Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L-E9d2C91gnN2Nk3sO2k6QHu4ug.roa
File: L-E9d2C91gnN2Nk3sO2k6QHu4ug.roa (raw, json)
Hash identifier: GI50gFzMJee2bCWdKezT5cWQyoyS0EAUsjcWtTShlak=
Subject key identifier: 2F:E1:3D:77:60:BD:D6:09:CD:D8:D9:37:B0:ED:A4:E9:01:EE:E2:E8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019408D90887B9416B978904201320BCD859
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L-E9d2C91gnN2Nk3sO2k6QHu4ug.roa
Signing time: Fri 27 Dec 2024 16:00:28 +0000
ROA not before: Fri 27 Dec 2024 16:00:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 93.115.175.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:d9:08:87:b9:41:6b:97:89:04:20:13:20:bc:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 27 16:00:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe13d7760bdd609cdd8d937b0eda4e901eee2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ba:99:3a:0c:85:35:42:12:c9:99:55:c0:c2:
81:7c:da:ad:57:db:5f:82:fa:8a:06:62:bc:5e:53:
59:92:0d:3b:8f:e3:67:c2:8b:f7:18:c6:7f:f4:5d:
30:d7:dd:40:01:2c:7e:0d:20:84:e7:68:28:d6:39:
ba:e5:7f:97:1e:d3:3d:60:14:61:89:98:c5:2f:96:
83:2a:47:2a:67:c5:cc:7f:9a:5d:8d:94:6b:35:ee:
2c:d6:c3:13:84:f9:b6:bb:28:8e:e8:da:a5:a8:ed:
97:4f:ad:62:30:de:f9:96:9b:73:6d:a9:af:54:2a:
09:32:83:35:23:2a:78:02:42:5e:bc:d2:2a:5f:ce:
44:72:43:21:0c:dd:21:28:49:d5:3d:2a:e8:e7:2f:
84:ae:bb:18:51:63:27:1e:54:13:54:53:b3:97:8f:
1d:19:84:64:ee:83:48:89:5d:46:1b:5b:06:6d:c0:
af:6a:f4:d3:4f:f1:68:99:57:c0:94:b1:f8:0a:76:
0f:5a:1e:78:69:94:14:fe:29:16:a6:22:9c:94:d6:
f6:9f:e6:fb:fa:07:92:71:1e:14:d5:f3:a6:5e:f3:
45:ac:49:e6:66:a5:62:5f:8f:cd:91:7c:fc:33:f6:
83:13:76:a5:70:37:ca:c0:e7:7b:67:18:67:ae:72:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:3D:77:60:BD:D6:09:CD:D8:D9:37:B0:ED:A4:E9:01:EE:E2:E8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L-E9d2C91gnN2Nk3sO2k6QHu4ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.175.0/24
193.228.139.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:dd:40:de:75:9d:f4:28:c4:9f:1d:b4:b4:37:d1:05:eb:e4:
86:b3:39:cc:f6:fe:c3:aa:09:7b:4b:5a:86:d7:1e:cb:c4:87:
ff:28:45:bf:fb:93:ab:ee:25:ac:d1:dd:ad:db:91:aa:02:1a:
05:bf:31:29:a1:1b:17:b7:a8:44:db:0c:dd:e6:52:f3:e9:fc:
cc:2e:48:f3:d2:8d:0a:fa:52:5e:de:a3:c0:24:91:d6:58:4d:
49:79:46:da:fe:9a:04:c8:8f:ce:93:d1:a1:c5:5b:2d:51:98:
b2:e5:f5:22:9d:19:f0:58:63:60:0d:e5:a0:b3:8f:3d:d8:34:
19:6b:c6:d2:04:f1:b8:24:77:2c:ef:9b:55:5f:6a:c2:4c:fa:
77:45:f2:da:b3:f6:c4:e3:17:cd:0f:02:f3:40:b2:b9:35:01:
c2:89:70:cf:e6:09:b1:85:b4:04:b1:ba:6b:4b:0a:16:33:a7:
01:c5:8b:09:19:bf:54:2a:4c:96:cc:78:d1:d0:8c:7e:23:46:
12:d1:ed:eb:f0:bd:4c:5d:6e:0d:c4:64:7f:39:92:67:bf:8b:
7c:5e:00:f4:cb:9b:c0:9e:a1:c0:8e:f7:2b:be:99:4a:55:6c:
6c:a6:49:9c:50:42:10:d6:c7:89:7e:03:e5:67:d9:72:6e:7c:
6a:7f:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:23 2025 by rpki-client