Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/P1J--n-aRwABdhNUtKSrbqt-zRI.roa
File: P1J--n-aRwABdhNUtKSrbqt-zRI.roa (raw, json)
Hash identifier: sY7YAmrCCvj8pPtKnemH6HMreKEbhtxZrdtZ5yalJnE=
Subject key identifier: 3F:52:7E:FA:7F:9A:47:00:01:76:13:54:B4:A4:AB:6E:AB:7E:CD:12
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 018CC56E327CC78B98190EACEAA0E7BF535E
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/P1J--n-aRwABdhNUtKSrbqt-zRI.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198340
IP address blocks: 193.57.241.0/24 maxlen: 24
193.57.244.0/24 maxlen: 24
193.57.245.0/24 maxlen: 24
193.57.247.0/24 maxlen: 24
193.57.219.0/24 maxlen: 24
193.57.218.0/24 maxlen: 24
193.57.218.0/23 maxlen: 23
193.57.220.0/23 maxlen: 23
193.57.220.0/24 maxlen: 24
193.57.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:32:7c:c7:8b:98:19:0e:ac:ea:a0:e7:bf:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f527efa7f9a470001761354b4a4ab6eab7ecd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:21:44:52:c2:6a:2f:ea:0d:85:bc:b4:9d:6e:
3e:7b:53:23:86:3a:ec:41:30:15:c2:41:da:e7:a5:
57:b6:e7:26:11:5f:74:7c:98:70:31:c4:b2:65:c4:
46:73:79:bd:6c:da:fd:29:28:55:29:c1:d9:3e:52:
97:be:c1:b5:bf:78:35:d0:45:fc:e9:13:8d:2c:58:
a6:98:7b:a5:32:d3:24:a5:ec:32:c5:ea:e9:aa:31:
20:71:23:2f:3e:60:b3:4f:95:49:28:22:83:b5:81:
86:9e:3b:d4:3c:80:30:96:6e:36:cb:e7:c6:ae:59:
36:54:93:11:27:bd:3f:07:f6:f7:53:21:10:a6:5e:
ba:b1:8f:ce:dc:7a:9c:ce:93:26:e9:ea:a4:d6:66:
f3:72:34:e0:f7:c2:73:e4:85:d3:6b:6b:45:6f:32:
66:82:78:33:72:48:67:24:b1:67:0b:1b:ac:23:2e:
a9:7d:01:cb:8a:7f:0f:bb:6b:54:b4:95:e2:94:87:
1d:b8:e7:17:ed:2f:f9:34:85:bd:a9:ef:ad:43:be:
d6:1d:73:a5:f2:72:76:a3:9f:4b:f3:5f:cf:1c:f3:
58:ce:9f:e5:bf:d7:15:49:3e:a5:5b:5a:47:bc:cf:
00:b0:51:e0:73:8d:99:bc:99:15:33:5c:fa:c1:bc:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:52:7E:FA:7F:9A:47:00:01:76:13:54:B4:A4:AB:6E:AB:7E:CD:12
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/P1J--n-aRwABdhNUtKSrbqt-zRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.218.0-193.57.221.255
193.57.241.0/24
193.57.244.0/23
193.57.247.0/24
Signature Algorithm: sha256WithRSAEncryption
41:36:4e:01:a3:9b:63:c5:e3:ec:da:3e:66:97:81:45:b6:93:
db:af:4e:b3:79:96:50:7d:0a:96:0e:16:23:f1:e7:4d:25:81:
84:5b:ef:9d:32:83:c3:4c:11:3f:91:a2:d4:94:49:bb:5a:07:
1f:a5:9b:f7:62:6c:9f:2b:e0:3f:44:24:20:81:30:ee:b7:8b:
64:4c:89:50:27:20:ab:6a:fa:11:82:76:8f:96:7f:b9:6f:3d:
4b:db:8c:74:d0:f0:71:d2:dd:f5:54:99:6f:e6:d2:1c:32:61:
0f:6c:6f:4c:5d:0d:6c:ed:cf:c7:07:1d:8c:13:f3:ed:75:be:
80:ea:72:c3:61:2c:83:96:36:68:fe:87:a2:37:bf:8a:fa:99:
85:df:60:40:43:bd:2b:49:91:e3:5d:2d:16:09:41:10:44:ea:
a4:a6:88:3c:56:f2:79:22:1a:9c:d3:08:b9:67:70:92:cf:21:
c4:58:f4:61:21:12:11:53:b0:07:79:fb:a4:52:aa:83:9c:74:
cb:91:1b:dc:de:a2:8a:02:c4:69:9e:49:6b:ef:47:ce:f8:5e:
6b:85:55:b4:4d:af:27:31:75:12:dc:61:cb:42:84:97:60:ea:
8b:03:9e:7d:df:9c:73:bc:aa:8d:39:48:78:4a:a6:cd:df:24:
3c:93:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:52:30 2025 by rpki-client