Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/sGUxYHbkkAl_tqdexlBoA0sBOnc.roa
File: sGUxYHbkkAl_tqdexlBoA0sBOnc.roa (raw, json)
Hash identifier: USYbV43enZ5yQFI3GU1Ndnv6hSlQTwSPhAr6n/1rkpg=
Subject key identifier: B0:65:31:60:76:E4:90:09:7F:B6:A7:5E:C6:50:68:03:4B:01:3A:77
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 018CC2DAD02FA96C9543A14D9A2D5B2B26C6
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/sGUxYHbkkAl_tqdexlBoA0sBOnc.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29405
IP address blocks: 130.193.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d0:2f:a9:6c:95:43:a1:4d:9a:2d:5b:2b:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b065316076e490097fb6a75ec65068034b013a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:b8:7f:74:30:72:31:bd:2a:89:7b:f7:d1:
0d:2f:54:ab:b1:fb:53:78:27:ef:ff:f6:5d:2b:ce:
71:2e:67:10:04:e5:a1:f8:47:1b:bc:df:bd:de:7f:
e9:23:9c:8d:d6:52:33:d9:11:96:e3:e5:c5:0c:1a:
92:50:40:8e:16:47:33:9a:ba:11:ea:a8:ee:69:b1:
b8:e6:17:dd:96:db:d7:c4:05:2d:7e:f9:cc:38:12:
90:56:46:32:60:9f:c7:c9:57:0d:5f:95:81:f0:b8:
ff:86:16:c6:65:f6:98:a5:5b:54:ca:52:f1:31:f7:
fb:42:8e:9b:e2:88:b6:8e:4f:e4:7c:6a:ba:d8:07:
51:3f:7e:b9:67:ea:9c:49:ae:54:86:d5:22:a9:3a:
fe:13:8b:73:94:0e:2a:6c:95:c3:85:74:c6:44:21:
d7:c2:a6:5c:4a:c3:db:da:f4:16:a5:23:22:cd:a7:
db:91:e3:53:4a:9c:19:73:ac:60:cc:38:11:73:fc:
17:10:48:dd:4e:b5:e6:82:25:fb:ae:aa:56:ba:7a:
40:8b:e1:34:39:e5:78:0d:04:ec:a2:66:ee:7c:24:
ec:02:c6:59:86:89:7c:c4:f7:4c:66:c9:46:34:b4:
97:50:d9:c5:bc:12:85:0e:8d:da:0a:cc:e9:af:d5:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:31:60:76:E4:90:09:7F:B6:A7:5E:C6:50:68:03:4B:01:3A:77
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/sGUxYHbkkAl_tqdexlBoA0sBOnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.18.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c0:25:90:86:46:29:aa:ff:17:88:f3:08:6c:8b:45:7f:95:
07:61:b3:84:69:f4:3c:83:e6:00:54:99:d8:71:fd:81:c2:43:
d5:29:4c:f3:d8:13:fc:21:08:45:00:d5:e9:01:a3:62:9d:a9:
66:c1:bd:49:ea:ac:8d:79:00:55:71:92:e0:2d:9e:b2:3a:40:
06:df:2c:24:09:8f:e1:11:d1:ea:cf:f6:57:27:4a:53:fb:fd:
64:05:e4:59:33:42:34:2b:12:76:3b:9f:dc:fb:cb:30:bc:95:
18:dd:c7:0b:96:13:63:f1:33:54:05:d7:81:cc:ae:1f:f6:82:
c4:42:02:29:dc:a0:e1:0b:30:db:fd:bc:95:a2:52:3a:e3:c3:
09:a3:50:26:07:52:a9:d1:e9:11:84:ab:4a:b4:53:c6:92:5b:
12:3e:64:2c:a3:a7:b7:eb:17:71:72:9b:46:9b:d4:a4:71:d6:
97:98:25:82:2b:2a:bd:f4:d8:b5:ce:ae:72:af:8b:c8:6b:8b:
4d:b5:87:83:88:fe:4b:47:f9:a6:d8:ef:1d:dd:5e:98:0c:4b:
56:55:19:8e:27:04:89:6d:5f:ad:c2:2e:0c:69:12:86:3b:5d:
44:c4:59:db:c0:ae:a2:9f:2d:63:ce:14:8e:95:72:73:a2:a5:
fc:a1:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:14:49 2025 by rpki-client