Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/Copte6TvWHBm6EPg4d9TMwirSqI.roa
File: Copte6TvWHBm6EPg4d9TMwirSqI.roa (raw, json)
Hash identifier: tDte1b4LPzkGKysyBjgSekT0BdSTOu9c8b/fPp+kWXY=
Subject key identifier: 0A:8A:6D:7B:A4:EF:58:70:66:E8:43:E0:E1:DF:53:33:08:AB:4A:A2
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 018ECCA3F4CFB58D4CC631A694B494CD2822
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/Copte6TvWHBm6EPg4d9TMwirSqI.roa
Signing time: Thu 11 Apr 2024 10:11:20 +0000
ROA not before: Thu 11 Apr 2024 10:11:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29608
IP address blocks: 193.227.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:a3:f4:cf:b5:8d:4c:c6:31:a6:94:b4:94:cd:28:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Apr 11 10:11:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a8a6d7ba4ef587066e843e0e1df533308ab4aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:de:f3:7a:10:ec:27:57:d4:ae:7f:b8:7c:
2e:27:12:b3:06:c1:ac:32:d4:df:c8:4e:83:c1:97:
f1:89:1f:c6:5c:d4:8d:b1:d3:a0:8b:e6:23:8e:55:
12:3a:1f:c6:85:c2:2c:05:4f:57:11:90:94:65:40:
5c:f8:61:b4:38:43:41:59:20:e2:17:d5:cf:d9:a5:
24:fc:83:e8:23:d3:cd:c6:f9:05:bb:b9:f1:fe:61:
f2:31:ec:aa:a3:d3:36:8d:24:31:4d:00:f2:9d:7f:
fc:6a:82:b2:1b:0f:44:c4:3c:d6:3c:e5:37:70:d0:
94:d8:bf:d8:b1:dc:c9:ee:8e:13:3a:f2:a9:da:8e:
90:85:44:75:f0:34:74:40:f8:b4:8a:2a:f7:15:5a:
d6:7e:a0:c3:48:d5:7c:44:3b:50:5f:0c:69:dd:a5:
f7:76:5f:bb:9a:68:ae:b6:6d:07:0e:52:17:34:7a:
37:02:7c:6b:29:c3:0d:91:9e:7f:9a:a1:03:88:a1:
2e:7c:e2:b5:a3:3a:27:69:90:c6:9e:1f:4b:37:5b:
7e:6d:67:35:20:49:ef:89:b5:df:49:33:cb:c3:aa:
9b:b9:49:43:13:fd:58:c7:80:ae:4c:2e:00:fc:1c:
b7:44:b9:c7:04:75:b3:cf:85:f4:a8:38:a3:0a:84:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8A:6D:7B:A4:EF:58:70:66:E8:43:E0:E1:DF:53:33:08:AB:4A:A2
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/Copte6TvWHBm6EPg4d9TMwirSqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f7:04:ca:97:c5:b6:5b:1d:c1:b6:2a:55:66:5f:10:e9:e1:
80:58:5b:08:0d:b7:87:68:2a:9e:12:7a:2e:10:79:e6:c9:94:
70:51:d7:7b:21:2e:c0:1a:1c:fa:c6:ad:d7:43:18:3f:e6:ba:
8c:02:aa:db:b4:93:f0:51:66:e0:aa:96:37:39:d2:94:6f:cd:
70:da:72:ec:6f:95:30:79:47:d0:d9:1b:ba:d7:5e:6d:71:57:
51:65:b7:6d:a3:93:da:f3:ca:32:42:7e:5a:24:3f:f6:ff:d6:
57:3e:d9:a8:9d:8d:c2:88:fe:95:62:a1:9c:55:f7:e6:ec:b1:
10:0a:82:4d:16:57:3e:51:30:fb:aa:dd:1d:38:a0:ee:89:83:
74:67:a1:4c:48:14:3e:80:2a:4f:7f:a3:5e:10:72:ab:33:ad:
a3:97:e3:1a:bd:d4:69:51:71:0f:5c:d0:b5:6c:f3:f8:56:a1:
00:63:45:41:d2:3a:5a:91:ce:97:12:ad:04:51:59:11:69:fb:
25:56:a0:d4:69:ae:a2:80:6b:68:68:6b:55:00:7b:45:e5:5e:
36:9c:6c:c2:59:27:fd:03:d5:82:e4:26:0d:0c:33:5c:32:68:
ca:31:f8:11:22:e6:fe:93:ec:5f:70:da:41:23:5b:a6:3c:82:
78:39:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:50 2025 by rpki-client