Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LH8IHsZqoBAnHXbiWnl3_OBv-14.roa
File: LH8IHsZqoBAnHXbiWnl3_OBv-14.roa (raw, json)
Hash identifier: 26G+CYwhBK1WMF4bxi0+XDtnSZ5llQadHqUlBLxpZ4U=
Subject key identifier: 2C:7F:08:1E:C6:6A:A0:10:27:1D:76:E2:5A:79:77:FC:E0:6F:FB:5E
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B272F229C9D50CDECE1BC5EA320E4F
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LH8IHsZqoBAnHXbiWnl3_OBv-14.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200908
IP address blocks: 193.163.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 16:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:72:f2:29:c9:d5:0c:de:ce:1b:c5:ea:32:0e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c7f081ec66aa010271d76e25a7977fce06ffb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:19:45:3c:6f:2e:07:20:61:73:78:5a:38:
8b:3c:8d:b2:ae:a2:d7:e1:05:c6:b2:69:07:69:32:
65:32:84:e5:94:50:45:98:40:5d:0d:c0:bb:bb:05:
60:e4:4e:f2:5c:83:6f:da:2d:fb:0d:2c:34:cc:60:
3b:13:b8:f7:b3:e3:ee:b3:a6:e1:6b:f6:ef:d8:d6:
60:4d:d2:6b:37:b8:c9:9c:cb:6c:1d:42:53:7c:b6:
8a:c8:f5:31:5b:c9:2e:fa:f5:0e:bc:1b:ae:a7:61:
47:7d:fd:0d:44:b6:9a:a8:f8:18:b2:3b:eb:2c:9b:
2a:5e:4c:a7:3d:b4:30:e2:f9:27:56:75:8f:8c:d9:
93:61:ab:ff:82:a7:fb:24:81:d8:e0:a6:6b:78:fd:
fe:87:11:ed:4b:89:11:a8:c9:ee:02:a8:f9:b5:09:
2c:f4:fd:46:12:47:16:07:fa:81:91:f6:54:10:d5:
26:f2:75:b3:02:88:70:3b:f2:28:6f:fb:ce:8f:d8:
17:16:ad:0d:76:57:58:75:38:74:9a:cf:57:57:36:
10:91:77:2e:b0:54:1d:24:61:af:ee:86:4b:56:76:
ef:1f:4c:22:1f:b1:0d:af:56:82:b2:00:75:02:a7:
f5:94:55:ee:b5:54:c2:01:34:0f:d0:59:a2:83:2d:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:08:1E:C6:6A:A0:10:27:1D:76:E2:5A:79:77:FC:E0:6F:FB:5E
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LH8IHsZqoBAnHXbiWnl3_OBv-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.117.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b6:eb:a6:b3:8c:9d:12:62:ba:9d:1e:df:cb:3d:4d:94:6e:
e6:d2:9f:ab:e2:38:77:77:57:b5:59:38:16:4f:38:57:e5:9c:
da:ad:49:05:87:1a:3c:17:fc:51:24:c9:db:3d:fc:67:ea:bb:
31:51:59:3e:7b:f6:6a:d1:74:3a:01:c9:c9:2a:1f:c8:ce:a6:
f6:ea:70:e3:a9:84:d7:c3:34:e3:bf:ea:34:a0:b5:49:5a:03:
a9:f5:b2:f5:b9:06:f1:c6:c7:52:09:e6:dd:75:4b:37:af:90:
a5:63:b5:fd:b7:aa:69:c6:53:f3:10:38:12:25:6b:38:aa:aa:
24:e1:7c:05:8a:d5:81:4d:f1:d4:a7:69:f6:d8:38:ff:07:e6:
5d:b1:e9:c9:33:d3:37:1e:80:bc:e2:b3:43:23:8d:6a:70:d0:
07:bd:35:df:1c:71:9b:ac:20:15:1e:f5:a2:34:55:1e:18:b3:
45:7d:9e:c7:48:36:42:d2:40:9e:bc:23:fa:4d:4d:95:93:97:
ca:d5:3d:c0:6e:50:c3:d1:6e:29:36:66:83:aa:14:f7:11:f5:
45:10:ad:41:4d:bf:b9:f8:f3:04:d0:47:3a:dc:6e:f4:b6:e4:
53:80:b0:7f:fd:e9:d4:8c:5e:c7:a8:52:71:a0:49:4d:f6:21:
2e:97:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:00:33 2025 by rpki-client