Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/aXJCZsu6KpbICrxm0DGVaeiZfJM.roa
File: aXJCZsu6KpbICrxm0DGVaeiZfJM.roa (raw, json)
Hash identifier: BxaMlLG4/sIrGFbrmjb9SApnCnQzFOHFaD4t0XmUs7E=
Subject key identifier: 69:72:42:66:CB:BA:2A:96:C8:0A:BC:66:D0:31:95:69:E8:99:7C:93
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01938912C912D92C3859E9BA1955D79055BB
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/aXJCZsu6KpbICrxm0DGVaeiZfJM.roa
Signing time: Mon 02 Dec 2024 20:32:09 +0000
ROA not before: Mon 02 Dec 2024 20:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213960
IP address blocks: 93.126.50.0/24 maxlen: 24
93.126.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:12:c9:12:d9:2c:38:59:e9:ba:19:55:d7:90:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Dec 2 20:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69724266cbba2a96c80abc66d0319569e8997c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:58:6a:c2:66:a5:ad:16:9c:3d:25:2e:38:
6d:68:ee:13:1d:ca:72:2b:f7:0f:e5:06:d1:1a:15:
4c:26:bd:69:db:1d:2f:e4:cc:8b:f7:37:99:df:6d:
8b:d6:31:e8:07:c8:63:52:22:e4:6c:c9:66:d6:66:
80:9b:67:54:01:91:86:87:75:a2:76:20:4b:2d:e1:
a7:b7:02:df:15:08:74:b6:9a:d2:3a:49:0c:19:c6:
90:5e:0e:71:3b:b6:25:f5:5e:56:98:b1:2f:82:6e:
1a:04:17:12:ce:39:90:80:0f:9d:68:9a:ba:a0:82:
68:84:7c:e3:3f:46:95:8b:12:9a:d3:60:a6:5d:64:
4b:68:bd:c6:34:84:74:4f:89:c4:bb:7b:a1:04:38:
85:cd:19:25:71:77:2d:a1:dd:80:1a:20:87:41:6a:
db:c9:9a:0f:e2:3f:96:7a:ff:8a:1c:1f:17:bc:ba:
65:33:3f:6b:e7:7d:70:d6:5e:42:c8:04:b6:63:ac:
36:13:db:5f:86:68:5d:60:53:f8:ce:5c:cf:9b:fe:
42:ed:25:9f:54:ba:c2:90:ed:3b:6c:29:59:ad:9b:
e6:ab:63:27:b5:cb:bf:21:4e:ec:84:b3:c9:5c:c9:
dc:66:5c:73:8f:06:3d:33:b8:89:a7:a1:8e:91:bd:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:72:42:66:CB:BA:2A:96:C8:0A:BC:66:D0:31:95:69:E8:99:7C:93
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/aXJCZsu6KpbICrxm0DGVaeiZfJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.50.0/24
93.126.53.0/24
Signature Algorithm: sha256WithRSAEncryption
36:85:13:a8:f3:df:fb:f8:8c:2b:ab:da:73:f5:84:b1:48:55:
74:d5:88:5f:45:0f:01:b2:80:9a:c7:98:94:b7:62:69:ee:f7:
72:d9:17:3b:b6:7d:22:c5:f1:bc:e0:b5:af:b6:81:42:72:9f:
fa:0a:22:e9:3c:d2:a0:00:3c:d1:98:55:99:5b:bf:f0:90:59:
43:55:60:bc:4f:09:ac:2d:d8:10:61:78:38:0f:34:8a:70:f3:
b1:f3:2d:2b:81:f5:a9:f7:ec:48:0f:10:21:c7:8d:f0:cd:29:
3b:56:74:47:40:d2:fb:87:b6:fe:08:8b:06:ff:e0:ae:9c:5f:
f2:da:e0:75:91:e5:1f:a4:68:18:6b:7d:79:d5:94:08:27:9e:
d2:a6:7f:71:9d:c5:7d:57:55:c3:a0:f0:f8:5e:e8:3e:fd:dd:
39:3c:9b:60:12:59:f2:61:8f:61:9a:c7:68:df:cb:cb:a6:8c:
84:12:3a:0b:2d:18:b1:75:f9:65:9c:f7:34:ee:c3:0c:0c:ee:
8e:ef:11:8f:9f:c7:71:46:4d:ec:73:90:e4:87:88:ab:23:4e:
6a:e0:cc:bc:ff:51:5b:20:46:b8:9f:a9:24:66:81:47:77:0b:
9b:93:57:25:6f:68:6e:00:c3:f7:8b:5b:bc:b1:e7:34:a3:7c:
ec:ed:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:25 2025 by rpki-client