Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/688xvn_ehEGjRd7KdNTWhl2NPjg.roa
File: 688xvn_ehEGjRd7KdNTWhl2NPjg.roa (raw, json)
Hash identifier: vLrcMG8JLPpoEqCpoIhns3hdbqz/7p3r1Dx1zpd6464=
Subject key identifier: EB:CF:31:BE:7F:DE:84:41:A3:45:DE:CA:74:D4:D6:86:5D:8D:3E:38
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018CC56E33AE0355A1D50CA08EB9F0190CE3
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/688xvn_ehEGjRd7KdNTWhl2NPjg.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41221
IP address blocks: 93.116.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 10:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:33:ae:03:55:a1:d5:0c:a0:8e:b9:f0:19:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebcf31be7fde8441a345deca74d4d6865d8d3e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:42:b0:c5:58:be:27:1a:98:85:bd:33:52:
6e:63:00:b6:df:34:57:f0:78:5b:be:5a:f6:5b:f4:
2b:4c:a6:e7:cb:ee:94:c9:dc:59:98:86:c6:5d:04:
14:74:19:0b:68:bd:ed:fe:6f:d7:2f:aa:67:7d:fb:
dd:5d:5d:34:a3:b1:73:36:e1:86:29:67:68:97:33:
70:7a:27:a4:ef:44:6e:06:6c:2d:0d:82:8b:77:7b:
71:27:9e:7e:a5:42:26:b1:81:93:b3:46:e6:bd:93:
75:92:73:d7:84:31:10:a3:a2:6d:ef:af:25:5f:5b:
60:7d:da:49:26:5c:40:ca:f1:ac:f0:65:a4:e3:ea:
f2:af:1d:d6:f6:95:4d:93:40:fb:f6:5a:71:17:66:
06:c7:70:12:e9:b3:52:2f:f9:1a:6e:6d:fe:8a:e7:
fd:e0:61:6a:77:31:ab:11:3a:7b:d7:84:2b:a5:3f:
96:07:f6:58:49:e2:75:21:a9:55:a3:c9:95:19:6e:
33:2e:f8:30:b5:d7:83:8b:a6:58:10:91:e8:b4:83:
6b:5f:60:5b:63:e0:7a:6d:49:04:64:d4:4a:53:b8:
8a:0f:14:5a:8e:93:6a:a0:6c:dc:a3:a2:80:d7:e4:
22:b0:b2:19:4b:e5:10:d6:4d:f0:3a:dd:27:19:00:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:31:BE:7F:DE:84:41:A3:45:DE:CA:74:D4:D6:86:5D:8D:3E:38
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/688xvn_ehEGjRd7KdNTWhl2NPjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.116.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:fe:0c:e2:01:72:42:79:98:9e:42:bd:74:c0:72:8a:e6:2a:
93:a0:75:88:78:4c:86:f4:2f:ad:db:32:41:32:f1:9f:2a:8a:
4c:79:0d:19:94:e1:10:16:49:bf:00:ff:7e:f7:7e:04:b4:8f:
eb:da:19:3f:9b:e1:a9:d8:c1:0c:68:86:bf:d4:23:22:e6:dc:
75:fd:79:23:0b:01:b6:ef:27:a9:ae:2c:19:aa:6b:41:56:1d:
7e:d4:1e:b5:26:23:69:d4:c5:7c:18:61:4b:cf:4c:7d:c5:f5:
36:47:59:bf:72:b8:8b:d6:29:23:d4:7f:9c:d6:04:f0:0f:55:
57:61:7f:a5:9a:a3:4f:11:0d:57:a7:33:d0:fc:b6:a4:77:eb:
e8:98:f2:33:76:99:df:a0:4f:38:0a:63:44:7a:f6:e9:70:cc:
2b:01:42:89:b8:39:28:01:d4:44:c2:d2:13:97:53:9c:9f:8f:
04:b9:82:1f:c1:7c:3c:3b:22:0b:3e:56:1d:50:0f:8a:ee:74:
2c:69:95:40:6e:11:80:e9:f2:23:4c:f2:c0:18:2e:34:ae:1b:
ae:16:9a:f8:4b:e0:d0:ff:97:b1:26:96:a4:3c:15:b2:ab:08:
1d:0a:ec:2e:9b:f4:86:c7:41:1d:79:db:48:35:f0:44:78:0f:
73:9a:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:14 2025 by rpki-client