8f:8d:b1:db:da:59:06:d0:66:
f2:06:6c:0e:e3:5b:1f:c0:9f:df:1a:27:27:f3:57:4f:11:a8:
46:c7:7d:51:36:18:12:f3:cc:4b:da:00:f6:f6:97:00:ff:e1:
83:33:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:03 2025 by rpki-client