Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/2ca0kwdqAnuCQzJ3U2MlbPRV4kw.roa
File: 2ca0kwdqAnuCQzJ3U2MlbPRV4kw.roa (raw, json)
Hash identifier: 6Y4btN0IaLKVpNhCwY59GrKCf9OEk3E8kyBXsZgmwhQ=
Subject key identifier: D9:C6:B4:93:07:6A:02:7B:82:43:32:77:53:63:25:6C:F4:55:E2:4C
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 0193CA6E3D1951C36153C7F957D48F584C3B
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/2ca0kwdqAnuCQzJ3U2MlbPRV4kw.roa
Signing time: Sun 15 Dec 2024 13:07:22 +0000
ROA not before: Sun 15 Dec 2024 13:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 193.43.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:6e:3d:19:51:c3:61:53:c7:f9:57:d4:8f:58:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Dec 15 13:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9c6b493076a027b824332775363256cf455e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:2b:48:de:c2:2f:a2:43:e9:f6:2e:58:de:
54:d6:24:79:b4:bd:4a:54:77:15:16:bc:44:e7:b1:
69:91:59:9b:e4:b2:73:ee:95:d7:89:c3:5a:3f:68:
0f:06:bc:41:2b:7e:ff:34:19:ca:33:41:44:06:ff:
b5:6b:78:e7:07:4a:0a:c5:9c:26:a3:ad:55:89:69:
e7:8f:0f:a2:7b:a1:60:ca:7e:40:fb:64:55:e6:c6:
12:c3:fa:a8:99:66:77:d4:32:9f:f4:a9:13:a8:0b:
ce:35:c5:f7:f4:d8:19:73:81:d7:fa:44:16:b7:77:
2e:db:92:e7:83:da:2a:d0:0e:26:00:1e:73:9c:2b:
67:49:c9:bf:9b:81:02:f5:a0:5a:07:82:b3:a3:f8:
50:36:c6:16:24:ef:58:a4:5f:32:50:34:c7:f4:d0:
4a:66:69:78:bb:f9:65:b1:6f:21:44:c6:36:74:96:
d3:6b:93:2a:d3:46:3d:e5:6c:ed:6d:75:37:c7:ce:
6a:84:ae:af:d6:63:25:37:16:14:a6:9e:08:3a:32:
eb:64:b3:e6:af:e4:69:21:b1:f2:5a:97:65:c9:12:
a9:cd:63:d4:86:0d:68:ef:9c:8c:38:00:8e:53:24:
f1:66:de:de:7d:9c:dd:90:60:fc:0a:30:a6:70:b2:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:B4:93:07:6A:02:7B:82:43:32:77:53:63:25:6C:F4:55:E2:4C
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/2ca0kwdqAnuCQzJ3U2MlbPRV4kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:3a:32:bc:ed:f5:54:3c:be:db:96:6e:3d:71:0d:62:7c:ec:
87:3a:5e:df:db:5b:65:b9:d6:cd:45:ea:81:db:e9:21:e7:eb:
a1:0e:40:6b:ab:0d:0c:56:0c:56:ab:c3:2f:c9:16:78:91:5b:
28:0e:4a:1b:ab:0a:33:98:2d:f7:61:1d:64:c6:1c:c6:fd:f4:
09:05:99:b3:60:22:82:9f:1e:9f:19:51:7e:0c:f4:e7:d3:00:
db:ab:cf:6f:a4:57:59:c4:6b:27:53:43:79:e3:8a:10:eb:f2:
73:62:19:e2:1d:55:80:d7:51:19:42:d8:8e:ad:8c:5b:4b:9e:
27:0b:f2:19:dd:0e:31:82:30:3b:c6:c3:0a:2a:a5:b6:85:55:
83:9f:8b:c3:4b:e2:6e:a5:41:72:ec:e9:d7:6d:42:3b:3c:16:
21:12:12:ae:1f:ef:9c:60:e2:81:89:f8:34:b6:76:a9:16:56:
bb:05:f0:6d:9b:d7:06:8d:c8:39:cb:9f:1c:d5:8c:bb:d9:16:
95:dc:1e:d4:7b:99:ef:88:63:b7:6b:65:9f:d6:a2:ad:3e:39:
8d:50:e1:10:b6:85:8e:45:48:12:03:7c:7e:07:5f:e0:3b:15:
d7:76:da:78:e9:fa:04:93:ba:b7:dc:fd:93:8f:ed:64:f8:7e:
8c:7a:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:05:05 2025 by rpki-client