Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/xkG5C9EIic15eorp2Y7XuYpkcx4.roa
File: xkG5C9EIic15eorp2Y7XuYpkcx4.roa (raw, json)
Hash identifier: n8lCWGpUNBjTbXMolc03Z+2CnsqT94fJsmtCrFN913U=
Subject key identifier: C6:41:B9:0B:D1:08:89:CD:79:7A:8A:E9:D9:8E:D7:B9:8A:64:73:1E
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 01942143FA063A362E9912FC030E4F6282DB
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/xkG5C9EIic15eorp2Y7XuYpkcx4.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200252
IP address blocks: 193.107.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Feb 2025 10:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fa:06:3a:36:2e:99:12:fc:03:0e:4f:62:82:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c641b90bd10889cd797a8ae9d98ed7b98a64731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:6c:a9:4f:d4:88:3b:32:b7:7a:1f:9c:c2:
d1:4e:fe:18:35:1e:8b:01:0d:16:e6:65:82:36:8b:
5d:cb:37:d0:7a:23:67:2b:14:d7:9a:2c:fd:ee:c9:
bb:b4:2e:dc:2e:92:de:31:a8:96:85:1e:8a:60:3c:
9e:20:55:b8:94:2e:26:1a:6c:0d:32:93:66:c3:14:
15:83:81:b6:3e:55:62:4c:71:48:53:d4:53:6d:45:
00:31:da:10:40:30:9a:2e:b0:90:77:32:0b:ae:b5:
54:74:af:2a:ae:66:19:46:cd:97:7d:66:bc:22:fd:
9e:2c:89:89:ff:74:da:2f:8a:c5:d3:ea:c1:a0:a3:
ee:09:7b:d2:27:1f:97:31:52:7e:d7:4e:21:cd:55:
13:e7:43:0a:3f:b1:b4:4d:d5:0e:15:c1:a8:57:3f:
29:78:b9:cd:04:64:05:31:de:cb:c7:5f:66:b1:96:
f4:24:67:70:77:93:a9:48:07:f4:17:6d:4b:41:0a:
46:4f:b2:34:ea:95:36:09:a6:8c:08:d0:0e:52:6f:
b9:79:fb:92:3d:65:19:5d:9b:e4:3e:a9:9d:69:cf:
b2:c7:26:8d:17:a3:f9:d3:65:82:bb:4a:13:57:13:
98:c8:f9:7a:0d:83:5a:cf:eb:c4:8c:50:d2:b8:28:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:B9:0B:D1:08:89:CD:79:7A:8A:E9:D9:8E:D7:B9:8A:64:73:1E
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/xkG5C9EIic15eorp2Y7XuYpkcx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:17:37:40:5a:d5:83:6d:f9:fc:6e:39:79:43:4b:76:2b:36:
74:6a:25:f5:0b:1d:1a:b6:0b:30:7c:d2:9f:5c:c4:74:b3:16:
20:9a:89:09:d3:50:4c:03:3c:56:b2:da:90:ff:a5:dd:92:38:
be:22:4c:e5:58:55:a9:cf:25:d7:9f:d3:d7:9d:7b:db:ff:3d:
13:3b:d0:83:72:77:91:c4:d0:9d:a3:20:0e:64:ae:69:8b:1e:
fe:49:a6:d2:3c:26:75:d1:b8:00:d4:ec:33:11:5a:51:0e:e7:
ce:d8:d9:5b:2a:97:7e:a7:30:d2:4a:bf:bf:1f:cd:c5:6f:fe:
51:a2:03:5e:3b:24:13:a5:ab:07:99:d6:44:b4:a9:da:75:99:
ff:5a:fe:31:7f:ac:4f:d1:82:75:ad:a7:c0:17:1c:48:af:c8:
65:10:d7:f4:9b:0d:15:3b:6b:7f:e3:88:b2:c5:e9:e2:9b:a3:
08:75:c9:78:a1:df:a6:e7:53:a8:10:53:61:fe:1c:42:0d:d8:
9f:c5:56:e6:bc:4b:41:92:14:28:39:c8:2a:37:82:ab:3a:29:
b2:e6:33:2d:6b:3f:a1:08:2e:45:77:b9:19:1f:be:cb:be:2e:
a2:44:11:3b:06:9f:97:02:ba:35:91:0a:4d:e9:3f:ca:bd:c4:
ac:eb:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:57:23 2025 by rpki-client