Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/k9CEwRzSpKZWYyr87L3iTxKBbAI.roa
File: k9CEwRzSpKZWYyr87L3iTxKBbAI.roa (raw, json)
Hash identifier: hCgpWMOm3YlTJFL5z+NPLEOEsTFJzeHmgmcGyADSm4w=
Subject key identifier: 93:D0:84:C1:1C:D2:A4:A6:56:63:2A:FC:EC:BD:E2:4F:12:81:6C:02
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 018CC3B71DE43F9C559517DBC84D19783309
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/k9CEwRzSpKZWYyr87L3iTxKBbAI.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24786
IP address blocks: 81.93.112.0/20 maxlen: 20
193.28.192.0/21 maxlen: 21
2a06:7500::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1d:e4:3f:9c:55:95:17:db:c8:4d:19:78:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93d084c11cd2a4a656632afcecbde24f12816c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:1b:b4:22:bf:eb:e1:06:3f:28:a4:dc:24:
ba:a9:dd:a7:0d:8c:71:b6:f3:ec:f0:63:42:bc:a7:
67:78:6b:1e:0a:4a:64:f1:e9:44:bb:64:c1:57:31:
d1:14:af:64:a3:35:8e:73:6c:f3:4e:7f:df:68:1a:
10:e0:69:91:0e:a2:2a:15:c2:0b:85:54:ec:f6:2f:
75:bb:ab:61:c2:d5:65:13:77:c4:d4:7b:2a:eb:61:
d3:59:ee:f5:99:69:08:7a:c4:4c:96:c2:74:d7:45:
f3:bd:4a:2e:24:00:98:fa:aa:45:9a:b5:ca:ce:10:
79:57:ad:79:a3:76:6b:e6:cf:86:2c:91:70:c8:a4:
e7:b1:d9:d0:bc:03:99:c2:0c:38:b8:41:9e:71:8e:
d2:dc:24:06:fa:30:ea:b0:ab:e1:a3:a5:5f:aa:cb:
6d:14:b2:65:50:0b:0b:66:cd:7c:65:8d:b3:6b:36:
10:69:01:7d:9a:6b:e2:61:5b:54:f8:cc:2f:26:ae:
31:5b:c9:cd:2d:a9:be:7f:2f:66:84:c3:41:d5:ab:
8b:cb:a2:9d:13:ed:13:37:0d:4b:51:f2:3c:7c:b8:
15:e0:82:af:72:7b:38:21:17:04:29:45:4c:66:5d:
5f:e8:6c:f3:cf:39:14:b3:44:34:5b:7e:3c:f3:92:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:84:C1:1C:D2:A4:A6:56:63:2A:FC:EC:BD:E2:4F:12:81:6C:02
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/k9CEwRzSpKZWYyr87L3iTxKBbAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.112.0/20
193.28.192.0/21
IPv6:
2a06:7500::/29
Signature Algorithm: sha256WithRSAEncryption
56:10:6e:3c:72:cc:49:72:71:c6:a6:a6:fb:37:82:06:da:76:
b8:1d:78:63:14:f5:ec:09:80:37:31:5b:3f:58:c3:bb:c5:fb:
bc:40:6a:1f:3c:17:ed:f4:7c:42:94:80:53:95:0f:9a:12:f0:
40:c8:94:bd:3c:99:07:6d:42:3b:36:b4:8b:df:b9:f7:d4:5a:
55:a2:8a:72:c8:2b:a0:81:db:83:f3:f1:53:b6:4a:87:f2:65:
55:c8:79:c1:ad:20:a9:a4:5f:b1:18:b7:41:18:5e:b8:f9:c4:
5a:1d:65:aa:4f:3a:bb:16:79:8b:f1:ca:23:a5:35:15:b2:2c:
46:0d:fb:e6:ab:db:a8:c8:2f:11:17:4a:bc:3a:c7:64:18:a2:
17:11:f2:50:d5:26:d6:c5:31:ff:b2:95:7d:cb:f4:af:f0:5b:
a0:72:b4:5b:2a:80:15:8b:b5:af:7f:23:08:2b:8d:80:84:4d:
3b:2a:2d:11:9e:13:4b:f0:75:cb:1c:2c:87:84:f1:ce:7f:2d:
54:ad:94:e9:a0:ed:e0:4d:cf:94:07:24:54:97:2f:58:6a:f0:
12:30:eb:42:ec:3e:98:17:b1:ec:79:6c:62:b2:10:83:60:77:
f9:f5:e4:52:1e:cc:0f:9a:83:55:b8:2b:54:0c:fd:d7:69:57:
62:37:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:36 2025 by rpki-client