Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/sCYg8O0UClus0lqA1gvb-CkewvY.roa
File: sCYg8O0UClus0lqA1gvb-CkewvY.roa (raw, json)
Hash identifier: hbdmz5w7KZYEp54CV4Zmxb9F3VuSCpDt91eFLJX5qqs=
Subject key identifier: B0:26:20:F0:ED:14:0A:5B:AC:D2:5A:80:D6:0B:DB:F8:29:1E:C2:F6
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01941FFA2719416D6EEA261274F168AFDE6C
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/sCYg8O0UClus0lqA1gvb-CkewvY.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273196
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 10:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:27:19:41:6d:6e:ea:26:12:74:f1:68:af:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b02620f0ed140a5bacd25a80d60bdbf8291ec2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:28:25:a0:e7:41:b0:79:57:5c:aa:29:f0:
9f:24:fe:9a:ec:51:19:fb:f3:0d:10:98:23:e7:f7:
9d:82:1a:46:34:f5:b4:bb:05:5e:85:63:0a:5a:0e:
f8:92:1d:9c:6f:cc:95:d4:0a:27:1e:b5:91:8c:7d:
8d:9d:73:d1:6b:60:54:3f:9f:8c:e1:45:31:42:b4:
b3:ff:32:59:20:25:08:51:3a:72:4c:87:88:ed:8b:
02:fa:59:94:b6:5c:82:6a:0c:f0:26:5d:6f:d5:d1:
66:75:c3:cb:ed:4c:2a:a3:17:0b:48:40:eb:2b:cf:
18:ad:0c:1d:91:85:1e:fc:88:b4:25:1b:6c:0a:74:
9a:36:a2:9c:53:d5:e4:0f:20:d4:b8:e4:19:0a:71:
f4:cf:b6:a6:40:fe:88:36:28:43:ea:f6:e4:1f:17:
1f:24:fe:4e:cf:3b:43:a9:3f:fb:f1:43:d0:3c:e0:
1d:bd:7c:25:0a:d2:23:6f:1e:0a:be:cf:aa:0b:39:
3a:83:7e:bc:a4:5b:bf:80:de:a2:10:89:ac:98:d3:
e0:e1:6a:ad:bc:d1:2c:12:0b:80:8a:dc:34:58:dd:
56:d3:a8:62:c9:a0:74:0f:23:80:f3:63:d2:85:65:
22:4a:57:11:78:ec:a2:48:9b:af:56:9f:4b:e9:97:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:20:F0:ED:14:0A:5B:AC:D2:5A:80:D6:0B:DB:F8:29:1E:C2:F6
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/sCYg8O0UClus0lqA1gvb-CkewvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
39:46:7a:ac:5e:e2:eb:df:4c:7c:d4:68:14:34:88:82:9d:b5:
47:04:48:ab:27:80:7c:03:ea:ee:ed:de:23:2c:bc:8f:95:99:
24:f6:cd:70:28:2d:10:e7:87:00:d2:35:0c:1f:8c:e6:eb:53:
9d:d3:f2:af:a5:35:99:db:9f:c3:ca:d4:b6:30:7f:7f:38:e6:
a3:26:50:83:c0:b2:5d:ca:eb:dc:1c:c2:d9:bf:1d:97:a5:09:
c7:48:ff:48:36:6b:dd:aa:e7:6a:ff:d8:83:7a:ca:d2:e8:93:
00:b5:a7:8f:cd:df:33:c2:84:f6:82:9f:57:dd:1f:13:90:67:
40:26:20:b9:a8:be:15:55:43:f4:6e:7d:aa:a3:00:74:13:7c:
84:53:a9:2e:b5:56:d8:fe:23:98:e9:e0:bd:ce:4b:7a:30:50:
f3:7f:61:8e:0d:d7:11:84:48:eb:19:f8:69:04:a3:bb:83:ba:
27:f3:8d:26:d2:8e:b8:80:30:39:d2:50:38:fe:86:94:42:3d:
e7:dc:bf:a3:29:15:6d:2b:59:55:2f:5f:c8:5b:91:82:de:a1:
35:e3:06:77:ce:c4:2c:76:b2:82:22:9c:7b:b1:ba:72:be:8f:
06:c0:d5:d7:4c:ba:81:07:7c:02:87:f7:64:01:eb:b2:df:f5:
dd:38:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:10 2025 by rpki-client