Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/EX2f2qiuFNBJ8K7Gf517rd3XvgU.roa
File: EX2f2qiuFNBJ8K7Gf517rd3XvgU.roa (raw, json)
Hash identifier: VrR7oP2f+ap/pKJUFOONBsfAODL+ts7yYBtrylQBZ9o=
Subject key identifier: 11:7D:9F:DA:A8:AE:14:D0:49:F0:AE:C6:7F:9D:7B:AD:DD:D7:BE:05
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 018CC56E5831E43D077FB4E994F8CA388B80
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/EX2f2qiuFNBJ8K7Gf517rd3XvgU.roa
Signing time: Mon 01 Jan 2024 14:29:52 +0000
ROA not before: Mon 01 Jan 2024 14:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.5.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:58:31:e4:3d:07:7f:b4:e9:94:f8:ca:38:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Jan 1 14:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=117d9fdaa8ae14d049f0aec67f9d7badddd7be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:33:db:9e:9d:f4:ae:8b:74:4f:bb:4c:15:
da:d1:31:cb:f3:ea:ac:a2:e1:2d:20:dc:6e:fe:c6:
ca:a2:80:b0:c6:2f:c4:26:fd:d7:da:be:20:84:9b:
d8:8a:34:47:fc:2b:75:69:bc:1f:f6:4b:d5:d1:11:
5f:f1:6a:54:74:78:b7:b5:6f:de:be:09:d7:64:cb:
de:fc:ee:0c:82:1f:de:7e:2b:ab:29:85:32:fd:56:
0f:09:4b:9d:7a:48:eb:97:91:f9:5d:b7:60:c5:32:
62:c1:56:21:b3:1a:eb:97:38:91:65:2f:44:59:0e:
77:5b:7a:69:c9:e4:38:1b:94:3c:d1:20:c0:9a:1c:
d2:23:bf:b9:6e:6f:05:39:ff:51:f0:ab:e6:c1:0e:
fa:8a:09:f2:dd:6f:4e:87:c9:c0:2b:cc:52:ea:78:
92:b3:c8:5d:2c:36:99:8b:6e:fd:5d:c2:96:1a:93:
3b:95:06:f1:5e:ea:0e:c6:7e:db:52:bb:9f:9a:40:
72:24:b9:cb:84:77:1b:9f:3a:6d:cc:65:c9:e3:76:
33:f5:fc:ee:f3:1a:5e:61:85:5b:d3:08:d2:cc:bd:
09:cf:7d:0c:b5:21:ad:7b:7e:30:15:b9:e6:4b:89:
15:06:a0:e4:a7:6a:b8:94:06:75:b3:a1:e3:91:ce:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:9F:DA:A8:AE:14:D0:49:F0:AE:C6:7F:9D:7B:AD:DD:D7:BE:05
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/EX2f2qiuFNBJ8K7Gf517rd3XvgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2f:12:4d:3f:27:63:79:dd:aa:94:fb:25:fc:ef:f7:4b:de:
e5:da:4a:ea:4c:1b:d7:ae:e6:f2:db:7b:42:a1:cf:88:46:68:
44:7b:2f:b5:6e:32:d2:0c:e5:a3:f5:4a:07:01:03:27:d6:c8:
6d:76:6c:92:0c:f4:35:52:1b:a4:78:c1:7f:06:4a:ae:04:38:
2b:4a:d2:e4:f6:d2:06:35:90:14:84:62:89:90:c1:50:f6:bb:
3e:1f:e3:2d:12:ca:b8:36:39:7f:f3:28:50:19:81:cd:79:87:
d0:72:de:ba:cb:3c:c8:2f:46:89:05:de:b5:be:a6:3a:70:95:
a2:8f:68:59:1d:60:1c:56:7a:dc:fa:d9:65:43:eb:0e:0e:33:
cd:1a:4f:a7:b8:14:b9:18:ab:89:20:b1:78:00:6b:6d:38:83:
17:f2:2c:74:2f:d0:3b:0f:b3:a8:03:fb:f2:2b:d1:d8:de:3c:
7a:bd:68:ef:d2:f0:56:00:20:dd:1f:0c:63:7f:07:75:5f:1b:
96:d3:9d:3a:72:ed:2c:e4:43:65:83:78:fb:d9:46:74:ca:9a:
7f:03:a6:ab:c9:14:51:ab:51:6c:63:f4:50:86:00:c6:c3:18:
62:92:a3:96:a0:37:2e:f4:1e:c7:6e:9c:55:52:75:55:dc:94:
5d:95:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:46 2025 by rpki-client