Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Z8BoeioLfebPyDVxhaGJmJcGJ5k.roa
File: Z8BoeioLfebPyDVxhaGJmJcGJ5k.roa (raw, json)
Hash identifier: NUZZHF8inf9i9Htzj4iKtUmNfRrr9ZJgDGwxqyRvCng=
Subject key identifier: 67:C0:68:7A:2A:0B:7D:E6:CF:C8:35:71:85:A1:89:98:97:06:27:99
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0193D48B59F04D423334971C2C0CD6372058
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Z8BoeioLfebPyDVxhaGJmJcGJ5k.roa
Signing time: Tue 17 Dec 2024 12:15:22 +0000
ROA not before: Tue 17 Dec 2024 12:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199964
IP address blocks: 185.93.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:8b:59:f0:4d:42:33:34:97:1c:2c:0c:d6:37:20:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Dec 17 12:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c0687a2a0b7de6cfc8357185a1899897062799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:77:49:24:6e:c9:b0:44:3e:97:5d:2f:62:
b7:fc:86:c9:43:99:38:3d:82:ed:aa:c1:ee:47:b4:
43:b1:5c:cc:e5:88:f4:e2:bf:cd:e6:32:ff:d8:27:
e0:97:df:06:60:43:9c:8c:b2:9a:47:a9:d4:b2:01:
f7:25:bc:c1:dc:c0:01:0c:9e:f1:9f:a4:30:a3:f3:
28:cb:fb:98:95:d5:d0:d5:f0:33:c0:85:7f:81:e1:
b7:a9:88:ea:5f:34:c0:6f:c6:ed:b4:2a:61:56:57:
03:da:ac:12:05:aa:78:4e:69:ce:49:26:da:e7:31:
22:06:88:8c:6e:67:3d:c5:c9:b3:f1:5b:3d:5d:a5:
9a:01:a4:5f:6b:42:2e:77:66:cc:db:24:58:d3:62:
17:c4:85:e4:01:1b:a3:d7:1a:03:23:87:fc:20:d3:
3f:bc:c2:54:a4:15:87:b6:6a:ca:0b:12:94:57:30:
0d:1b:8e:0b:a8:84:db:7f:1d:a9:2a:51:f0:a3:7e:
d8:e7:93:7c:be:46:8d:6c:79:1f:e3:63:df:be:2a:
b6:de:59:1f:f8:84:5a:1c:5b:4a:45:c1:b6:61:3e:
20:fc:d6:e0:6c:bb:a3:0a:cf:52:1f:78:10:44:f3:
9e:89:96:5c:dc:fb:32:23:e0:56:70:de:24:f0:d9:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:68:7A:2A:0B:7D:E6:CF:C8:35:71:85:A1:89:98:97:06:27:99
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Z8BoeioLfebPyDVxhaGJmJcGJ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.71.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a9:95:43:de:c1:ec:d2:b1:e2:d6:bc:ba:1f:c9:f4:f8:96:
47:b5:bf:cf:26:ad:83:15:65:29:96:bb:2d:e2:43:96:46:4f:
51:ab:5f:a0:fa:58:16:bc:19:8b:d8:b9:64:16:93:4f:78:fc:
79:94:93:a6:97:f1:f5:12:a3:3a:0e:a0:1f:4c:e6:a2:33:4a:
16:db:d3:85:85:f1:65:e3:75:ee:21:ab:36:f4:95:12:03:34:
70:1b:db:93:6e:11:29:a8:b7:fb:f5:aa:23:bb:45:c6:57:45:
9b:70:75:df:b9:6c:3c:91:9c:9d:18:31:19:3a:c5:8e:d9:b2:
b4:7d:d5:d3:01:a8:43:12:24:c0:de:bc:af:9e:1c:5e:0e:30:
31:20:e7:be:d8:0c:91:d7:d9:be:2e:c9:7a:4a:47:cf:a6:e9:
93:34:44:96:54:ca:d3:48:fa:47:7c:96:65:8c:42:b0:1b:4f:
73:d9:ed:e6:ff:54:8b:a4:b7:6a:19:d4:f8:32:dc:f8:25:57:
50:06:59:43:eb:4d:ec:98:9d:6b:d2:9f:4a:10:24:fe:e2:68:
cc:2b:73:ed:d8:f3:3f:23:a0:91:99:27:fa:ca:8a:75:08:84:
03:04:66:c0:b1:47:5c:7c:d4:57:c8:49:7d:aa:05:c9:02:2c:
b4:eb:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:28:48 2025 by rpki-client