Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/jkTqyTiRgonaoyCk_ZawYrZvdFg.roa
File: jkTqyTiRgonaoyCk_ZawYrZvdFg.roa (raw, json)
Hash identifier: 2vZGo6QD8r2KhMgHSVQMQZ0rF6nt1AG36OFfT0RYyh8=
Subject key identifier: 8E:44:EA:C9:38:91:82:89:DA:A3:20:A4:FD:96:B0:62:B6:6F:74:58
Certificate issuer: /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial: 0193AED3493C0C7DFBCB424D4C1AA6069A92
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/jkTqyTiRgonaoyCk_ZawYrZvdFg.roa
Signing time: Tue 10 Dec 2024 04:28:22 +0000
ROA not before: Tue 10 Dec 2024 04:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 193.33.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:d3:49:3c:0c:7d:fb:cb:42:4d:4c:1a:a6:06:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Validity
Not Before: Dec 10 04:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e44eac938918289daa320a4fd96b062b66f7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:9c:44:1c:79:50:8e:ea:89:2e:a2:27:80:
53:90:8c:e7:52:8f:dc:35:96:27:dd:22:f8:db:ff:
89:9d:1a:66:0a:16:81:41:c6:e1:db:15:ef:e3:2f:
8c:02:99:03:ce:f0:9b:be:6e:b3:a3:7d:4e:cf:e8:
bf:fb:00:0e:23:29:19:c8:e3:d9:a0:44:78:66:39:
87:7b:d6:ed:79:06:4f:4a:10:04:35:0e:cb:83:24:
cc:22:88:eb:85:0e:78:c8:8e:4b:dc:4a:f8:d0:84:
eb:cf:e8:7d:e4:4d:78:b9:de:35:28:d8:f5:0f:2b:
e6:c7:b1:10:65:d8:e4:46:8e:9c:4c:0c:80:bf:9d:
a6:ca:8a:f4:f9:af:1f:0f:4c:44:9e:ed:db:58:20:
8c:f1:64:ef:58:7f:47:1a:7b:2b:44:e6:9a:23:e4:
eb:fc:e9:9e:cb:b2:59:3c:d2:a7:bc:70:c3:35:72:
96:07:dc:3d:3f:b1:fc:6d:2b:d4:62:ab:83:eb:77:
0b:af:3d:6c:ad:92:fc:50:41:b9:19:bd:d9:a5:8d:
92:cf:4d:0d:c5:49:76:b0:bd:6d:70:4e:ef:eb:82:
84:d0:fd:f8:62:ae:e5:9a:bc:e2:44:b4:1b:3a:32:
b7:34:4d:d1:08:44:5f:c7:0e:f6:fa:f9:eb:49:aa:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:EA:C9:38:91:82:89:DA:A3:20:A4:FD:96:B0:62:B6:6F:74:58
X509v3 Authority Key Identifier:
keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/jkTqyTiRgonaoyCk_ZawYrZvdFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a9:08:f4:9d:b8:10:6d:ab:96:0a:38:c0:1f:35:4d:d3:f0:
e4:cc:68:ee:2c:26:a7:a8:44:6b:5b:27:1d:00:22:5b:b4:f2:
47:3e:ac:ae:a7:36:53:0b:ce:5f:92:c1:06:8f:97:b9:fa:b6:
43:ef:96:aa:33:cf:f8:55:ca:cb:dd:2e:cf:38:d7:d9:c4:91:
e2:9c:fe:e5:4f:16:e8:a5:1d:40:ec:67:d2:c7:5c:27:4b:59:
da:ec:bc:87:f8:31:e1:4d:f7:64:20:1f:05:50:56:42:42:f7:
38:0e:4d:b7:88:c0:cd:a5:59:7f:b3:df:33:9f:72:7d:42:fd:
aa:97:33:25:10:80:f7:e6:09:4a:ed:89:cb:e0:2a:e8:74:1a:
e6:0c:5d:cb:7e:9d:3f:77:bb:d7:ac:09:7d:72:47:a7:4c:63:
2b:4c:3a:21:16:bc:0d:55:df:1d:e1:f4:1d:3f:df:ff:06:42:
9d:a9:4a:34:40:54:42:23:e4:27:cf:34:d9:ab:5d:e7:cd:46:
1a:be:6c:a5:0c:87:fa:b1:8a:a6:ae:00:8e:f4:23:4e:3e:64:
44:e0:02:7c:b7:87:36:ad:22:83:b0:4b:f7:49:31:c4:12:df:
1b:d5:18:17:31:5a:7f:23:1f:18:99:f1:64:c9:35:f0:0d:68:
a8:77:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:38 2025 by rpki-client