Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/Px73qpboSDz0oVnM5I1MqClfxkg.roa
File: Px73qpboSDz0oVnM5I1MqClfxkg.roa (raw, json)
Hash identifier: x6S37nFlRxiV8a+J9rSPxwtTAJpIT7vbq5YqaQR08n4=
Subject key identifier: 3F:1E:F7:AA:96:E8:48:3C:F4:A1:59:CC:E4:8D:4C:A8:29:5F:C6:48
Certificate issuer: /CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Certificate serial: 018CC8014C03BC9D6F3DE934284508CF9756
Authority key identifier: 74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/Px73qpboSDz0oVnM5I1MqClfxkg.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31673
IP address blocks: 193.105.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4c:03:bc:9d:6f:3d:e9:34:28:45:08:cf:97:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f1ef7aa96e8483cf4a159cce48d4ca8295fc648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:1c:96:ab:57:58:fc:5f:44:f3:cf:2d:f3:
66:1b:a1:46:3d:c1:6b:da:0a:3d:de:44:17:44:9f:
bc:19:42:1b:89:36:2d:b0:65:31:da:04:42:44:c5:
c1:93:ae:42:27:ca:95:6c:e7:16:92:7f:6e:b1:f8:
17:83:37:29:f4:f6:43:d5:8c:14:09:1b:37:48:dc:
af:87:32:05:f1:21:b8:f4:11:c1:f0:d9:9a:10:4d:
0f:b7:34:31:bc:7c:06:ef:22:97:12:54:8f:04:96:
82:4e:8a:1f:7c:d4:47:df:e0:ba:2e:fb:55:ba:ba:
ce:f9:4f:d9:49:8d:5e:8b:80:18:3f:9e:74:02:e2:
0d:2f:07:02:bf:88:f2:c2:17:08:b4:f9:14:ff:33:
47:7d:14:93:d8:80:f7:13:18:f2:60:db:a7:e3:7b:
c6:b7:8b:30:6d:b8:15:0c:8e:38:23:d2:d6:74:ab:
76:ab:b5:19:43:f2:2d:02:fe:9a:3a:21:25:4e:17:
b8:21:50:b2:ca:71:34:d4:55:82:5d:d2:d2:49:e4:
da:82:03:17:97:8b:65:94:bd:e7:80:dd:c3:55:01:
5a:a6:71:5f:6e:3d:89:e5:8c:4e:98:27:71:9c:ba:
ac:73:20:db:8f:46:5c:c5:b6:a1:45:f2:e6:7c:ac:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:F7:AA:96:E8:48:3C:F4:A1:59:CC:E4:8D:4C:A8:29:5F:C6:48
X509v3 Authority Key Identifier:
keyid:74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/Px73qpboSDz0oVnM5I1MqClfxkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.215.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8d:b1:1d:55:0b:65:d3:f7:84:33:4e:d0:6d:d0:e3:f2:f9:
70:99:06:6b:42:e4:62:1f:73:82:b4:8c:c6:f6:d3:3a:8f:c8:
6b:30:a9:5f:06:ee:42:d9:65:e3:b9:ff:3e:90:ea:6e:9e:c8:
83:fc:77:cf:e3:9d:09:2d:e1:66:8f:4f:81:2a:0c:f7:3c:eb:
e7:bc:96:90:ea:84:16:c1:bb:95:ea:25:a6:c4:08:af:1c:53:
dc:0c:0d:85:b1:26:3f:15:38:31:91:b4:9b:6b:25:85:4d:0f:
69:50:fa:47:31:54:a4:a5:ea:3b:32:4e:51:bf:91:3b:01:c3:
d2:14:fd:c6:5c:91:8c:ab:52:f4:b2:5b:15:ef:cc:5e:eb:55:
27:82:fa:d9:86:c1:16:24:6a:8e:39:8f:77:1b:12:1f:ab:1e:
de:ec:eb:96:b6:1d:57:07:e1:dd:4e:32:b3:35:dc:aa:f0:eb:
1b:59:20:08:07:34:7b:6d:80:b7:59:7e:06:5e:ec:7b:4d:3e:
92:21:89:1c:43:e3:5d:66:2b:8a:bf:9f:52:51:84:09:af:a6:
a6:9d:0c:ab:49:0d:d2:80:cb:fb:20:92:28:47:b8:3b:ff:ad:
96:31:44:6d:39:4c:88:68:ec:42:4e:a0:dd:f0:3a:ac:8b:98:
b2:6a:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:52 2025 by rpki-client