Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/2kXnv_7ht7-W6C3aogYCdjxUc_I.roa
File: 2kXnv_7ht7-W6C3aogYCdjxUc_I.roa (raw, json)
Hash identifier: SLfqBlYcjRjNAUglUqKzbl08kGRJHFAcrQ+LddXq+6E=
Subject key identifier: DA:45:E7:BF:FE:E1:B7:BF:96:E8:2D:DA:A2:06:02:76:3C:54:73:F2
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 018CC424F8122964954855CF38D594E72319
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/2kXnv_7ht7-W6C3aogYCdjxUc_I.roa
Signing time: Mon 01 Jan 2024 08:30:06 +0000
ROA not before: Mon 01 Jan 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50111
IP address blocks: 193.104.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f8:12:29:64:95:48:55:cf:38:d5:94:e7:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da45e7bffee1b7bf96e82ddaa20602763c5473f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:7d:66:d9:87:5c:17:87:cb:09:f7:20:e4:
0c:2c:de:10:c1:13:39:9c:b7:ce:0d:2b:65:96:cb:
7d:15:4a:05:0a:38:e9:64:75:47:1c:80:ea:7a:90:
87:05:93:69:b7:64:b7:7f:aa:6b:9d:c2:e5:34:c9:
ea:dc:af:ea:50:2f:79:8a:a2:20:21:b5:11:4e:b4:
5a:92:cf:7b:15:10:92:3c:d8:3a:a3:aa:07:40:e0:
58:07:c6:71:03:bc:4c:36:ca:0a:73:90:4d:20:e6:
8f:8d:19:62:c2:28:86:03:a4:5e:cf:5b:6c:b8:72:
f3:7f:fb:03:86:97:24:a2:2e:5a:f4:32:78:fe:15:
04:e4:bb:e8:8e:8d:89:a9:cf:4f:87:61:5f:2f:17:
57:06:96:0c:76:88:c4:56:9d:29:6c:2c:2e:72:71:
01:17:16:4c:cf:df:57:9f:b4:66:6a:36:de:c7:33:
43:a3:cb:f2:37:46:86:c9:ad:15:44:04:c7:90:fd:
78:ac:5d:d2:8d:3f:64:87:ec:41:2c:07:8b:73:de:
25:b1:16:e6:df:b4:df:1f:08:10:ea:b4:de:0a:90:
c6:f1:62:97:dd:c9:e0:b7:af:76:80:06:5a:71:61:
e2:5e:20:21:2a:58:f1:ca:d6:8d:37:19:68:dd:07:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:E7:BF:FE:E1:B7:BF:96:E8:2D:DA:A2:06:02:76:3C:54:73:F2
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/2kXnv_7ht7-W6C3aogYCdjxUc_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0e:68:cb:bb:18:e9:7a:49:0b:f4:ee:71:6a:16:9c:9c:eb:
ae:a1:3e:88:e4:52:c1:c6:13:02:95:f0:36:f4:58:ea:3d:85:
a4:c1:d7:77:f7:21:b5:84:11:d0:46:45:64:ff:99:06:5d:d4:
9e:ee:45:c4:a5:ff:1a:2b:6a:90:ee:ee:8e:84:64:4e:45:7a:
37:4f:07:dc:f9:46:52:d7:f3:f5:31:3d:3c:38:8e:6f:d5:9d:
ef:2d:a9:5a:f3:df:19:50:c3:20:ef:7b:ab:74:7e:88:bd:8f:
6e:fd:bd:33:09:a3:d2:2d:92:e9:26:7e:9f:7b:30:34:f9:42:
15:5f:4a:91:fb:66:41:63:68:75:e2:3b:75:18:51:cf:a2:5e:
02:95:5d:64:8d:10:1d:4d:7a:3f:28:bd:de:45:ab:80:2a:66:
93:d8:ca:ae:7e:4a:7d:dc:ae:a7:b0:e0:64:c9:79:35:b0:eb:
85:24:00:ae:49:f0:68:6d:6d:1b:00:51:ab:7f:e9:56:3e:4e:
d2:7f:16:b8:0a:0d:5b:03:c3:09:54:d1:2c:f2:75:69:ed:3c:
c3:c6:61:98:82:d9:be:0f:81:ec:78:9c:cc:50:bf:2d:2f:19:
93:16:75:ad:34:c8:ba:e0:c6:ab:2b:74:31:fc:3e:29:a0:cf:
51:c0:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:23 2025 by rpki-client