Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/9ypzj-9Qhn4Cr3NYCV22ThZDf6g.roa
File: 9ypzj-9Qhn4Cr3NYCV22ThZDf6g.roa (raw, json)
Hash identifier: XxzC8Dio1OGCMpQPnVhJdpDtJztMyjsyGNkfLOpUnEE=
Subject key identifier: F7:2A:73:8F:EF:50:86:7E:02:AF:73:58:09:5D:B6:4E:16:43:7F:A8
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 018E133BF89641823004DA3483ABB4BCB771
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/9ypzj-9Qhn4Cr3NYCV22ThZDf6g.roa
Signing time: Wed 06 Mar 2024 10:08:01 +0000
ROA not before: Wed 06 Mar 2024 10:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213058
IP address blocks: 193.150.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 14:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:3b:f8:96:41:82:30:04:da:34:83:ab:b4:bc:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Mar 6 10:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f72a738fef50867e02af7358095db64e16437fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:30:23:ad:d5:31:c0:dc:8d:c7:9e:b8:6d:
1d:3d:ee:32:99:e1:31:9e:32:4a:f6:20:f4:b4:27:
dc:7f:5a:ce:44:73:b2:1c:84:1b:36:ab:bd:d3:9c:
56:db:a2:df:d7:d6:d8:d7:38:ba:68:21:69:cb:06:
a5:85:e0:0e:fe:24:1e:7a:e7:61:e6:e4:28:e0:99:
82:9f:96:54:51:12:bf:76:09:55:9c:12:97:f0:3e:
8e:35:9e:e8:58:2b:93:4d:b6:ca:30:e8:44:ef:fe:
74:57:80:e4:15:48:3d:af:97:1b:13:bc:5f:22:5d:
78:38:bd:43:ec:c6:ec:35:d2:8f:ca:b9:5c:12:d4:
52:f8:c0:fa:53:56:3e:5a:30:a8:2f:18:b9:e7:77:
91:73:a8:7e:21:b2:78:d6:d3:0e:b3:83:54:dd:ea:
3e:20:5d:e4:5e:34:b7:24:c9:ae:b2:c2:fa:21:db:
e2:1e:de:6c:cb:47:b2:0c:d2:eb:0d:f8:b2:d5:57:
f0:ca:a9:18:93:ad:e1:2a:35:52:0e:90:3e:3f:2f:
86:96:43:2b:39:d7:09:3e:2e:1f:03:b5:61:2d:7c:
08:3b:10:6b:5f:af:f8:f1:35:4b:6e:fd:f3:9a:47:
6d:67:cd:f4:19:10:be:31:9d:88:75:fa:d5:6d:73:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:73:8F:EF:50:86:7E:02:AF:73:58:09:5D:B6:4E:16:43:7F:A8
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/9ypzj-9Qhn4Cr3NYCV22ThZDf6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7a:fc:7f:bc:27:53:6a:02:8f:9d:99:5f:2b:e1:70:d6:e9:
58:c8:60:b1:ba:8a:cc:c3:25:2f:26:47:61:f4:37:1a:87:02:
2d:e1:c9:c2:bb:ad:86:73:50:5a:a1:88:ca:2f:d5:b5:68:2d:
84:4f:55:aa:25:7d:66:39:60:63:53:7b:28:dd:16:55:aa:84:
97:0b:4c:c2:1b:fc:79:29:c6:7a:e1:2f:73:7f:72:68:50:a9:
b4:ad:dd:43:d0:b6:92:0f:ca:a9:4f:49:c1:e4:42:b5:28:b4:
e4:77:0a:2f:82:ae:2f:3e:d3:00:8e:30:37:1a:b1:0a:b4:af:
51:2f:87:b5:fc:d3:15:06:f3:8f:5c:d1:65:20:79:3d:57:0b:
4f:98:5b:a7:c5:f6:5e:e9:d4:07:35:85:52:34:10:a6:6a:36:
56:b8:c9:d8:5e:6f:21:24:c7:e6:01:37:05:76:76:2b:87:89:
89:5c:ee:8e:39:0b:b0:d7:23:42:7c:71:42:39:1a:cb:da:5e:
2c:9f:8f:85:a1:6b:fb:f0:b7:b8:cd:cb:9d:8c:0b:95:4e:d5:
80:09:8f:41:0a:36:77:96:78:07:21:57:44:8b:bf:bf:79:02:
e8:9d:eb:17:bb:22:db:07:09:25:64:54:e8:b6:2d:61:51:e7:
19:3b:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:59 2025 by rpki-client