Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/ND63G8RwFJQGWK5aS7GLenuKi7I.roa
File: ND63G8RwFJQGWK5aS7GLenuKi7I.roa (raw, json)
Hash identifier: B2nb2svvc/T3oVx8upkKiU1IS/VG5f5U9HfcfqEtbgc=
Subject key identifier: 34:3E:B7:1B:C4:70:14:94:06:58:AE:5A:4B:B1:8B:7A:7B:8A:8B:B2
Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Certificate serial: 018CC56E52BF63320248D5CF3FC03279CEFB
Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/ND63G8RwFJQGWK5aS7GLenuKi7I.roa
Signing time: Mon 01 Jan 2024 14:29:50 +0000
ROA not before: Mon 01 Jan 2024 14:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31060
IP address blocks: 193.23.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:52:bf:63:32:02:48:d5:cf:3f:c0:32:79:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Validity
Not Before: Jan 1 14:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=343eb71bc47014940658ae5a4bb18b7a7b8a8bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:23:a4:7f:22:f0:aa:9d:e9:ec:64:a7:38:
e2:d2:a4:da:8f:03:00:38:70:a8:73:d1:7d:63:31:
93:26:62:9f:43:b1:f7:b5:19:10:7c:ba:2f:86:39:
d2:ea:9d:07:62:fa:f1:93:21:ba:40:fa:31:5f:8f:
92:0d:68:ac:c8:24:2b:e2:06:4f:c3:ef:06:36:ff:
85:8e:c9:fc:82:43:f6:e8:3c:f5:42:65:a5:d3:0d:
8e:97:3f:a3:5a:70:77:f5:73:3f:ef:40:5d:3c:a8:
c6:36:3f:46:73:7e:b1:94:0b:64:a9:b9:25:e0:da:
6b:3c:38:3a:d3:45:30:ec:e6:b2:c6:fd:09:3c:6b:
7f:b5:28:cf:b8:f9:0f:88:bb:2d:b0:0e:4d:46:a1:
85:ff:d4:e8:46:02:8e:ea:00:5f:3a:13:3c:8b:f0:
a6:39:25:2b:ba:82:e3:36:c3:b2:5b:a9:4f:f7:12:
3b:f2:65:9c:8d:bb:6f:01:35:57:73:dc:61:a6:6a:
85:7d:ff:5b:fb:dd:73:0f:99:a1:0e:71:55:4e:04:
81:fc:f9:30:d7:af:43:b8:df:11:a4:72:b8:db:bf:
9a:9f:54:3f:73:70:77:9c:ff:b0:5f:b4:36:56:50:
c2:85:07:9e:6e:ae:ae:a9:68:32:53:28:f3:67:9e:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:B7:1B:C4:70:14:94:06:58:AE:5A:4B:B1:8B:7A:7B:8A:8B:B2
X509v3 Authority Key Identifier:
keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/ND63G8RwFJQGWK5aS7GLenuKi7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.49.0/24
Signature Algorithm: sha256WithRSAEncryption
81:dc:62:1c:6d:98:4e:a4:81:2c:a8:bd:aa:fa:2c:2a:7b:52:
74:0b:78:99:79:ca:4d:15:8f:cd:92:0a:af:d5:77:62:c9:13:
3e:09:7d:6a:1b:f6:74:6a:26:fb:bf:e1:a1:19:bd:59:c1:1f:
a8:58:8b:9c:ae:04:de:3b:59:86:51:98:42:ed:5f:fa:86:da:
39:13:fb:d8:db:d8:c2:a8:4b:1a:40:bd:ce:97:12:41:e7:96:
dd:84:84:7e:f7:7a:ee:15:e2:7d:ff:3d:9e:56:a3:49:c2:60:
3f:c5:4e:c4:62:81:a7:6d:0b:f1:56:04:14:d3:42:b7:09:47:
9a:56:a5:cb:06:ce:4a:87:9d:13:78:67:86:af:30:ba:77:4e:
58:42:3d:35:cd:39:5f:bb:e5:82:27:1d:1c:a1:25:d9:e3:b1:
e6:7d:de:8e:cb:06:23:da:f4:26:e2:1f:91:9b:c9:bb:ac:c5:
3d:21:75:58:55:59:aa:aa:6f:f9:28:86:4d:0c:f9:68:a1:61:
60:b4:aa:d6:7b:b0:d8:58:7e:2c:00:b7:fd:51:3e:20:9f:e9:
84:00:1b:0a:ac:9a:10:9a:20:3d:da:24:f7:fe:f8:fa:48:90:
d3:5c:e6:e9:87:e6:6f:a2:4c:df:3c:86:fb:03:ac:9e:43:54:
11:6a:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:10 2025 by rpki-client