Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/P6t3Ek1tFUryPNaoW-Ygc_wIGZs.roa
File: P6t3Ek1tFUryPNaoW-Ygc_wIGZs.roa (raw, json)
Hash identifier: B6pHJ1dkapebeGgq7Vp4IUpJY+p1v6dDWChQb7P9lNQ=
Subject key identifier: 3F:AB:77:12:4D:6D:15:4A:F2:3C:D6:A8:5B:E6:20:73:FC:08:19:9B
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018CC9BC6B57BBA3116A0610696A076B994D
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/P6t3Ek1tFUryPNaoW-Ygc_wIGZs.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 193.41.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6b:57:bb:a3:11:6a:06:10:69:6a:07:6b:99:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fab77124d6d154af23cd6a85be62073fc08199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:a3:47:ab:c0:2b:e5:95:74:36:22:b0:bf:
62:9d:51:4d:04:b5:56:dd:20:e8:d0:7d:ca:9c:7d:
da:24:d6:4b:bd:5f:d8:23:90:90:d0:00:16:12:db:
a3:85:3b:95:7b:61:f0:7a:35:b8:6b:84:d0:0d:70:
d3:14:23:92:54:22:55:95:3f:9a:6e:93:28:14:13:
21:cd:2e:ff:6c:b0:2d:1a:04:2a:ac:c4:0c:81:a3:
38:f0:89:ea:4c:e1:44:e3:f3:16:fe:17:51:c3:f7:
a5:e2:94:5d:ea:44:94:ce:aa:e8:1e:ac:0e:f9:e8:
95:16:d5:b9:14:10:b5:fd:83:31:ac:4e:b0:bd:6c:
78:32:05:53:f9:d0:a0:be:b6:78:eb:89:0d:9c:df:
49:c8:88:cd:d6:47:5b:22:66:02:b3:f6:49:21:89:
b1:1e:4f:2c:60:44:2c:d4:21:c5:44:10:bd:c1:ef:
da:67:15:e2:cc:7e:7a:66:c9:cd:26:d3:93:b7:1c:
b9:06:6a:89:5b:40:44:2e:3f:5c:ea:00:d3:f2:25:
6c:cf:51:bd:49:dc:30:f8:49:a5:04:14:20:eb:8a:
6e:e8:9a:de:c6:7b:46:95:8a:ce:21:aa:fc:a9:64:
0c:12:a8:32:cf:09:5f:00:01:59:99:91:eb:2e:09:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:77:12:4D:6D:15:4A:F2:3C:D6:A8:5B:E6:20:73:FC:08:19:9B
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/P6t3Ek1tFUryPNaoW-Ygc_wIGZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ab:57:ad:b4:c0:ae:8b:62:59:59:34:94:39:2a:4a:a4:8e:
04:5e:cb:b4:d4:33:0b:80:78:3e:9e:2d:d6:3f:45:94:81:d3:
9b:4e:19:07:0f:c9:c0:c5:4b:97:54:10:08:ef:e4:52:70:00:
fe:e5:63:62:92:71:90:95:fc:06:77:25:26:ef:77:75:87:85:
e2:ef:c9:c8:2b:eb:31:1c:cb:b9:48:6a:7f:84:93:8f:ce:3c:
b7:68:fa:cf:7b:52:ab:0f:7d:af:13:df:f3:3b:54:10:51:f0:
47:97:9a:59:0d:3b:fd:3e:70:b9:bb:6a:1a:ae:16:b8:49:47:
d4:96:fc:88:18:7b:59:64:93:4a:9f:e6:70:35:ac:f1:29:d1:
06:1b:60:bf:24:c7:e2:d9:14:79:c1:92:97:b3:5a:ad:43:50:
c6:47:65:e7:7f:2d:cf:77:7a:b1:d3:8c:7e:b5:e9:b5:8d:78:
8d:c8:f4:fe:32:94:46:33:79:c1:4d:10:4f:98:dd:f2:f0:56:
7a:75:f5:93:bc:57:91:8b:f8:4a:18:f5:55:4e:c5:1a:bf:2d:
b3:07:11:53:53:d1:46:8f:d2:e8:66:f7:cb:15:e6:61:a3:af:
10:3b:db:b5:2c:4f:a4:ca:0b:ae:60:f3:18:05:31:e1:bc:b1:
ea:a5:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:17 2025 by rpki-client