Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/8kMIrB2jb8gg78UkBaVIwqUSCE0.roa
File: 8kMIrB2jb8gg78UkBaVIwqUSCE0.roa (raw, json)
Hash identifier: xbQQow9nO6qCX7kiXFv0czICWAW1Nd9JxgJNIyP6ryA=
Subject key identifier: F2:43:08:AC:1D:A3:6F:C8:20:EF:C5:24:05:A5:48:C2:A5:12:08:4D
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 01941F8C30EF8E993DF8A1AADF8F29D1B438
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/8kMIrB2jb8gg78UkBaVIwqUSCE0.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196864
IP address blocks: 193.93.168.0/22 maxlen: 22
193.93.168.0/24 maxlen: 24
193.93.169.0/24 maxlen: 24
193.93.170.0/24 maxlen: 24
193.93.171.0/24 maxlen: 24
2001:67c:1908::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Mar 2025 18:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:ef:8e:99:3d:f8:a1:aa:df:8f:29:d1:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f24308ac1da36fc820efc52405a548c2a512084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:63:c3:74:2f:e2:6c:09:0f:5a:e8:c1:4c:
89:e4:0b:19:b6:5a:ad:16:ee:76:4c:17:f0:19:7c:
82:66:99:8a:83:48:e1:01:0d:b0:ac:32:b6:0b:1b:
25:1d:d1:1f:8d:3d:8d:05:88:e5:67:42:cd:b5:f8:
f0:f4:49:0e:f5:06:e0:41:e1:a9:89:cb:4d:f2:c7:
c8:0d:a9:5e:08:9c:e6:5b:6e:f5:3d:7c:7c:e5:07:
1c:ce:7f:1a:78:36:1d:4c:56:05:2a:de:9d:e5:a1:
cb:3d:33:cd:57:22:e2:87:27:cc:26:8d:7f:51:f1:
1d:6b:57:88:72:1d:31:0a:ef:51:ea:20:66:38:74:
0f:c7:0a:7f:62:04:ce:31:6e:a9:e8:a5:de:ac:58:
95:17:31:f5:58:56:af:dc:70:ea:a2:e4:6c:98:f6:
e1:8a:47:bf:90:5a:14:66:9e:0f:bc:d5:54:51:12:
7d:29:84:d6:bc:71:de:9c:5e:84:d3:08:1e:90:8a:
64:e9:53:60:6d:10:99:47:89:77:84:84:ad:d3:08:
c6:9f:bb:db:60:1e:23:d0:b3:fe:b0:70:b8:9a:95:
88:cf:b9:42:4c:10:9a:4e:da:49:1d:c2:bc:3a:42:
04:55:a1:79:68:81:98:26:f2:91:90:49:ae:17:d2:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:43:08:AC:1D:A3:6F:C8:20:EF:C5:24:05:A5:48:C2:A5:12:08:4D
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/8kMIrB2jb8gg78UkBaVIwqUSCE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.168.0/22
IPv6:
2001:67c:1908::/48
Signature Algorithm: sha256WithRSAEncryption
8a:2d:55:a2:44:12:7f:39:31:e9:0d:db:8d:c0:1f:67:15:05:
22:4a:ad:44:aa:61:ce:94:9e:68:f1:ea:7f:03:02:ef:66:1f:
88:4f:4b:48:9d:b6:fd:e3:33:85:c6:04:c8:04:e0:e8:04:99:
04:0c:37:27:63:f2:f5:a8:40:dc:01:e2:1f:99:14:2e:23:7c:
6c:fd:86:c7:60:2e:34:3a:e1:e0:f9:93:d1:36:b5:ab:fb:85:
12:e3:75:23:21:de:db:36:78:ac:85:11:de:21:da:e2:91:57:
c0:06:bd:d6:8d:b6:b4:96:dc:40:1f:c8:3a:b8:51:72:36:64:
0f:48:68:ff:14:de:58:5b:83:a9:70:c6:89:d5:a5:50:75:75:
61:00:44:53:02:cb:fd:0c:56:9f:6c:16:e4:c8:b8:00:65:90:
e7:63:79:61:78:a8:69:81:84:ae:b9:6f:88:ae:48:f9:b4:3d:
65:0f:75:e1:69:26:47:c6:11:26:70:43:6a:0d:d5:6a:48:70:
3e:13:2a:02:b7:3d:95:db:c6:17:ac:b7:9c:a1:09:c2:b6:1c:
6b:50:73:59:94:41:60:d8:74:d2:71:ac:69:7a:9b:d1:ba:76:
7d:02:29:c5:67:f8:bb:7f:83:f4:b2:a6:a6:31:49:8f:ad:9d:
41:01:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:51:47 2025 by rpki-client