Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/qoYDSVEUrxEWYK1zHM5WFJ42rfw.roa
File: qoYDSVEUrxEWYK1zHM5WFJ42rfw.roa (raw, json)
Hash identifier: 8FN6Yqv3G5w8QboZLvczzwqPF/P4MM1hNRogOKMrtdI=
Subject key identifier: AA:86:03:49:51:14:AF:11:16:60:AD:73:1C:CE:56:14:9E:36:AD:FC
Certificate issuer: /CN=07401351fc3cf73370a1e322e0527e569ef05797
Certificate serial: 0193AED51EA9B333F0EF61AC434A3C09770A
Authority key identifier: 07:40:13:51:FC:3C:F7:33:70:A1:E3:22:E0:52:7E:56:9E:F0:57:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/qoYDSVEUrxEWYK1zHM5WFJ42rfw.roa
Signing time: Tue 10 Dec 2024 04:30:22 +0000
ROA not before: Tue 10 Dec 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 193.239.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:d5:1e:a9:b3:33:f0:ef:61:ac:43:4a:3c:09:77:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07401351fc3cf73370a1e322e0527e569ef05797
Validity
Not Before: Dec 10 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa8603495114af111660ad731cce56149e36adfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:a4:9c:0f:ef:ef:91:38:14:60:43:04:55:
30:95:28:49:a7:00:a3:43:82:60:ae:ac:95:49:50:
7b:2e:47:7e:78:59:27:02:87:74:3a:1b:12:0b:2e:
a0:bf:3f:1a:be:c2:e8:97:53:54:c8:da:b5:3c:1d:
4c:82:46:d9:d2:d5:3e:63:8e:ae:25:f0:b4:24:08:
d3:24:8b:5b:7d:9b:7c:c3:5f:25:2e:cb:89:6e:6b:
a9:82:72:8a:6f:b7:db:81:85:7c:a7:87:29:1c:47:
e7:e0:6b:e0:6f:ca:f3:55:63:a4:70:2c:79:03:e3:
b8:2b:e3:ae:ea:97:c2:ad:87:32:2a:85:a4:5b:ec:
1a:70:03:35:11:d9:b4:38:63:9d:99:72:38:75:d4:
ac:de:30:0d:2a:a7:ef:39:cf:53:9c:4d:56:2c:cb:
06:29:e1:87:e8:7b:89:14:3b:1b:5a:a0:43:48:48:
75:e3:4a:a0:8c:52:bc:a9:30:23:9a:a0:06:f8:d3:
a0:94:ec:1c:f9:bf:84:80:a6:0c:d8:4e:d9:74:8b:
32:b8:90:90:98:f9:33:e9:be:8b:55:44:24:71:09:
fb:e4:72:5b:86:0f:a6:ab:11:60:bf:cc:1a:89:fe:
33:c0:9e:91:f5:c2:be:0d:fb:dc:31:1c:4e:6f:0d:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:03:49:51:14:AF:11:16:60:AD:73:1C:CE:56:14:9E:36:AD:FC
X509v3 Authority Key Identifier:
keyid:07:40:13:51:FC:3C:F7:33:70:A1:E3:22:E0:52:7E:56:9E:F0:57:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/qoYDSVEUrxEWYK1zHM5WFJ42rfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:cc:08:d6:e2:9a:e5:c4:fa:14:2b:41:7a:39:86:c2:6a:29:
88:bb:75:bb:3c:75:25:0e:34:cc:c9:dc:ae:61:8d:1d:82:90:
f5:e4:f8:40:87:a4:dd:11:b4:ea:9c:33:69:d3:ae:24:7b:3c:
59:22:cf:e7:16:70:af:b6:bc:2d:be:00:e4:a2:31:af:c9:09:
43:2d:a6:95:64:35:ef:d1:87:45:05:3d:2e:6d:84:32:da:be:
41:79:50:31:2f:6a:2b:51:ad:2e:5f:3d:28:14:c7:df:ab:d3:
08:52:ba:f2:2b:02:0b:cd:09:95:2c:e0:29:80:51:96:a8:b4:
ca:b6:06:34:1a:07:bf:4e:78:ff:d5:eb:a7:fc:b4:90:40:88:
4b:06:8a:3e:a7:5a:b1:dd:9e:92:3e:56:fe:75:ca:b5:dc:ce:
34:49:eb:e7:8c:c6:97:0b:c6:01:d6:87:ac:27:d2:e2:20:2b:
cd:c7:6d:67:04:64:96:d9:f7:d7:3a:d0:f9:78:ce:6d:ba:8a:
8c:b7:e9:7b:2c:05:07:45:bb:e5:da:d7:2f:f0:dc:fa:15:c9:
ac:a6:ce:c5:ef:60:35:24:5f:15:f2:7d:b1:79:a1:eb:13:fc:
51:a9:19:ad:09:f4:08:93:95:b6:f8:7b:7a:03:f0:97:d5:a2:
b2:cd:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:28 2025 by rpki-client