Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/BRnE7-Ux4bVPUNJqlYlGKIACDcg.roa
File: BRnE7-Ux4bVPUNJqlYlGKIACDcg.roa (raw, json)
Hash identifier: 6arthbn0bihwQRRqWZEhkI3LCpCXQBzyFOEo1T8i0qA=
Subject key identifier: 05:19:C4:EF:E5:31:E1:B5:4F:50:D2:6A:95:89:46:28:80:02:0D:C8
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019379AAB15F76A0F17465093B37CDFC12D5
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/BRnE7-Ux4bVPUNJqlYlGKIACDcg.roa
Signing time: Fri 29 Nov 2024 20:44:09 +0000
ROA not before: Fri 29 Nov 2024 20:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213960
IP address blocks: 93.126.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 20:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:79:aa:b1:5f:76:a0:f1:74:65:09:3b:37:cd:fc:12:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Nov 29 20:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0519c4efe531e1b54f50d26a9589462880020dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:55:56:84:90:ff:f1:f9:7d:29:45:fc:89:
44:52:06:e7:05:1b:29:39:0a:80:81:f0:52:64:a9:
9f:c6:db:71:d0:ff:8c:17:5f:f7:e5:8d:c0:e1:89:
ad:4b:be:cb:6b:94:33:20:f0:03:1b:c3:32:71:d2:
12:15:5f:00:61:f5:a4:41:df:9c:61:ee:a5:b2:76:
93:3f:e1:da:c6:75:70:1f:2a:08:c8:0d:f4:0b:1f:
37:31:a2:86:2b:b2:36:79:d1:da:3e:36:9a:79:57:
8a:77:f0:b6:79:56:7a:d6:94:8a:68:19:8a:1f:c7:
78:e7:35:aa:61:34:07:bf:a3:21:1e:4d:c6:df:d6:
c7:12:f6:eb:5f:da:fa:8a:74:88:1e:8c:8d:de:0c:
a1:e1:e6:f8:9b:4b:63:e8:3e:6a:36:73:51:03:b7:
ae:63:37:be:98:73:fa:e8:b3:0e:50:bc:d8:20:7d:
63:04:ed:b3:70:af:a4:5d:32:22:6d:16:6a:ce:3d:
72:46:1c:75:e7:da:f3:e9:59:42:3f:f7:cc:2b:e8:
a5:09:e5:a8:74:94:4b:c9:cf:fb:1d:eb:38:bf:f6:
a2:9a:3a:cc:3e:42:09:eb:af:88:c3:41:eb:7d:e4:
98:57:b1:30:13:92:da:00:76:4a:9c:22:1d:17:57:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:19:C4:EF:E5:31:E1:B5:4F:50:D2:6A:95:89:46:28:80:02:0D:C8
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/BRnE7-Ux4bVPUNJqlYlGKIACDcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.53.0/24
Signature Algorithm: sha256WithRSAEncryption
61:76:13:f5:c8:67:95:b0:13:1c:2d:e2:19:a3:63:01:21:03:
5b:aa:71:01:97:58:82:74:ee:31:5f:82:14:44:29:42:23:a4:
77:09:49:dd:a2:db:7e:a5:fb:3b:4e:a4:f3:60:57:06:ff:ad:
27:6b:54:3e:32:d9:ba:5e:0e:20:32:23:21:07:f6:31:5b:6c:
68:a0:32:64:8f:0c:ab:24:a1:bb:fc:8a:04:bb:76:d6:a5:3b:
c7:76:61:42:f4:b6:2e:f1:97:b3:ca:99:fd:92:2a:fa:e6:46:
a4:c9:63:bc:2f:36:f0:47:f9:0c:31:33:b6:95:a1:b8:c3:c6:
ef:61:c3:56:0c:05:91:a1:18:08:f0:89:66:5f:01:55:72:f1:
33:0d:25:e5:5e:48:52:c6:c6:52:22:b1:c0:fa:6a:67:13:20:
cf:ee:99:50:db:c6:c2:9f:f4:4e:98:38:60:f3:d9:16:d1:25:
e4:a8:a6:0f:e5:47:23:8b:37:7e:5e:82:f0:0f:77:14:f3:a4:
54:51:49:21:9a:76:09:d7:4e:46:c8:cc:50:ab:90:5a:3e:43:
38:72:5b:a4:1c:bc:01:6c:f1:9b:43:c6:c3:f6:3c:d0:0f:40:
d5:e9:17:59:10:ef:be:1a:ec:d3:30:76:ef:86:b6:34:af:ba:
a0:78:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:56 2025 by rpki-client