Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/dynDLwGtE39SorLzvXCj-EhHn8E.roa
File: dynDLwGtE39SorLzvXCj-EhHn8E.roa (raw, json)
Hash identifier: qAfzS/jiTA+32MeNiMoqn/yrCjO0/LBUERn4F7PbFJg=
Subject key identifier: 77:29:C3:2F:01:AD:13:7F:52:A2:B2:F3:BD:70:A3:F8:48:47:9F:C1
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 0194266BBADA6B731F53A9DD69F0E040D082
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/dynDLwGtE39SorLzvXCj-EhHn8E.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59460
IP address blocks: 193.91.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 10:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ba:da:6b:73:1f:53:a9:dd:69:f0:e0:40:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7729c32f01ad137f52a2b2f3bd70a3f848479fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:42:51:c3:55:9f:fb:07:e5:0f:0a:85:c6:
5c:22:f8:f6:2b:60:9b:ed:77:a3:9e:ea:66:df:8b:
33:93:a6:b9:21:d2:d0:fb:4b:51:33:ba:34:b4:3f:
88:9c:09:86:fe:62:c4:60:40:74:e8:cb:a2:de:17:
5d:41:64:15:c2:43:ed:72:e4:d7:24:ca:87:57:5b:
e5:3c:5f:66:47:26:18:d9:d7:eb:0d:ee:c7:6b:f6:
60:24:33:62:bc:e9:32:1d:ec:2e:e9:87:29:7b:d5:
28:e9:e6:55:be:c7:35:86:d1:b3:3f:0f:24:1e:96:
06:62:2c:ef:30:13:af:37:73:c0:1d:c4:57:0c:37:
7e:5d:21:25:ca:ee:a1:45:95:66:61:a6:ef:25:10:
8d:47:3f:e9:b3:91:7f:40:6e:40:b3:93:ea:dc:5f:
3e:93:da:8f:d1:97:d6:68:a0:83:0a:48:a3:10:63:
ca:9a:5c:30:49:c8:8a:6f:42:92:d6:fe:84:b7:85:
25:9d:03:27:5e:39:11:b1:b8:24:ab:5c:cc:54:e4:
66:47:8d:67:1a:a5:0e:8e:70:4b:0c:c6:40:88:85:
5f:81:7d:67:34:3e:0d:bc:89:e1:f1:37:27:11:9c:
f0:6b:ac:35:c9:d7:8e:99:ce:46:64:e3:60:08:7c:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:C3:2F:01:AD:13:7F:52:A2:B2:F3:BD:70:A3:F8:48:47:9F:C1
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/dynDLwGtE39SorLzvXCj-EhHn8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:d7:da:f4:be:6a:ff:45:ae:38:32:2f:c5:9e:b2:53:25:0d:
2a:72:52:ee:51:02:7f:2f:4e:67:47:5f:a3:39:06:18:9b:61:
5f:50:5a:9e:2a:71:36:80:d5:3d:4c:ec:5d:a6:fa:4a:40:a8:
8b:41:f7:8b:7e:34:50:f2:40:99:51:71:2f:25:36:5d:cb:2d:
6e:03:05:c8:f5:b5:0d:e6:57:b0:ac:f6:fb:0b:45:07:d5:bf:
ed:60:ef:0f:55:b5:7d:6f:fa:d6:c3:0d:6f:5c:33:7f:1a:18:
72:eb:fa:88:c0:4b:19:a5:61:03:f3:af:82:3e:a6:3d:05:6f:
52:fc:06:ba:57:31:f2:4c:38:15:c4:2a:3d:01:ec:65:fe:39:
43:61:65:18:7f:fb:18:90:af:08:bf:e9:fc:98:df:2b:51:75:
14:c8:bd:5b:30:0c:6b:60:32:34:ef:34:75:6b:66:30:d5:03:
56:0a:d0:d5:fe:58:b5:6e:1b:b8:b4:03:c3:ce:2c:c3:9d:f9:
bc:09:6b:06:00:28:21:76:90:b9:b1:c6:51:35:27:14:f9:6c:
7d:d3:ca:db:24:47:4f:1f:cd:c9:a8:f0:ed:b1:90:81:ee:64:
1f:74:8e:bd:65:4a:2e:9a:01:0d:84:f1:77:14:7c:c7:a3:14:
c8:b0:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:38 2025 by rpki-client