Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/55pfZ1_6Ttm241vSTeqdMqgVbDo.roa
File: 55pfZ1_6Ttm241vSTeqdMqgVbDo.roa (raw, json)
Hash identifier: QS5NoFsM5ovk6mpZRAg73KO9iO+VP1sMjhrkmuvHP6E=
Subject key identifier: E7:9A:5F:67:5F:FA:4E:D9:B6:E3:5B:D2:4D:EA:9D:32:A8:15:6C:3A
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 018CC793E185D1C5CBA9644BB34890B3C1B1
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/55pfZ1_6Ttm241vSTeqdMqgVbDo.roa
Signing time: Tue 02 Jan 2024 00:30:06 +0000
ROA not before: Tue 02 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210302
IP address blocks: 193.202.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e1:85:d1:c5:cb:a9:64:4b:b3:48:90:b3:c1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Jan 2 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e79a5f675ffa4ed9b6e35bd24dea9d32a8156c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:c2:8a:1c:f3:96:38:0f:42:e0:4a:53:2d:
c9:95:14:49:30:a6:af:46:01:86:c3:ae:e5:8b:a1:
4d:6a:ba:91:a6:c6:af:6a:4e:55:a3:8a:e1:6b:5a:
30:25:db:45:b1:f3:8a:29:8f:6f:5b:36:36:a6:1e:
b3:03:3d:34:ad:10:52:bb:8a:89:eb:2b:bb:05:92:
7a:32:dc:ee:d8:95:d9:c4:46:c0:8d:d7:3c:83:3c:
17:65:a4:62:d7:8d:fb:0a:f0:71:5d:2b:f7:ea:71:
18:3c:ec:49:d7:e9:1f:f0:57:7c:72:c8:f5:6a:3e:
a8:78:4e:d9:73:90:54:58:13:06:9f:79:1b:ed:70:
8d:da:6a:de:fd:73:c8:a6:15:aa:ce:c2:fe:ac:f5:
11:46:ad:fd:76:1e:9a:91:f3:fb:24:8a:00:92:cf:
71:13:6a:ef:33:fb:1b:20:3b:3f:a1:64:12:54:73:
15:e9:7f:ba:30:b5:6f:71:08:60:cb:c9:1b:3e:6b:
70:d7:e3:3e:88:7b:cd:11:24:0a:15:12:c0:3a:16:
41:28:2b:65:40:1b:68:2c:f4:fd:9e:c4:05:18:81:
86:7a:0d:61:1f:77:0c:fd:42:a8:1d:87:ea:68:47:
10:6f:11:e4:04:2c:e1:9a:6c:54:da:8a:fb:1b:10:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:5F:67:5F:FA:4E:D9:B6:E3:5B:D2:4D:EA:9D:32:A8:15:6C:3A
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/55pfZ1_6Ttm241vSTeqdMqgVbDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.40.0/24
Signature Algorithm: sha256WithRSAEncryption
19:58:55:31:af:09:2e:10:00:42:fc:94:1c:43:c8:bf:a0:0e:
8b:96:c6:59:ee:65:ec:24:42:59:f0:76:e4:01:3e:71:93:0b:
66:d5:3c:21:a9:67:84:19:03:ac:a0:05:6e:ab:84:b3:d7:bc:
8c:fc:6f:75:49:56:24:82:71:70:f2:04:ac:bd:ff:98:d8:dc:
60:ff:6f:1b:8b:26:df:1e:37:42:14:95:e7:2e:25:61:12:2d:
30:aa:a8:d2:fc:50:75:85:20:42:0e:99:40:f5:90:6e:5c:5b:
96:a3:57:a8:00:3c:5b:19:8a:0e:97:ff:dd:0b:80:f1:73:1c:
da:d5:8a:aa:09:7c:6e:c6:bc:22:87:24:ba:eb:10:89:f8:63:
da:44:89:8f:8d:14:63:19:4c:92:7b:0f:af:0c:fd:80:24:1a:
8f:d2:af:41:c6:a3:a8:0d:8e:4f:eb:b0:55:2f:5f:b6:f9:80:
6b:01:04:c3:a3:62:70:48:87:35:1a:c2:89:0a:f0:cc:5c:45:
3a:40:2c:15:00:30:08:5f:7f:c7:4d:ca:49:8d:b2:e7:f7:2d:
61:53:cd:dd:67:a2:ea:12:f4:19:dd:d0:8a:80:12:c4:26:6b:
94:00:ed:07:1a:90:f9:6d:0c:8c:54:1e:c0:e7:c9:d3:6e:e0:
98:67:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:56 2025 by rpki-client