Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/EtdWghtyq0hx5w7rK9ZYHLo0FRg.roa
File: EtdWghtyq0hx5w7rK9ZYHLo0FRg.roa (raw, json)
Hash identifier: khQO5e+47Vj+ZIucz4KgReSW2xs1+QJAKYdU7mZJp68=
Subject key identifier: 12:D7:56:82:1B:72:AB:48:71:E7:0E:EB:2B:D6:58:1C:BA:34:15:18
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 01935F243BBD619E66B4C232169797DC0872
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/EtdWghtyq0hx5w7rK9ZYHLo0FRg.roa
Signing time: Sun 24 Nov 2024 17:07:10 +0000
ROA not before: Sun 24 Nov 2024 17:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:964::/48 maxlen: 48
2001:678:a00::/48 maxlen: 48
2a12:79c0:100::/48 maxlen: 48
2a12:79c0:200::/48 maxlen: 48
2a12:79c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Dec 2024 12:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:24:3b:bd:61:9e:66:b4:c2:32:16:97:97:dc:08:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Nov 24 17:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12d756821b72ab4871e70eeb2bd6581cba341518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:87:e9:c3:9e:97:3c:dc:c5:89:c9:40:89:
b7:28:b4:a0:1e:3b:4b:f2:07:dd:1d:68:7b:1e:10:
be:a7:5e:a6:25:94:3f:56:ee:cd:b0:63:68:99:4e:
f5:56:8a:39:50:f5:b3:ff:1d:30:bb:eb:04:ab:ee:
d3:ac:b2:c9:77:3c:1d:dc:70:b4:a7:bd:41:ae:90:
c0:2e:4b:a1:53:a4:c6:94:08:d7:b7:b4:bd:f6:40:
29:21:9f:a9:d1:1c:1c:b3:58:93:34:cf:6c:70:33:
2f:9c:7b:3f:ea:aa:ce:86:22:24:c8:39:0a:9c:18:
e8:c7:c9:c7:a5:a7:24:26:95:81:d2:c9:7f:db:52:
93:72:f2:29:85:ec:cf:c9:f7:52:a8:ec:e0:fa:49:
8a:82:e7:c8:f0:d7:0e:f4:88:f4:99:28:93:2f:0f:
b8:13:bb:02:23:a1:9e:55:f8:80:88:de:69:62:5b:
39:97:dc:3b:52:ea:3f:69:dc:0c:75:ff:5c:10:f2:
f3:81:17:eb:59:ae:33:23:45:cf:7c:fa:ba:f8:da:
14:e6:35:24:ca:ed:73:b4:57:87:d9:6a:a8:06:dd:
bb:51:00:5d:22:eb:21:76:f9:5a:32:db:5f:ef:ff:
e3:5d:5a:23:86:a6:4a:26:af:f6:ec:bd:e3:3e:7e:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:56:82:1B:72:AB:48:71:E7:0E:EB:2B:D6:58:1C:BA:34:15:18
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/EtdWghtyq0hx5w7rK9ZYHLo0FRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:964::/48
2001:678:a00::/48
2a12:79c0:100::/48
2a12:79c0:200::/48
2a12:79c2::/32
Signature Algorithm: sha256WithRSAEncryption
6a:5d:4f:66:e5:76:41:6e:ac:f0:78:f1:3c:70:5b:02:03:84:
94:f2:b5:59:a9:ac:ab:f0:c4:55:7f:60:18:d9:d7:6f:f4:d7:
93:82:e5:6e:30:1a:7c:79:11:90:a8:b1:1a:fe:fe:60:c8:1c:
12:29:98:9b:de:2f:c1:df:5a:9a:e5:2e:e2:2c:54:10:79:e9:
55:f1:b0:58:82:01:09:22:01:43:17:f1:2d:0d:b4:91:bb:d2:
ab:cb:c2:88:8d:e4:6d:35:73:35:80:69:d7:d2:28:22:7c:b5:
b9:8b:13:94:27:72:36:5f:ec:99:d2:25:00:a3:71:f6:ce:57:
8d:ec:c8:20:ae:b1:7c:50:10:ab:54:9a:c1:e2:39:c8:3d:c0:
3a:ca:9f:96:d1:15:79:38:4d:aa:ba:2c:6f:20:49:aa:5d:84:
01:3b:a5:32:dc:c5:45:22:98:2c:5e:e5:a6:62:a2:80:68:0c:
cf:1a:e9:5b:fe:f9:0d:ff:b7:d1:0e:61:bf:5a:ba:e8:6b:9b:
d9:50:b5:a2:32:e7:8d:0e:09:15:fa:09:c3:4c:07:e2:c7:e0:
0b:86:67:c3:d2:20:fa:d0:13:69:0c:e4:21:1f:a6:59:fa:97:
1d:1f:04:4c:53:7a:6c:16:7b:df:56:d3:10:33:d0:4c:26:ec:
b4:12:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:20 2025 by rpki-client