Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/u6CBGgQTeEaLZx7DvRl3GKPDAs8.roa
File: u6CBGgQTeEaLZx7DvRl3GKPDAs8.roa (raw, json)
Hash identifier: mkoILTI3JpUX2ED9orIadz0I5uv6ujD7SyaHcQcZTzQ=
Subject key identifier: BB:A0:81:1A:04:13:78:46:8B:67:1E:C3:BD:19:77:18:A3:C3:02:CF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018EA8B3C4E5F32844CB141CCFE52DF54F15
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/u6CBGgQTeEaLZx7DvRl3GKPDAs8.roa
Signing time: Thu 04 Apr 2024 10:42:17 +0000
ROA not before: Thu 04 Apr 2024 10:42:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57013
IP address blocks: 193.42.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 10:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:b3:c4:e5:f3:28:44:cb:14:1c:cf:e5:2d:f5:4f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 4 10:42:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bba0811a041378468b671ec3bd197718a3c302cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:d2:36:8f:7e:31:ed:60:c2:a9:9c:bb:5a:
ac:be:a9:91:61:54:4d:9a:06:f7:6a:72:c3:4b:46:
10:c7:8e:bf:18:e4:70:4c:d1:ff:14:91:92:dd:26:
db:86:bb:ef:ce:ba:e9:10:09:78:13:6a:6e:e6:af:
04:67:92:3a:a9:28:78:ee:28:7c:3e:f2:ff:1f:b1:
22:8c:76:6f:7d:5b:3d:6e:94:e7:46:0b:19:7e:11:
b5:e8:b3:1b:ac:34:36:bf:1c:05:8d:28:fd:c6:4c:
d2:8b:99:65:97:f8:67:27:66:8f:64:ce:9d:25:c1:
3c:db:22:3f:d6:54:06:a7:f4:99:b9:f4:e4:0f:6e:
8e:dd:31:55:a6:a4:27:24:9f:6f:cf:3a:95:72:d7:
ba:85:60:61:da:77:2d:08:b9:cf:e2:62:1b:a0:c4:
ee:92:f6:4d:6a:2d:1f:5e:da:54:94:77:98:08:8a:
cf:16:a4:5f:74:9b:d3:68:6b:7b:58:f9:6f:b5:dd:
a7:a8:98:c6:c8:02:3f:06:e6:fd:9c:ac:eb:ee:fc:
1a:3e:02:8f:e5:ec:aa:1f:da:10:9a:5c:5d:49:6a:
ee:c4:96:4e:fa:67:63:d5:2e:f6:36:bf:d2:65:17:
b6:4b:fc:09:97:29:d6:0c:93:a2:51:a2:c7:c4:28:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:81:1A:04:13:78:46:8B:67:1E:C3:BD:19:77:18:A3:C3:02:CF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/u6CBGgQTeEaLZx7DvRl3GKPDAs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a6:60:73:be:2a:7e:b9:89:23:93:ae:61:33:28:96:36:61:
4e:47:45:28:e9:a6:cd:69:a4:33:c8:7c:16:91:9a:8c:75:49:
83:6b:4c:19:03:98:95:49:ba:5f:b6:23:26:3b:04:ab:c7:e7:
dd:ea:3e:62:37:80:ee:f8:b0:98:6e:84:29:10:0f:23:73:dc:
30:d7:53:5a:d3:21:46:c4:e0:01:94:20:ef:b4:8b:5c:98:89:
f5:e4:cf:05:10:ea:d1:d7:45:b3:8f:cf:61:5b:26:75:a4:82:
48:b1:66:07:26:be:39:7e:4e:e2:0a:8f:e9:97:cb:9a:9d:5e:
d8:e1:88:f2:dd:11:8f:a5:88:b5:62:a9:b1:86:17:8d:ae:e9:
c8:c6:d2:5a:7f:55:b0:8a:c7:bd:f8:01:b2:b5:36:29:14:ea:
74:25:54:7e:33:bf:19:a6:94:3f:17:08:75:cd:6b:1d:fc:d9:
69:87:09:ce:23:87:c1:d4:8e:7b:a8:02:fd:d8:02:2b:22:3d:
4c:e4:c5:d2:51:21:99:cf:31:38:bb:69:8b:ef:8b:f1:95:c2:
3f:ce:d4:f0:c3:cf:af:c9:5b:26:8f:48:0f:94:d4:bb:1f:84:
98:2d:8f:03:62:5c:ab:d3:6a:6a:43:82:d1:fe:27:08:52:16:
f9:25:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:37 2025 by rpki-client