Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/E6zvbkH_8ICy5Iwi7wGfIedsDSg.roa
File: E6zvbkH_8ICy5Iwi7wGfIedsDSg.roa (raw, json)
Hash identifier: bYgAr6aBopWpeN1Gm29oHWoJTtYSq6aDCAqcVc5BDLo=
Subject key identifier: 13:AC:EF:6E:41:FF:F0:80:B2:E4:8C:22:EF:01:9F:21:E7:6C:0D:28
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0193970E80923A0E0DEA7822AB5668335472
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/E6zvbkH_8ICy5Iwi7wGfIedsDSg.roa
Signing time: Thu 05 Dec 2024 13:42:10 +0000
ROA not before: Thu 05 Dec 2024 13:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3218
IP address blocks: 193.232.0.0/22 maxlen: 22
193.232.2.0/24 maxlen: 24
193.232.4.0/23 maxlen: 23
193.232.6.0/24 maxlen: 24
193.232.8.0/21 maxlen: 21
193.232.16.0/22 maxlen: 22
193.232.22.0/23 maxlen: 23
193.232.24.0/21 maxlen: 21
193.232.192.0/22 maxlen: 22
193.232.196.0/23 maxlen: 23
193.232.207.0/24 maxlen: 24
193.232.208.0/23 maxlen: 23
193.232.212.0/24 maxlen: 24
193.232.218.0/23 maxlen: 23
194.85.208.0/23 maxlen: 23
194.85.212.0/23 maxlen: 23
194.85.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:0e:80:92:3a:0e:0d:ea:78:22:ab:56:68:33:54:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Dec 5 13:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13acef6e41fff080b2e48c22ef019f21e76c0d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:c8:b5:4f:a1:e2:36:18:62:b6:7f:0a:75:
7f:33:ea:72:da:7e:fc:18:01:d0:ff:c5:0e:ee:f7:
29:0c:04:db:e2:7a:5b:6f:c8:29:86:c5:47:bd:ca:
4d:13:54:da:9a:65:e9:a5:2a:f8:10:22:8a:39:57:
9d:5c:98:c8:8b:c8:a9:bc:49:19:ec:07:fc:5b:98:
04:3a:06:b4:dc:29:0f:df:d4:34:61:7b:e5:b7:eb:
97:74:c1:19:fd:05:28:58:3b:76:60:17:56:5e:da:
7b:6e:bf:cf:1c:8e:8e:34:7e:35:85:50:4d:1f:fb:
77:f4:0d:12:cc:fb:42:f5:bc:d7:92:ae:06:63:12:
30:c6:db:da:aa:fa:eb:ec:8e:ef:8c:80:72:3c:ff:
e2:0b:d3:95:72:60:53:6e:bb:2d:73:8c:64:4b:d3:
37:63:c1:20:26:a0:85:23:a6:e5:71:4b:f1:fe:35:
64:a8:9d:db:90:21:b4:7b:73:7a:83:04:78:ac:b8:
6e:bf:c7:7b:93:54:d8:09:61:e6:8d:8b:84:8c:18:
3b:9f:2a:fc:65:fa:4d:f8:eb:3b:4c:a1:5c:63:3e:
f1:d7:85:11:7c:ed:dd:8c:8f:e7:08:9b:e7:37:3f:
dd:4b:76:6b:64:80:71:66:b7:8c:f3:f4:a3:2d:a3:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:EF:6E:41:FF:F0:80:B2:E4:8C:22:EF:01:9F:21:E7:6C:0D:28
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/E6zvbkH_8ICy5Iwi7wGfIedsDSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.0.0-193.232.6.255
193.232.8.0-193.232.19.255
193.232.22.0-193.232.31.255
193.232.192.0-193.232.197.255
193.232.207.0-193.232.209.255
193.232.212.0/24
193.232.218.0/23
194.85.208.0/23
194.85.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:9e:0d:af:c2:48:0a:c1:f0:3e:ed:8e:43:e1:92:df:8e:a8:
12:33:57:b5:0f:9a:f4:c2:2d:37:c9:42:e8:45:06:8d:12:99:
6e:12:4c:69:4b:e5:e1:ab:4a:b0:f7:d7:95:fd:a3:c4:a4:86:
9f:91:55:e4:8c:1d:2a:12:c6:4e:d5:49:4f:51:25:aa:fb:3d:
6a:16:fa:2e:52:10:4b:19:58:89:71:85:51:60:db:25:04:a2:
86:c8:41:21:53:59:c0:39:1b:39:c4:f6:0d:86:fe:b2:5f:68:
f6:98:9b:a1:0e:0a:b0:19:f0:76:03:3f:9f:66:6a:3f:a3:5f:
6c:9d:03:5d:ef:e3:7d:d1:ca:46:7f:13:2b:50:9d:49:ee:87:
d8:68:4a:b1:7a:b2:cf:56:60:e9:48:46:96:5c:eb:e3:1d:c6:
72:c8:23:16:d0:ac:91:06:8a:f2:73:ce:be:37:5d:5c:ac:0a:
9e:89:7f:90:10:d5:d2:fa:37:1e:c8:13:e4:27:fe:cc:89:b6:
bf:cc:ad:81:1c:7d:d9:1e:58:a7:52:da:7d:1a:04:c8:14:7e:
e4:7b:d4:12:19:1a:42:d8:23:08:44:a8:5c:02:ff:fc:5f:77:
f5:bf:ce:87:ae:62:c1:d0:27:1e:c5:56:9e:6b:48:e1:33:39:
e2:48:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:29 2025 by rpki-client