Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/p2mP_iQ8vqiDBycbJvsDFCJgN6M.roa
File: p2mP_iQ8vqiDBycbJvsDFCJgN6M.roa (raw, json)
Hash identifier: cVtiqnZap8f923qJEyJ4FNxLWUNazzDcwXcHwRcctIU=
Subject key identifier: A7:69:8F:FE:24:3C:BE:A8:83:07:27:1B:26:FB:03:14:22:60:37:A3
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 018CC4246E77F60B414DD0E7AEB91EACC774
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/p2mP_iQ8vqiDBycbJvsDFCJgN6M.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.103.0/24 maxlen: 24
193.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 06:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6e:77:f6:0b:41:4d:d0:e7:ae:b9:1e:ac:c7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7698ffe243cbea88307271b26fb0314226037a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5b:5e:58:7c:72:15:47:28:f4:6c:fa:05:cb:
a7:d0:90:46:48:8a:67:82:ba:ab:94:75:de:da:15:
c4:ca:66:83:1b:eb:56:ff:91:be:8c:8a:7d:d3:2c:
f3:dc:41:40:ab:91:b9:61:8d:5f:4e:dc:ba:24:f9:
51:7e:b3:f7:64:ab:a4:d1:0f:e0:8d:23:fa:bd:36:
a1:6c:e9:91:0a:34:b3:f8:36:cd:17:34:80:2e:e9:
ed:60:ec:08:d2:30:55:80:5d:2b:3b:9c:5e:2f:be:
f4:8d:17:1e:36:d8:1c:14:23:06:85:2d:19:4f:dd:
d3:51:15:96:f8:05:3f:de:75:44:1a:0b:6d:ba:0d:
f4:c8:c3:82:44:ba:5e:64:ce:62:13:bd:65:d5:d9:
ab:4d:0b:b5:0d:7d:2c:ef:22:16:55:9c:85:3c:72:
83:5e:17:ee:f8:e6:c1:da:86:1c:78:d9:ff:9b:2c:
b6:75:aa:2d:68:94:e9:53:82:33:ef:c2:d0:aa:55:
4e:8e:ef:b1:b7:5d:fe:c8:a0:27:35:e8:ee:b5:50:
af:b2:5e:42:ad:6b:bd:23:94:96:68:09:8b:ac:fd:
69:0d:a2:01:cf:e4:70:31:ed:bc:2a:26:71:0c:0d:
e4:17:95:e1:d9:f7:13:aa:35:64:74:38:7e:38:13:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:8F:FE:24:3C:BE:A8:83:07:27:1B:26:FB:03:14:22:60:37:A3
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/p2mP_iQ8vqiDBycbJvsDFCJgN6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0-193.42.103.255
Signature Algorithm: sha256WithRSAEncryption
9d:7b:c1:5b:4c:cf:ad:51:78:aa:95:e1:5f:48:7d:f9:e6:01:
12:65:e6:0f:9f:8b:d4:4e:09:fd:dd:fa:d2:94:c2:b3:4f:2c:
61:db:f6:2e:33:8d:2d:05:3d:9d:d6:88:5c:7e:38:20:d1:ba:
c5:be:5d:73:c2:83:aa:01:15:2d:38:8d:c7:e6:fd:79:34:94:
9b:1b:2b:e0:0f:11:11:e9:27:d0:db:24:ae:24:d9:ba:32:29:
bc:b8:72:7f:80:28:d3:9f:7b:34:52:64:a6:54:a6:21:fe:c3:
a2:f4:26:2e:d7:f0:04:55:f6:17:09:49:7a:35:6f:99:de:1c:
ce:bc:7a:70:0e:ef:d4:f8:76:26:8f:18:bb:c6:e1:4a:bb:22:
37:df:51:77:e7:18:71:f1:25:c7:97:84:1a:fc:bb:3c:51:57:
e5:7c:b1:78:4f:1a:3e:d3:af:89:3b:a8:95:07:b5:23:4b:3a:
c3:f0:c6:6c:ec:9e:da:38:33:a4:b4:57:f2:27:03:27:3b:0c:
42:34:ae:78:a7:e6:ec:ff:ea:58:e3:09:34:fb:e5:87:d2:7d:
9c:5b:f3:82:3e:ed:86:12:ca:18:51:86:e7:7b:46:90:35:99:
43:09:f1:29:82:54:ef:41:72:1f:8b:9b:b5:e3:e7:d9:99:d7:
aa:a2:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:36 2025 by rpki-client