Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sSEX0WofArfo-SWZnbxcmNV3h70.roa
File: sSEX0WofArfo-SWZnbxcmNV3h70.roa (raw, json)
Hash identifier: 1tw0O89LHMxF8pTOX1VIM/cc04+ac20fZKz4yM9gKwc=
Subject key identifier: B1:21:17:D1:6A:1F:02:B7:E8:F9:25:99:9D:BC:5C:98:D5:77:87:BD
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01936D5C5E8E48B477826ED47EDBE7D54F35
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sSEX0WofArfo-SWZnbxcmNV3h70.roa
Signing time: Wed 27 Nov 2024 11:23:10 +0000
ROA not before: Wed 27 Nov 2024 11:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215523
IP address blocks: 213.18.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 09 Dec 2024 07:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:5c:5e:8e:48:b4:77:82:6e:d4:7e:db:e7:d5:4f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Nov 27 11:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b12117d16a1f02b7e8f925999dbc5c98d57787bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:3e:08:d1:e3:8d:61:22:df:bf:fb:ab:9d:
0e:4d:35:bb:8b:24:29:8a:5e:40:45:ae:c3:a9:62:
db:fd:99:fc:1c:ca:0a:b2:0c:f4:3c:1f:30:27:6b:
80:df:3a:cb:72:61:08:12:ad:fd:21:77:9f:b9:f9:
6e:1c:96:09:b6:d7:e6:47:f3:36:cd:fa:31:b0:e9:
49:4e:f3:35:df:e9:9c:33:dc:61:31:16:09:98:2e:
68:07:44:b0:56:93:2b:2b:09:c9:4c:50:26:1b:7d:
a6:49:df:43:db:23:b6:08:0f:f7:e2:f4:20:14:4d:
64:a7:5e:ba:46:b4:85:fa:12:82:98:f6:7a:1a:ed:
6d:cf:f0:bf:3f:a1:cd:03:f8:44:0f:6a:07:59:2c:
3b:1b:f6:47:0b:66:53:ba:34:0a:83:7f:71:00:fb:
e2:7e:db:06:3e:ee:d6:3c:02:ce:60:89:4f:1c:e9:
25:13:36:6e:41:06:1f:72:5d:e1:83:7a:b6:f8:01:
5b:60:9e:38:6b:6a:31:1f:1a:1c:5d:20:0d:22:b8:
27:4d:d8:82:ca:0d:c3:70:99:28:0a:cb:6d:19:ee:
45:81:ce:e5:22:46:85:cf:2d:bd:61:ee:64:2c:9b:
5e:4c:8b:4a:d6:db:bb:f5:fb:83:11:5b:3d:1a:73:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:17:D1:6A:1F:02:B7:E8:F9:25:99:9D:BC:5C:98:D5:77:87:BD
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sSEX0WofArfo-SWZnbxcmNV3h70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.240.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:41:f4:0f:18:64:e5:91:87:a1:d5:d2:de:b5:72:d1:05:82:
ca:41:0b:7b:67:39:da:2e:c9:a2:47:8f:fe:cb:c5:45:bd:75:
39:ff:ef:d2:b8:8d:6f:cc:2c:18:ca:ef:90:45:0e:2b:a5:0c:
0b:5d:99:e1:0a:96:da:6b:44:4e:75:1d:77:81:f0:37:9b:60:
dc:4f:fd:be:e8:76:31:14:ac:e4:9c:e5:d1:ef:77:da:a2:82:
1e:12:f7:1d:75:6a:af:51:e5:c1:f8:d6:a2:03:18:89:e2:2f:
26:ab:7a:b1:1b:9c:30:2a:38:5d:57:f7:98:73:d1:39:86:4f:
ce:23:bf:ff:c3:52:ce:d8:8d:7b:44:21:e9:aa:15:15:d1:52:
47:7c:35:f5:31:01:4b:96:1a:2b:46:3e:dd:72:3e:f2:bc:9a:
2b:64:ec:c8:52:dc:3e:29:9e:f6:0c:60:a2:cf:ea:50:f3:cc:
73:9c:85:44:5e:bb:70:9f:84:01:4b:ee:20:2b:a6:7f:c7:75:
86:a7:1c:1c:87:d3:dc:21:7a:97:84:1a:ec:c7:7a:60:ff:94:
db:e2:ed:75:f2:ff:39:d9:d3:5e:86:d2:ad:c5:45:7a:87:63:
7e:71:33:5f:f7:cd:1f:c0:62:63:62:c2:c7:89:78:42:c1:d1:
0a:a3:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:37 2025 by rpki-client