Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/p3W14CnkY9w5QvnBpg7nmS9T_Ck.roa
File: p3W14CnkY9w5QvnBpg7nmS9T_Ck.roa (raw, json)
Hash identifier: xTWZNCrJAAwjAmT2GtCBF7yTDhGlRooZFz0yM7FfvU0=
Subject key identifier: A7:75:B5:E0:29:E4:63:DC:39:42:F9:C1:A6:0E:E7:99:2F:53:FC:29
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 018CC86F64798137F32F3D2C4AD3BF7A4934
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/p3W14CnkY9w5QvnBpg7nmS9T_Ck.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30950
IP address blocks: 193.28.236.0/24 maxlen: 24
185.58.68.0/22 maxlen: 22
2001:67c:324::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:64:79:81:37:f3:2f:3d:2c:4a:d3:bf:7a:49:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a775b5e029e463dc3942f9c1a60ee7992f53fc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:25:56:a3:56:33:76:16:dd:9a:85:90:58:
cf:2c:36:58:6e:a4:f3:1e:e0:29:cd:02:24:bb:0b:
99:72:eb:29:27:f2:7d:f3:0f:c2:48:08:a6:1c:6c:
dd:80:f1:1e:8b:0f:d5:1e:bd:ac:9f:4d:11:58:fe:
81:c3:76:8b:e2:78:03:2c:e5:a7:d5:0e:1a:99:b3:
20:c8:37:61:94:11:2a:6a:3d:fd:4c:c2:e6:9f:e4:
62:7c:58:3b:e1:3b:47:62:77:5c:3a:ef:0d:34:b9:
c9:53:ac:2a:61:9c:a2:da:0a:8f:7c:1c:7b:a0:57:
69:67:59:59:2e:50:aa:69:17:6d:60:03:3a:df:fc:
23:35:6b:e8:82:db:cc:01:e4:62:25:e6:4e:12:b4:
f8:61:9d:d9:dc:c1:1d:b0:32:66:71:b1:50:10:8d:
0a:1f:b7:f3:72:4a:20:5c:2c:b1:6a:4a:af:69:90:
e5:ce:13:50:18:0d:04:37:7c:1c:74:bc:b4:14:d2:
19:31:b4:be:10:af:00:a3:0f:0e:49:7c:a6:3b:a2:
67:f7:d5:36:83:3e:2f:85:61:93:83:46:4b:24:82:
97:4c:f1:d2:81:aa:14:bc:c5:6b:8b:95:4b:f4:6a:
10:c2:34:5d:7a:60:74:5f:a9:1a:bc:1b:af:dd:00:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:B5:E0:29:E4:63:DC:39:42:F9:C1:A6:0E:E7:99:2F:53:FC:29
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/p3W14CnkY9w5QvnBpg7nmS9T_Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.68.0/22
193.28.236.0/24
IPv6:
2001:67c:324::/48
Signature Algorithm: sha256WithRSAEncryption
07:9f:9b:41:43:28:ae:1b:35:b1:7b:14:d6:56:56:b6:ca:9f:
45:98:93:85:d5:0c:20:0f:52:d5:a4:60:24:24:ee:6d:60:d2:
bb:cb:52:69:04:7f:d0:28:07:e8:db:4a:6b:8c:25:21:ef:65:
8a:f9:52:3c:55:c7:04:a8:6c:1b:36:b2:7b:ce:1d:5c:3b:44:
2e:c0:53:03:db:5a:99:d6:6d:a6:4d:37:8d:2c:a9:a1:8d:79:
f9:00:66:40:8d:c9:08:77:19:68:f0:9e:d7:bc:f0:0f:33:c6:
74:f9:fa:ef:bb:c3:ee:57:26:ed:48:61:89:49:eb:cd:eb:9c:
97:7e:dc:98:f1:95:49:b5:3a:67:78:f7:1d:ee:dd:18:ff:df:
f4:df:b8:51:f2:12:ba:a9:74:40:f9:89:fa:8e:09:73:ba:e1:
79:f2:72:77:9a:17:b5:18:21:2e:6e:38:74:9f:37:de:ba:30:
41:1d:e0:b0:68:27:ef:34:70:d6:42:bd:4c:e5:60:49:43:cd:
d9:8a:b9:55:96:4d:ee:3a:ce:35:62:ed:9b:af:95:1c:97:ae:
17:63:21:51:ce:16:cc:9a:ba:8e:9f:32:ab:34:03:5f:c9:89:
04:f8:f6:ed:30:e9:15:84:04:1e:bf:24:db:20:0a:f9:d8:a0:
c4:dd:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:55:59 2025 by rpki-client