Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/mIL9fdVHuHjKISbs5kn7xq6pKkk.roa
File: mIL9fdVHuHjKISbs5kn7xq6pKkk.roa (raw, json)
Hash identifier: 2N+RfXgQmwuZ6ni8a5ofJC3AJRAzzW+fOm9CwFofZ6I=
Subject key identifier: 98:82:FD:7D:D5:47:B8:78:CA:21:26:EC:E6:49:FB:C6:AE:A9:2A:49
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 018CC9BA68311F30D0616C991B5C53B1824C
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/mIL9fdVHuHjKISbs5kn7xq6pKkk.roa
Signing time: Tue 02 Jan 2024 10:31:25 +0000
ROA not before: Tue 02 Jan 2024 10:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.201.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:68:31:1f:30:d0:61:6c:99:1b:5c:53:b1:82:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jan 2 10:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9882fd7dd547b878ca2126ece649fbc6aea92a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:c0:7f:69:bc:f7:dd:b9:22:ea:25:42:85:
ce:b0:ec:81:ea:77:6d:0a:89:0d:83:b8:15:b0:65:
fb:aa:c3:85:8f:65:b2:4f:c2:b8:0a:00:73:9f:f3:
2f:49:78:b3:6c:fd:ac:f3:48:3d:ce:52:13:6f:98:
4b:24:88:de:af:a0:09:c4:bd:06:2a:db:c4:ef:b8:
77:28:5e:63:c6:fa:8b:d1:5b:de:54:be:da:a6:d7:
bc:7c:b0:79:02:a3:6f:b6:f8:8b:ce:8b:86:a6:01:
1f:fb:12:9b:a8:fa:3f:3f:01:99:c6:32:7a:66:ff:
fe:55:65:ac:19:4b:88:b3:e2:04:e9:9b:35:8c:62:
68:56:cf:e8:42:9f:4f:72:49:6f:6b:0a:6b:28:ae:
23:09:eb:14:9a:7f:1e:25:a9:2e:a0:24:95:ea:25:
2f:d7:51:3c:ae:89:d8:d3:1a:c0:e7:dd:5d:e1:f6:
d3:a2:52:18:0a:0a:ff:14:7b:de:94:ec:d9:2e:74:
c1:4e:aa:00:f6:ff:60:ee:ef:48:dc:52:67:cd:b8:
f4:51:63:6e:34:08:14:7b:50:c0:f4:c1:f1:b7:86:
d0:66:df:a1:4f:c6:5b:c4:e4:a6:8f:06:bb:7e:0d:
83:67:b9:dd:07:4b:9f:4e:ff:f8:54:75:65:25:3f:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:FD:7D:D5:47:B8:78:CA:21:26:EC:E6:49:FB:C6:AE:A9:2A:49
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/mIL9fdVHuHjKISbs5kn7xq6pKkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
92:da:9a:83:2d:b0:33:78:00:89:27:73:98:c1:f9:58:8c:68:
63:7c:b1:7c:d2:79:ea:d6:d6:2d:7d:32:a4:0e:11:bc:9b:d2:
2a:56:cb:24:5d:1a:4f:5c:0f:b3:41:d2:14:4c:e2:62:a1:96:
67:87:d2:41:45:08:45:54:72:54:6a:c8:03:34:3e:cf:50:d4:
9f:a9:f4:51:a0:ee:04:fc:9a:4c:1a:2e:ae:4b:e5:72:0e:b4:
4c:a9:be:cb:e4:3e:58:05:da:e1:8f:e4:03:c9:68:07:99:f2:
3b:59:af:52:90:f9:7e:46:ae:c3:06:02:9a:9b:c8:51:25:79:
59:df:ff:f9:fd:f8:57:6e:f0:c3:11:8b:15:ed:0a:b2:f1:d8:
54:cd:b2:a7:1e:38:28:d6:67:75:ed:99:ab:57:d1:3b:8c:91:
a6:eb:45:c3:91:48:33:ce:f3:1c:b4:ac:45:31:b5:ae:ec:76:
e1:cd:2e:38:ff:64:33:41:91:10:3d:42:36:3a:4f:12:c4:d3:
cc:2e:a2:f7:37:c9:f2:c3:94:52:ad:ec:3e:d8:fa:54:93:9e:
3e:4c:ed:9e:a5:91:43:f9:d2:74:04:af:f2:58:a0:a0:2f:d0:
2c:3a:57:07:4a:33:87:70:8a:e3:ed:85:77:28:c2:21:31:c3:
80:fb:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:44 2025 by rpki-client