Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/L9mGY9ezET_mVX0MdOezih0DTLw.roa
File: L9mGY9ezET_mVX0MdOezih0DTLw.roa (raw, json)
Hash identifier: pCmGuxrrIqex8/mv3ddLBRm/+Sr3R4cc8ONPMszBXDA=
Subject key identifier: 2F:D9:86:63:D7:B3:11:3F:E6:55:7D:0C:74:E7:B3:8A:1D:03:4C:BC
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0193308654D78FBD4E14E7527D5875CBB558
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/L9mGY9ezET_mVX0MdOezih0DTLw.roa
Signing time: Fri 15 Nov 2024 15:52:10 +0000
ROA not before: Fri 15 Nov 2024 15:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47206
IP address blocks: 93.182.192.0/18 maxlen: 18
188.224.0.0/17 maxlen: 17
2a00:e880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:86:54:d7:8f:bd:4e:14:e7:52:7d:58:75:cb:b5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Nov 15 15:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fd98663d7b3113fe6557d0c74e7b38a1d034cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:0d:6f:f8:ba:ee:66:80:3a:0f:3b:43:13:
4d:f8:93:73:bc:30:5c:f7:6f:8b:0f:60:c9:fb:7f:
8e:c8:d3:ee:83:7f:0c:a1:a0:09:de:8b:1d:73:71:
56:e0:1e:71:32:a7:ae:41:ca:90:a0:97:c9:2c:bb:
a9:ad:a1:35:20:a3:4b:62:e7:99:57:3e:57:b6:41:
ea:27:24:ef:65:f3:08:88:bd:0f:98:a0:6d:79:08:
f1:b5:5a:59:eb:c8:92:6f:df:d7:0d:88:f3:47:50:
0c:89:38:9c:98:16:38:f0:b6:4a:3b:9c:57:04:4a:
58:41:38:6b:07:f5:d9:76:42:b6:9b:4b:35:c3:1a:
2f:4f:be:5f:3b:42:f6:3d:51:d2:6a:88:7c:19:eb:
d1:81:4c:c8:3f:48:36:49:c1:16:d6:57:74:29:8d:
3d:64:48:20:a3:21:cd:c5:61:b9:62:79:8f:f7:4f:
a6:0d:54:9b:64:1a:1a:6d:5b:30:b9:9b:78:ad:bb:
d8:ab:e7:d2:6d:73:49:99:1a:fc:9c:0d:1d:d6:20:
e0:31:0e:5e:ac:93:8a:2a:05:b5:2c:90:29:c4:0b:
70:f3:44:63:2a:fd:4d:24:4a:14:21:e6:5a:60:ce:
44:1b:df:89:da:90:ee:33:09:cb:74:98:ba:31:d6:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:86:63:D7:B3:11:3F:E6:55:7D:0C:74:E7:B3:8A:1D:03:4C:BC
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/L9mGY9ezET_mVX0MdOezih0DTLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.182.192.0/18
188.224.0.0/17
IPv6:
2a00:e880::/32
Signature Algorithm: sha256WithRSAEncryption
42:ea:8d:de:0f:fc:84:cb:2f:bf:9d:eb:3a:48:ec:2e:78:01:
72:bf:1c:c0:4b:a1:f6:a7:df:19:6e:ea:3e:e3:5e:f1:cf:06:
2f:87:0d:b2:e1:a4:29:68:73:58:d7:5f:99:1f:8b:92:8a:80:
85:00:00:d1:2d:ed:7d:03:83:a9:45:c3:7a:50:8a:a3:20:52:
11:a9:85:98:bb:08:ae:4b:f8:67:36:34:1c:0f:ee:f1:5e:42:
54:f0:20:4d:4a:03:b6:18:c3:ff:51:e7:0d:ac:7f:ee:7c:53:
e3:47:88:44:47:27:fc:73:d8:23:05:56:ee:fa:33:ba:c3:8f:
89:7e:b6:5f:d9:a6:fb:b2:4b:54:6e:e6:99:84:37:6e:31:dd:
d4:f6:55:06:ba:cc:7d:e4:43:a7:a7:db:01:ba:66:c6:ad:fa:
ec:7e:65:64:bc:2a:19:c0:85:55:1e:12:83:34:2a:de:eb:bd:
e2:04:ae:26:be:b3:87:45:16:bb:32:01:34:0d:60:f3:c8:23:
ca:27:fa:b9:08:55:2e:01:40:88:4a:fd:1b:f0:9f:9c:d8:ab:
1d:41:9d:67:e7:2a:c8:7d:89:46:38:94:6e:cb:86:45:b3:7c:
42:23:15:0e:ac:ad:24:95:2e:49:af:b2:b2:d9:91:8c:93:3f:
45:4c:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:22:31 2025 by rpki-client