Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eP2eEDBJaje2cAs-l0AtiHyADHI.roa
File: eP2eEDBJaje2cAs-l0AtiHyADHI.roa (raw, json)
Hash identifier: XrpgzaY1AWMjoKgXzjAF1F7gI/oy2LHuti2tdmiqQHo=
Subject key identifier: 78:FD:9E:10:30:49:6A:37:B6:70:0B:3E:97:40:2D:88:7C:80:0C:72
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444866231AE08BA00B75BBFE3715A25
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eP2eEDBJaje2cAs-l0AtiHyADHI.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 20:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:86:62:31:ae:08:ba:00:b7:5b:bf:e3:71:5a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78fd9e1030496a37b6700b3e97402d887c800c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:b4:6f:91:2a:a5:0d:08:6f:0a:9e:c9:7b:
54:29:51:a0:f2:a6:b9:84:25:f3:5b:d6:a0:33:d7:
2c:23:55:cc:ea:c4:96:29:5d:ee:d9:ad:9f:6d:58:
ec:58:18:9b:29:94:b6:f7:8c:c7:ab:a8:4d:f4:57:
19:1f:df:a1:f7:0f:f9:ae:44:de:73:a5:80:c9:b9:
f9:be:aa:b2:0f:72:7c:43:6b:e2:f5:8b:79:1f:7f:
d5:b0:77:af:80:63:41:e0:75:04:fe:07:68:ce:29:
17:46:de:58:76:1e:24:35:c2:b0:ec:26:ba:f3:79:
ea:20:02:df:3d:3e:3d:59:76:ae:7a:39:28:32:46:
bf:27:c2:31:ee:3c:a3:4b:a2:d3:d8:03:55:da:c6:
5e:3b:28:bc:85:4d:18:f1:3d:3a:b9:43:44:3d:46:
95:48:7e:57:04:12:6f:27:a8:45:9c:90:1e:b1:b9:
06:07:2e:0b:53:12:45:53:25:e5:8d:97:04:f4:09:
d2:e1:07:a9:13:8f:00:1f:4e:a1:41:4e:8a:08:85:
61:11:5f:08:2d:c4:a3:10:02:31:51:d1:c9:b3:83:
5c:d8:82:45:08:a1:9f:45:33:34:af:eb:2d:0f:70:
e0:bf:0b:cc:8f:c5:df:20:8b:9d:bf:b5:25:4f:d7:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FD:9E:10:30:49:6A:37:B6:70:0B:3E:97:40:2D:88:7C:80:0C:72
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eP2eEDBJaje2cAs-l0AtiHyADHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1c:24:70:83:35:90:c1:20:37:70:00:8c:7c:8e:1e:c7:81:
e1:df:d7:f7:d5:49:95:30:2a:ad:b2:33:b8:23:50:32:52:5a:
54:b7:26:d5:ca:de:88:2b:e8:cb:16:34:cf:61:e2:07:0d:66:
1c:3e:3c:6b:13:49:f9:db:8c:20:da:f8:fe:c0:47:fc:ac:cc:
43:aa:f2:1f:b6:9f:4b:66:59:64:54:2c:d7:b9:ab:fb:11:ca:
e4:50:e1:d5:65:4c:34:fe:fa:a2:18:78:c8:6f:84:b9:af:0b:
f1:78:2f:e6:98:44:87:e1:98:0c:ea:d8:61:e4:f0:c8:af:c8:
9b:43:a4:8e:a6:aa:14:13:f2:4e:c1:3d:01:43:04:9f:da:cf:
05:ec:6e:48:21:75:1a:d5:36:76:63:c2:7a:3d:c3:38:a2:75:
eb:ea:59:cf:e2:35:70:88:1e:99:06:04:33:9b:56:b6:36:42:
de:a4:4e:e1:0b:5f:d4:1d:74:6b:c3:df:16:dc:e1:c9:4c:5a:
ad:20:b3:ba:c9:0d:c5:ba:d7:32:87:5b:8e:17:35:f8:0b:5a:
80:4d:cd:40:fd:b0:69:50:30:e5:b7:48:e7:55:e2:e5:3f:d6:
dc:37:27:1f:d6:76:38:08:52:88:d7:69:d8:22:00:08:09:89:
e1:eb:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:20 2025 by rpki-client