Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/_1ZIlrcmPohzZFq8Npfban_cZPc.roa
File: _1ZIlrcmPohzZFq8Npfban_cZPc.roa (raw, json)
Hash identifier: vu8BfLZaLHj/RqkNcQQk53rFUeQkUBhW1N4tKTI+7o8=
Subject key identifier: FF:56:48:96:B7:26:3E:88:73:64:5A:BC:36:97:DB:6A:7F:DC:64:F7
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 018CC26D48EC89EF15A4B6B88E72001300E8
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/_1ZIlrcmPohzZFq8Npfban_cZPc.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15598
IP address blocks: 193.238.27.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:ec:89:ef:15:a4:b6:b8:8e:72:00:13:00:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff564896b7263e8873645abc3697db6a7fdc64f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:28:6f:a8:2a:96:b3:b1:c3:b0:85:45:5d:
5d:70:07:94:30:08:1c:43:1d:37:63:2d:fc:00:ad:
6c:70:28:4d:ac:65:a8:a9:61:3c:45:e6:35:15:79:
1b:6b:dd:06:4b:9d:9d:74:ac:09:42:24:9f:de:b9:
d5:c3:fc:0c:0a:47:16:20:32:cf:c8:af:e7:e7:77:
a9:7c:d8:f2:34:a2:e5:a1:5b:2e:4b:bf:7c:cd:92:
85:41:19:81:b2:27:00:52:f8:36:02:60:63:ac:02:
b1:a2:ec:33:de:b1:57:6c:b7:5c:09:65:d8:78:fa:
58:a6:b9:29:d5:81:28:9b:75:d6:f0:c3:1e:75:2a:
bf:82:00:46:53:0a:1a:20:ed:80:60:04:b3:ad:cd:
20:1b:32:8d:3a:a6:dd:bf:87:59:0a:4f:6d:29:38:
45:94:2f:a2:b7:3c:d6:b1:04:2a:7b:4f:1d:2d:b0:
0f:50:be:ef:50:df:11:ef:cb:51:07:11:b4:2d:0c:
89:5d:50:50:48:83:bd:f1:9d:cd:a6:80:d0:e0:f1:
c2:92:a9:fb:e8:cf:36:3c:8e:d4:d1:d4:ea:7f:14:
ca:a3:c1:b4:ad:c2:0f:0b:c1:e9:ba:d1:89:26:18:
f0:96:42:f9:d9:1b:6c:bf:04:8a:e7:6a:d7:96:84:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:48:96:B7:26:3E:88:73:64:5A:BC:36:97:DB:6A:7F:DC:64:F7
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/_1ZIlrcmPohzZFq8Npfban_cZPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:08:01:68:6d:f6:62:0b:54:87:b3:78:0a:d1:90:13:d9:6c:
09:8e:01:84:7b:f9:95:ed:02:54:f5:f6:b5:56:58:41:4e:b5:
39:09:ad:cb:b0:26:f8:c3:f0:ae:dc:79:4e:f2:8f:6b:70:01:
66:c0:0b:3e:8b:43:75:92:d6:6e:e1:89:13:23:c4:ea:86:29:
b7:d2:a8:63:63:08:c7:3c:49:4f:95:41:41:ac:6f:0e:a6:a1:
a5:82:8c:69:37:55:6a:2b:9d:bc:6f:ba:32:6a:56:f0:77:5e:
29:ef:88:74:02:8c:09:a8:31:e6:80:0c:37:77:ce:25:07:65:
81:fc:da:23:4f:46:91:61:b5:c3:49:50:c6:4e:7f:cb:6c:5a:
dd:b0:d6:2e:ca:d6:40:bd:cd:ec:e1:53:0d:0f:70:68:c1:c4:
7f:dd:23:96:68:26:89:56:b4:be:59:f2:53:cf:d5:be:d3:95:
b1:e0:58:b8:50:d2:2c:27:db:c7:b8:1a:27:50:75:6a:b7:04:
4e:5d:78:19:62:c8:a5:68:07:bb:84:77:94:a3:55:11:f9:ba:
84:42:96:fc:6c:d5:d0:b0:54:1a:19:d3:1d:12:d3:51:99:3f:
61:67:91:c9:11:3b:ce:a8:32:e5:c5:d4:b9:aa:ca:c4:e9:ef:
66:f6:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:16 2025 by rpki-client