Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/PRccGfWzqpMbhGO3YgHz-azZDNA.roa
File: PRccGfWzqpMbhGO3YgHz-azZDNA.roa (raw, json)
Hash identifier: nCRPpVdhuUoFEaptWzTVDdcP1Vqkcc3l3T7T7joKIxc=
Subject key identifier: 3D:17:1C:19:F5:B3:AA:93:1B:84:63:B7:62:01:F3:F9:AC:D9:0C:D0
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 018CC64B062B86A40D9F0ABBD6D4BE50BD47
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/PRccGfWzqpMbhGO3YgHz-azZDNA.roa
Signing time: Mon 01 Jan 2024 18:30:54 +0000
ROA not before: Mon 01 Jan 2024 18:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49593
IP address blocks: 193.218.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:06:2b:86:a4:0d:9f:0a:bb:d6:d4:be:50:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d171c19f5b3aa931b8463b76201f3f9acd90cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:fe:dd:af:11:e8:30:44:a8:02:84:47:a0:
ba:5c:c3:a9:62:4d:f4:f4:08:cb:2b:0b:23:57:01:
8f:dd:3e:05:0e:87:5b:6d:f5:16:06:44:15:94:7a:
ad:f5:17:fb:a8:fd:c6:f5:a1:0f:98:94:75:7e:b5:
a9:7c:21:09:74:7e:bc:1f:bb:d7:0f:3b:46:ae:c5:
1b:7f:2c:bd:8a:8e:d9:26:93:e0:46:1a:1d:aa:42:
b7:3e:58:9d:99:c0:70:ad:40:d5:cd:17:5a:c5:85:
93:b6:cc:df:b5:30:82:ec:cb:df:de:0a:71:c0:6c:
a9:4e:4e:3c:7e:da:58:c3:c2:9e:ae:93:8a:bd:b0:
63:90:91:58:a9:a4:51:2b:72:47:68:a8:b4:82:11:
ec:0d:9f:be:b0:2b:89:94:bf:fe:e0:7b:ba:dc:1c:
8f:13:4a:ce:4e:e9:90:55:2a:17:56:c6:43:db:16:
29:84:c0:06:b0:10:da:cd:28:4d:cb:95:b8:b5:26:
60:98:2c:4a:ad:d2:80:fa:1e:1e:2e:4e:5b:b6:9b:
23:38:77:b2:7c:0d:f8:5d:e0:40:f8:66:92:79:30:
33:c9:aa:af:86:4c:b7:5e:15:cd:fa:6d:b9:69:b1:
d7:35:48:93:bb:54:ce:8f:8d:00:68:21:00:7f:56:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:1C:19:F5:B3:AA:93:1B:84:63:B7:62:01:F3:F9:AC:D9:0C:D0
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/PRccGfWzqpMbhGO3YgHz-azZDNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.94.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8d:00:28:7b:3b:48:07:48:d1:63:4a:5f:bd:fd:4c:63:ad:
4f:6a:73:8a:cb:92:47:52:a1:54:79:fc:e4:13:96:81:bf:8f:
8c:b1:2c:ad:79:ce:e1:e1:6f:53:ef:9b:e4:b6:7d:b4:30:e8:
76:da:b5:4e:88:f0:35:3d:7b:94:c3:2b:c5:d9:c9:ee:a0:92:
5b:ea:15:bb:1f:7c:b0:d1:44:f8:13:a9:a7:0d:c8:31:5d:11:
85:00:ee:9e:74:b0:24:dd:62:90:2a:56:79:43:61:60:fe:ba:
fa:fd:49:85:c2:60:a0:83:a9:c2:b9:6c:5f:dc:ab:01:20:21:
11:4c:b4:2a:14:68:b6:c2:80:bf:46:ac:45:7a:0e:95:79:ef:
23:82:57:5d:68:5c:78:f7:c5:95:4d:06:19:28:28:1a:c1:64:
fc:c5:0c:bd:8b:91:55:11:b3:fa:b0:07:cb:07:3f:90:7f:2f:
a8:c0:f0:e4:c0:84:5d:de:f3:d3:66:4b:54:b3:3c:48:40:3c:
ad:92:66:84:ef:bd:22:7f:e0:ba:0f:93:20:6a:6e:e6:11:22:
0e:f6:38:89:e4:a9:94:7b:18:df:b1:3f:db:f4:9e:68:67:0f:
43:27:e6:16:aa:68:2c:a5:17:90:0e:0c:39:04:74:06:4b:9b:
38:e7:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:11 2025 by rpki-client