Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/teYzp5bIqxUkdSL3zroTRRl1XZ0.roa
File: teYzp5bIqxUkdSL3zroTRRl1XZ0.roa (raw, json)
Hash identifier: VhFIYx2fK9EY4dkStVdoTP4L/66POi05cB3H+UPRFcI=
Subject key identifier: B5:E6:33:A7:96:C8:AB:15:24:75:22:F7:CE:BA:13:45:19:75:5D:9D
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01941FFA68A61A5437C1307F757894E70577
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/teYzp5bIqxUkdSL3zroTRRl1XZ0.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213960
IP address blocks: 93.126.50.0/24 maxlen: 24
93.126.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 11:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:a6:1a:54:37:c1:30:7f:75:78:94:e7:05:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e633a796c8ab15247522f7ceba134519755d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:81:d2:a2:9c:c9:ff:dd:ea:0b:ea:0f:73:
29:73:55:db:a7:d9:59:5a:57:13:e8:11:dd:c6:3e:
a8:98:6b:82:b2:c2:45:18:39:a4:b7:53:0c:a9:32:
b0:d0:b7:e0:3a:76:7b:d3:cd:70:41:5c:10:31:91:
03:4b:16:67:06:0e:9c:43:19:7d:6c:0f:5f:58:5f:
22:17:3e:52:10:fa:84:3d:d1:5b:57:4e:41:9e:84:
75:b8:07:a1:12:b9:20:a2:37:be:aa:06:df:fd:ae:
6e:8a:11:60:89:0f:56:21:a9:64:2f:d8:2a:2c:e5:
ab:a8:5d:f2:93:15:20:cf:bb:43:d3:ca:e4:ad:0b:
3e:bf:f6:a3:ad:e9:88:4f:cd:9b:52:39:76:ff:be:
89:d5:03:b0:35:36:4d:15:8e:5b:2b:f8:c9:7e:55:
b3:05:4d:54:c3:12:53:1a:2b:f0:7c:32:c0:89:06:
9c:71:6a:6c:50:71:79:c2:78:7c:8b:11:9d:14:65:
a8:a9:f1:96:01:04:df:82:2d:fa:89:62:ec:45:14:
35:3e:11:e1:6b:ae:e7:58:47:7f:1b:46:5e:eb:03:
b5:67:a8:b2:de:21:16:2f:95:ed:16:96:e9:24:ba:
46:6e:fd:e8:c8:fa:79:9d:49:86:9e:a1:dd:21:2c:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:33:A7:96:C8:AB:15:24:75:22:F7:CE:BA:13:45:19:75:5D:9D
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/teYzp5bIqxUkdSL3zroTRRl1XZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.50.0/24
93.126.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:81:44:30:60:ef:20:c7:f1:2c:b0:68:6d:27:80:1e:b6:11:
c1:09:c5:b5:45:cb:d0:d5:b8:a4:26:f4:d4:26:ef:a4:48:79:
c6:90:f0:c5:06:ac:5b:94:8f:d9:96:73:91:df:4d:fb:89:14:
69:76:4f:4b:73:c7:82:a4:4d:38:d4:d8:6c:0d:1b:e7:8d:df:
48:fa:18:b8:70:ae:de:a3:d6:af:53:2b:f0:e3:2a:56:db:88:
91:73:ad:ef:04:4e:4d:c5:6c:42:25:bc:7f:36:45:60:39:3a:
7a:13:3b:46:de:57:59:69:c6:f6:12:14:4a:42:40:4c:9b:16:
9f:a4:46:cc:28:6f:b6:1a:86:f3:be:9f:28:ab:1f:a5:19:0b:
74:c0:73:b5:91:67:ba:b4:58:3d:58:81:a4:09:db:28:56:8f:
63:f5:4b:ae:e1:c6:31:8d:5b:03:26:55:fc:ac:fb:47:96:c4:
24:de:4c:f3:ce:97:6d:31:90:15:59:84:21:a5:eb:a8:f8:0a:
e5:d2:f9:cb:ac:5a:b4:41:64:e1:e8:f6:36:05:49:77:70:0d:
6e:fc:b3:a3:5b:6a:ce:38:7b:3f:2f:ef:f5:11:6f:c7:5d:13:
e5:f6:aa:2d:07:c1:bb:f9:4b:d2:41:c3:5b:58:9b:e0:db:87:
74:5f:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:42 2025 by rpki-client