Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/S6o5HJ7sp5Ji-CUt35urEvt3jm0.roa
File: S6o5HJ7sp5Ji-CUt35urEvt3jm0.roa (raw, json)
Hash identifier: LlQSSYz2TbKCNoBNhtIDYX5IAU5x8iPDYpnHVJohO2A=
Subject key identifier: 4B:AA:39:1C:9E:EC:A7:92:62:F8:25:2D:DF:9B:AB:12:FB:77:8E:6D
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BEA74FFFA14757BDD0A00CB59AB49
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/S6o5HJ7sp5Ji-CUt35urEvt3jm0.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2865
IP address blocks: 193.44.76.0/22 maxlen: 24
193.44.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 12:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ea:74:ff:fa:14:75:7b:dd:0a:00:cb:59:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4baa391c9eeca79262f8252ddf9bab12fb778e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ef:fe:01:00:a2:29:8e:bc:d9:9c:41:01:b8:
fb:b3:2a:2a:13:93:00:df:5c:3b:bf:55:ec:fa:35:
18:9c:64:39:71:c1:5e:03:ae:89:48:f6:26:ba:c8:
3d:c2:2f:f7:52:b6:ee:ee:90:d9:d8:4a:9d:5f:dd:
73:14:f2:ef:d0:2d:11:3f:f1:b7:18:d2:30:6f:62:
39:00:9a:d9:f2:4c:84:17:b5:88:de:78:5a:76:04:
da:90:ed:04:37:d9:f1:5a:58:19:c5:45:84:c5:48:
b8:de:f6:8e:7f:ec:e2:c6:09:75:b1:9f:96:89:28:
e5:70:b1:18:b0:8c:61:cc:29:b4:08:31:fd:81:49:
9e:c3:a4:48:9a:0f:76:56:01:cf:1b:11:49:ad:fd:
6e:e4:43:73:ed:29:9e:c2:22:42:d5:de:7c:28:d8:
75:44:9c:12:d7:cd:6e:e9:da:8f:a5:c0:01:21:32:
43:6b:3a:af:ae:6e:73:d2:bd:6a:2f:f4:5e:c3:d0:
a9:3f:f6:ec:30:4f:a8:1f:d8:3d:aa:d0:71:cb:57:
a0:f0:5e:4b:52:70:e8:f3:75:0e:88:80:34:b7:57:
36:ea:76:00:34:66:aa:91:c3:9a:4e:a9:55:2d:af:
08:af:1f:2d:9a:6d:3a:59:ce:f6:ca:f0:00:52:90:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AA:39:1C:9E:EC:A7:92:62:F8:25:2D:DF:9B:AB:12:FB:77:8E:6D
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/S6o5HJ7sp5Ji-CUt35urEvt3jm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:dd:db:d9:9e:e6:92:24:11:90:53:e6:3e:56:e9:1d:b7:f0:
59:1e:98:99:2a:c2:38:08:ae:62:48:f7:4c:ba:69:c9:e4:b2:
5d:ca:eb:f9:a3:60:56:a9:8d:b7:9d:99:d5:a2:97:7d:27:e6:
77:2f:dc:1f:5c:b5:fa:4d:0a:41:e9:3b:77:61:e1:27:06:28:
2b:b6:c9:b9:ea:b9:a6:66:48:25:82:09:a2:e7:72:e8:3f:5a:
f4:c2:90:8e:df:f7:14:8f:83:ec:6c:c9:1a:e4:34:18:a8:e2:
71:48:98:c8:72:81:35:9d:29:f1:07:0e:40:ed:6a:39:cc:80:
d9:42:e1:9d:a5:fb:0c:e5:fd:f8:0a:ab:10:8f:b6:f4:f2:da:
61:6a:50:9b:50:82:b3:52:df:0c:aa:3e:05:32:b7:70:e2:df:
bc:0e:3e:a1:f2:3e:a6:40:05:c6:fb:44:a2:74:19:85:aa:5a:
f2:f1:af:c7:eb:01:e0:ac:16:4e:af:34:f2:1f:66:bf:e4:66:
ac:91:1f:ee:e0:fe:0b:7d:57:7a:46:5e:17:0f:91:0a:69:22:
b4:08:f9:14:59:3f:f5:d7:ae:66:98:4d:6c:15:3f:c4:15:48:
c7:3b:e3:5a:10:e7:83:41:92:e0:4b:24:de:86:1c:0a:6f:02:
c1:7a:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:59 2025 by rpki-client