Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/iN0VLpjhTjq47oC84qN8sSNdW7o.roa
File: iN0VLpjhTjq47oC84qN8sSNdW7o.roa (raw, json)
Hash identifier: 5GD+6cIAxCd4fo81vlzP8/XvkGBJ7V080rg7WfALJX4=
Subject key identifier: 88:DD:15:2E:98:E1:4E:3A:B8:EE:80:BC:E2:A3:7C:B1:23:5D:5B:BA
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 018CC493901E6BA493CBCFFD761E0E5AC5F2
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/iN0VLpjhTjq47oC84qN8sSNdW7o.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57707
IP address blocks: 193.34.80.0/24 maxlen: 24
2a10:d840::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Mar 2024 09:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:90:1e:6b:a4:93:cb:cf:fd:76:1e:0e:5a:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88dd152e98e14e3ab8ee80bce2a37cb1235d5bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:d9:c2:e1:90:9e:09:f4:18:7f:d1:d1:37:
8d:76:1f:46:80:0e:10:48:ff:71:8a:d6:aa:9c:f8:
f0:77:ab:7b:9d:dd:a8:19:3c:1c:e6:00:a5:fd:fa:
01:6d:f5:0b:93:d2:cb:db:73:dd:a4:a6:e9:d6:fd:
40:d4:42:7e:ef:9c:7b:e2:67:9f:d4:5a:56:e4:53:
0f:c9:0b:87:de:2b:c8:ea:3d:c7:c0:44:65:b6:1e:
ff:5d:eb:70:33:ca:dd:a0:72:20:d9:67:6d:7f:8f:
85:88:99:9e:08:c6:67:6b:00:6d:b5:9c:f3:08:5a:
01:9e:32:ff:90:d9:5c:81:18:59:b1:c1:9d:04:d2:
3f:14:65:99:81:1e:e6:fc:0b:3d:ab:89:a6:e8:63:
90:b6:4a:a9:63:0c:e8:c5:29:73:8e:fb:56:d5:c9:
ab:91:4a:4b:55:01:86:f1:38:70:ed:a1:2c:6e:12:
be:1d:51:e5:0b:84:44:f7:34:1b:20:7b:fe:56:f2:
1a:a2:8d:c1:cc:de:14:49:69:f8:f6:44:79:0f:20:
06:f8:eb:25:59:4a:e4:6b:4d:ed:65:51:a7:98:1e:
5b:38:54:55:ae:9e:3b:78:8f:fc:a3:18:3b:d6:98:
f9:ad:52:ec:5d:a1:98:ce:af:d6:64:83:6c:97:72:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:15:2E:98:E1:4E:3A:B8:EE:80:BC:E2:A3:7C:B1:23:5D:5B:BA
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/iN0VLpjhTjq47oC84qN8sSNdW7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.80.0/24
IPv6:
2a10:d840::/29
Signature Algorithm: sha256WithRSAEncryption
1c:4a:9f:6a:f4:00:a7:3e:a7:c5:86:0d:d4:80:ba:ff:9c:23:
2f:4f:58:a7:bb:99:7e:50:b1:d8:30:1c:09:5e:f0:6f:51:35:
05:82:7a:43:3a:46:d9:35:a3:8f:0b:93:50:91:69:71:3e:9d:
1f:e2:65:81:e2:80:4a:a0:d5:25:34:a0:84:48:c6:e6:90:06:
63:7b:82:7c:1a:60:24:68:06:32:7a:68:46:aa:2b:74:c7:c9:
0d:30:1f:37:2d:7e:52:5c:e1:36:e8:af:b9:2b:e3:6e:c7:39:
f2:12:d4:1b:84:9e:44:69:88:29:e7:18:52:1e:a3:cb:fe:bc:
ff:b3:86:5e:c3:00:d9:e2:c7:11:17:b2:f7:cd:2e:ad:67:0c:
69:fb:30:00:44:11:1b:c5:bd:e7:d7:d7:52:c7:5d:2f:d3:34:
f3:ba:64:60:b5:c5:2f:52:cd:7b:fa:69:0c:45:2d:6f:20:86:
32:a3:57:c8:c9:d8:06:e6:cc:b0:70:54:f7:21:ed:51:a1:8f:
e3:47:52:f9:75:49:49:28:55:74:24:63:ac:fb:60:17:95:85:
1d:ff:d5:8d:76:8a:54:91:da:b2:4a:b7:58:58:17:4e:c8:51:
b4:48:c8:27:13:58:de:67:a5:21:f4:b0:a6:e3:28:70:66:a0:
58:1a:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:06 2025 by rpki-client