Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8QMjBxcQF6EKESR4HIOeYCaAPJA.roa
File: 8QMjBxcQF6EKESR4HIOeYCaAPJA.roa (raw, json)
Hash identifier: tgn6+mfR/L8ztAREVeyfmRKoO5TCIyYKRAmue4IwMG8=
Subject key identifier: F1:03:23:07:17:10:17:A1:0A:11:24:78:1C:83:9E:60:26:80:3C:90
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193B003D21241374AA8B426BD5B31F104B9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8QMjBxcQF6EKESR4HIOeYCaAPJA.roa
Signing time: Tue 10 Dec 2024 10:01:00 +0000
ROA not before: Tue 10 Dec 2024 10:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.58.108.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
2a0f:1586::/32 maxlen: 32
2a0f:3d80:123::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:03:d2:12:41:37:4a:a8:b4:26:bd:5b:31:f1:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 10 10:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1032307171017a10a1124781c839e6026803c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:dd:d2:40:54:01:3d:30:84:fb:c8:97:57:
ad:fb:54:e5:f7:7d:fc:0b:47:18:6c:6d:c5:b3:9a:
0c:ea:96:4b:03:a3:6e:bc:16:65:a9:02:17:cf:55:
ee:14:21:3a:5d:ef:4b:4b:45:64:a2:dc:60:95:8b:
70:f1:05:78:31:1d:f6:77:24:51:e3:6c:8e:72:ad:
67:8c:18:d8:bf:b4:de:13:d7:c7:07:d6:12:ce:86:
5c:ab:4c:3a:b4:08:85:7b:95:20:9e:7f:77:81:f2:
88:ae:22:01:80:e0:c2:3f:a1:35:9d:fc:fb:63:a9:
e1:8f:1b:c4:43:bf:ef:cf:76:8e:53:36:a6:7b:c4:
90:8d:99:e1:29:1a:69:61:34:ce:64:e3:e0:4a:25:
70:0f:43:be:3f:b3:83:ce:36:32:c9:fd:a1:d2:66:
ad:c6:e8:88:fc:73:39:64:dd:4c:8e:c7:18:c2:0b:
f4:8a:ed:3b:84:df:dd:9f:40:a1:e0:5b:e4:ed:93:
2f:f9:89:c8:6d:ce:60:14:e6:c1:af:61:4e:c3:46:
0b:9e:ce:ac:19:05:3b:60:3b:26:c2:06:10:dd:6e:
2d:61:a8:31:c9:dc:a7:05:aa:c0:22:64:1a:df:17:
97:0f:db:25:5f:77:00:8a:d5:6f:f7:09:a9:2d:85:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:23:07:17:10:17:A1:0A:11:24:78:1C:83:9E:60:26:80:3C:90
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8QMjBxcQF6EKESR4HIOeYCaAPJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.108.0/24
195.66.24.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
2a0f:1586::/32
2a0f:3d80:123::/48
Signature Algorithm: sha256WithRSAEncryption
0f:c6:2e:9a:1d:c5:84:44:ca:78:7d:93:68:45:05:91:30:fb:
dd:66:ea:b5:a8:92:8f:78:b3:94:44:c2:4a:4a:e7:4f:89:be:
75:08:6c:52:b5:e6:74:11:c6:8e:00:bf:09:a7:56:80:36:78:
5e:fa:06:1c:4b:22:f5:45:4b:61:53:0d:8e:c3:46:35:d6:28:
27:c3:2a:e6:ef:7a:a7:21:eb:0f:8a:2f:56:27:3f:92:3d:a3:
44:76:9a:dd:31:1d:9f:42:4b:a3:49:4c:d2:01:46:fb:15:b1:
05:e9:f0:a7:71:19:40:18:08:cf:12:85:ab:17:37:0f:9f:dc:
ba:1a:3e:0a:9f:a8:fb:27:17:bf:22:64:9c:61:cc:e8:db:4c:
08:b3:fb:d6:5f:3a:8e:69:42:cb:c2:2b:36:44:69:48:06:82:
a6:51:56:f1:a3:77:c6:23:90:77:18:10:3b:f6:8f:b9:67:e9:
12:71:eb:00:6f:20:42:33:32:f5:e8:9d:8d:8a:11:da:9c:c6:
9f:84:11:08:a5:4a:1b:a3:1c:9f:51:86:eb:be:c8:cb:27:e0:
5b:05:b7:b2:fa:7d:7e:51:4c:2a:53:df:5a:54:ef:4a:64:03:
8c:e6:33:77:63:d9:ec:77:1b:d8:f0:5c:33:9c:bb:1d:5a:83:
71:16:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:52 2025 by rpki-client