Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/enpxcPC3IYnNAb1zzm4U1UIzJHs.roa
File: enpxcPC3IYnNAb1zzm4U1UIzJHs.roa (raw, json)
Hash identifier: qePpejPHCpvI1jP3Z0ESTFdo0aLKye7wFctypqQNHww=
Subject key identifier: 7A:7A:71:70:F0:B7:21:89:CD:01:BD:73:CE:6E:14:D5:42:33:24:7B
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 018CC726A62FF588F8AE732338B7CEEF0167
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/enpxcPC3IYnNAb1zzm4U1UIzJHs.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39036
IP address blocks: 193.151.226.0/24 maxlen: 24
2001:67c:2bf4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a6:2f:f5:88:f8:ae:73:23:38:b7:ce:ef:01:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a7a7170f0b72189cd01bd73ce6e14d54233247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:9e:fd:1f:0e:4f:47:06:08:88:d3:5c:12:
6f:9b:40:5c:5a:4f:ff:9b:5f:2f:b0:d9:0b:1a:6c:
32:1a:94:26:73:15:f3:c1:b7:2d:57:04:8c:a9:cb:
ae:ff:5d:f4:d0:2c:5d:cf:ee:c1:f5:5a:d2:46:5c:
81:3e:01:aa:ab:f0:f2:68:0c:00:3f:15:59:3e:90:
9d:e9:25:f5:a9:36:c2:6b:7c:02:7a:9a:2c:29:e3:
a2:b4:08:3d:ba:f7:70:68:1d:f2:ec:b4:af:d5:06:
dd:26:e1:05:2d:e0:f7:a7:7b:98:8d:9a:59:48:20:
55:e6:3f:96:f2:69:98:9d:cb:51:d9:52:a2:77:05:
2f:b2:cf:36:71:0d:c2:41:07:fa:19:34:70:d8:2c:
dd:ca:a4:44:85:00:3b:6e:97:52:3c:62:5b:1b:65:
40:41:14:3b:82:ad:f7:71:e5:4f:48:4f:97:16:f6:
b4:4a:b3:1b:cf:5d:95:f6:48:f1:f6:80:8b:10:fa:
26:76:66:e1:9b:48:cf:63:49:a6:46:83:e2:53:76:
b1:b1:d8:f6:6d:c2:fa:b7:b0:fb:7d:17:c3:e7:b0:
ae:ed:d8:19:4e:58:af:ee:20:21:df:45:ab:b2:f8:
71:c3:0f:97:cf:5c:31:f9:0a:1c:a9:39:b7:f2:25:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:71:70:F0:B7:21:89:CD:01:BD:73:CE:6E:14:D5:42:33:24:7B
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/enpxcPC3IYnNAb1zzm4U1UIzJHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.226.0/24
IPv6:
2001:67c:2bf4::/48
Signature Algorithm: sha256WithRSAEncryption
5b:c2:47:8a:73:ad:1d:d1:88:23:0c:12:4d:9f:59:b0:f5:08:
56:ce:f1:6d:dd:78:07:3d:06:78:1a:24:75:b0:7d:a6:ce:52:
4f:6f:20:55:53:eb:2d:02:e4:0b:01:f8:48:ce:ee:1d:7a:f5:
4a:17:18:2f:d3:61:d0:f1:06:f9:e6:86:f7:4a:8b:0e:45:d8:
55:73:4b:0c:15:da:81:21:c6:1a:9d:38:ba:93:e1:e2:d6:f3:
e1:f3:4b:a4:d5:92:28:95:d3:bd:01:05:40:62:99:02:ae:70:
9f:c8:c1:6f:7d:01:63:2e:b2:52:ba:76:3a:79:eb:24:a4:c4:
18:a5:87:34:96:84:1b:55:c1:43:be:0b:94:22:01:ad:3b:29:
6f:27:b7:50:ef:1d:bf:63:0d:b2:d2:d3:dd:7b:40:27:c2:85:
a1:cb:2a:94:1d:7d:01:d2:5a:ad:bb:66:21:b7:fa:a1:fe:2c:
5d:1e:0a:df:b4:b2:d3:15:67:d4:af:b0:4c:f1:69:8a:f5:60:
12:c7:63:5b:1f:b6:9d:e1:c3:6a:6c:5a:7b:cc:27:ff:ac:38:
7a:fd:20:72:30:bb:e6:42:e6:09:da:24:7e:be:cb:48:94:d0:
15:df:a1:bb:90:1d:bb:7b:27:f5:3d:b9:13:c6:a1:6f:86:9d:
8a:a2:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:14 2025 by rpki-client