Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/NV2ZibKoJ0EsRdMnEjGitX6hxpY.roa
File: NV2ZibKoJ0EsRdMnEjGitX6hxpY.roa (raw, json)
Hash identifier: WrXq2IqI5T6/lLqGHEDpQ+Adb/N/1yYoGbMUYq11GMM=
Subject key identifier: 35:5D:99:89:B2:A8:27:41:2C:45:D3:27:12:31:A2:B5:7E:A1:C6:96
Certificate issuer: /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial: 01929B66C6D5FC60DDC12F8BF25EA4C449A8
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/NV2ZibKoJ0EsRdMnEjGitX6hxpY.roa
Signing time: Thu 17 Oct 2024 16:54:16 +0000
ROA not before: Thu 17 Oct 2024 16:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31113
IP address blocks: 193.23.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:66:c6:d5:fc:60:dd:c1:2f:8b:f2:5e:a4:c4:49:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
Validity
Not Before: Oct 17 16:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=355d9989b2a827412c45d3271231a2b57ea1c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:cc:a8:62:db:3c:40:c6:d8:19:32:47:64:
47:ef:67:60:1c:90:2f:20:e2:4d:e9:5d:22:c2:24:
52:fd:1f:91:f2:21:b0:14:dc:97:5e:4a:95:39:b8:
f9:52:7b:1c:5a:49:74:52:1b:21:7d:63:9c:4d:c5:
2a:b9:c8:cc:4f:a2:83:c1:e9:bf:cd:dd:2b:41:ae:
9b:a0:c9:70:91:86:4a:da:3e:6f:69:bf:0a:91:f9:
45:7a:39:c1:42:6d:f2:ee:d5:aa:8d:ae:ca:21:5d:
5b:17:d8:72:38:e2:33:e5:80:08:10:70:3d:cb:61:
a5:7b:00:b9:d1:35:fb:5c:72:39:01:08:33:fc:dd:
51:b2:52:ef:db:4e:f1:de:27:f2:2b:c9:67:29:cc:
81:e4:b0:66:c5:5c:63:25:5b:9a:1e:48:49:f4:5e:
37:bc:d9:65:77:1f:8a:76:99:13:63:30:94:af:c7:
91:62:3e:1c:77:97:93:ad:5f:90:9e:13:c8:19:76:
ad:ba:9d:2d:96:4f:28:90:de:c0:56:f8:eb:46:b2:
12:d6:2c:9d:c5:64:76:0d:a7:01:a8:ab:6d:45:45:
60:81:bc:f7:1e:e1:7f:1d:27:a5:fa:dc:86:0e:01:
90:da:00:40:3b:37:23:82:f2:88:83:2a:a9:08:b3:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:99:89:B2:A8:27:41:2C:45:D3:27:12:31:A2:B5:7E:A1:C6:96
X509v3 Authority Key Identifier:
keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/NV2ZibKoJ0EsRdMnEjGitX6hxpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:56:cd:1f:c3:54:47:92:6e:ce:17:ee:d3:15:72:d4:21:c4:
2e:5c:3c:49:b0:ca:6d:7d:7a:0c:04:89:c0:57:55:09:d8:c8:
2f:a5:32:bb:7b:ef:ce:50:66:6d:16:b4:b3:d3:30:d9:ae:cf:
2e:12:69:2f:b6:61:03:ab:2e:3b:78:af:de:a2:88:20:43:83:
63:5a:15:c3:50:7e:de:3a:09:6c:3f:80:ab:62:6b:fa:13:d7:
7f:0d:e4:ff:26:05:58:95:76:12:87:15:e2:20:14:e4:5c:e2:
9c:e8:7e:62:42:b9:da:ab:e7:f3:47:01:ec:3b:ca:d3:73:9d:
5f:09:6f:1f:2b:fa:f2:b0:86:12:c9:0e:03:fb:1e:16:bf:3c:
45:c5:55:5e:51:4b:5c:11:66:42:cb:54:cf:28:31:5f:79:fa:
e5:31:a5:8b:09:a4:68:9f:56:f5:bf:8f:3e:4b:a7:9d:ba:76:
68:30:9c:ef:1c:ad:ac:31:da:a7:93:d5:67:da:e4:fe:3e:4a:
ab:96:17:21:1a:4e:30:79:12:87:c3:06:6e:b5:fe:7a:3d:85:
73:68:9d:33:4a:41:45:0d:ea:47:aa:4f:99:e6:30:0c:aa:01:
84:da:94:7e:f7:ba:95:06:ac:89:13:22:f6:8f:f7:e9:e2:0c:
77:60:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:27 2025 by rpki-client