Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/ZrbKrq5sNbIaU-xjJm0mnBSyBSQ.roa
File: ZrbKrq5sNbIaU-xjJm0mnBSyBSQ.roa (raw, json)
Hash identifier: Ek9xiA0R0wzkFeb8OZMryXvIVe9iUaYBzSBxF6VGD8U=
Subject key identifier: 66:B6:CA:AE:AE:6C:35:B2:1A:53:EC:63:26:6D:26:9C:14:B2:05:24
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019424B2846271FE14B0FB1FB96ECC28A6F1
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/ZrbKrq5sNbIaU-xjJm0mnBSyBSQ.roa
Signing time: Thu 02 Jan 2025 01:47:46 +0000
ROA not before: Thu 02 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 193.176.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 05:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:84:62:71:fe:14:b0:fb:1f:b9:6e:cc:28:a6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b6caaeae6c35b21a53ec63266d269c14b20524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:ac:1e:5f:4e:29:2b:15:bd:5c:70:d4:91:
86:6e:c1:b4:c3:67:9b:27:7e:5b:de:fc:3b:d1:22:
41:0f:af:14:ec:a6:7a:2c:88:8f:65:4a:61:b9:20:
a6:e2:5b:d2:2d:fd:e3:35:dc:1b:ae:c3:5c:94:fb:
09:c8:26:ef:fb:56:c6:74:67:51:7a:21:a2:26:15:
be:06:5d:23:e4:3a:15:42:b9:23:7c:5e:a7:f8:02:
83:23:0f:f1:90:db:5c:9d:b8:e9:38:53:87:8c:45:
9e:c9:40:1d:7b:67:3d:d2:00:bd:4d:5e:e7:7d:6c:
aa:02:39:80:21:e6:7f:54:01:04:4a:4e:50:39:5a:
72:db:7e:e9:5b:74:37:f0:51:18:6f:c0:40:0b:66:
ff:b3:84:7d:77:d6:51:b3:b7:4c:03:c8:03:6d:ab:
a9:2c:7f:4d:49:94:83:38:85:2e:51:1e:97:2c:5d:
18:32:d9:f3:ca:b9:88:2c:ab:4a:a8:ff:39:46:a2:
0c:b7:4b:fc:6c:85:68:1d:86:66:1c:63:e6:15:2e:
27:03:1b:6b:42:e5:19:3d:e5:6a:5e:0d:4b:6c:40:
43:8c:14:23:03:77:71:5e:4d:a0:19:20:59:cd:10:
56:f2:e9:2a:61:b9:69:8a:c6:95:93:70:2d:80:22:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:CA:AE:AE:6C:35:B2:1A:53:EC:63:26:6D:26:9C:14:B2:05:24
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/ZrbKrq5sNbIaU-xjJm0mnBSyBSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:80:f2:ba:6d:0b:18:34:79:9d:e7:f1:80:db:30:7c:ce:ae:
27:78:92:38:37:d8:2b:b4:8a:ec:96:d5:9d:b8:f0:4b:57:bf:
fe:31:3c:70:3e:3a:13:d3:e0:b9:a0:e2:a2:ef:87:f3:6e:3a:
6e:f8:a7:42:62:f9:f1:ef:96:65:4e:df:79:b0:37:e8:db:75:
54:1c:bf:ce:f6:79:3f:7c:f5:f1:80:6c:b4:5e:d6:63:64:f2:
68:ff:6a:de:54:38:c2:ec:10:d9:b8:d0:b5:19:10:ba:d2:0c:
32:4f:69:54:42:d1:00:98:3d:80:32:b3:18:03:f1:22:b5:aa:
45:81:26:a3:f7:15:16:79:81:b0:d3:59:46:f3:8b:11:e5:26:
7e:14:8f:a9:1c:b1:d1:eb:d0:a2:7b:e5:a6:e5:8b:06:09:c6:
71:1c:8e:88:43:2a:18:c8:a5:67:72:71:b3:98:7f:90:aa:3c:
80:4b:14:a4:27:ac:a9:cc:c0:87:e2:4c:d8:b5:56:ee:3b:92:
07:96:1a:16:b1:cf:d8:26:ed:03:d7:b1:7f:9e:1f:02:c1:a1:
a8:12:95:44:60:2a:39:93:3d:45:f7:60:a6:d4:59:89:1f:25:
ab:0b:8e:1f:f7:80:74:9f:8f:1b:16:9b:79:6e:2a:f0:43:35:
a8:a4:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:21:17 2025 by rpki-client