Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/v30Ny4pKBxo8PyWv7j1P2Qlfa58.roa
File: v30Ny4pKBxo8PyWv7j1P2Qlfa58.roa (raw, json)
Hash identifier: JIDaQXTwW4zMsnhs2T9nnAhR0ZrTTpjm58LdfqQsQro=
Subject key identifier: BF:7D:0D:CB:8A:4A:07:1A:3C:3F:25:AF:EE:3D:4F:D9:09:5F:6B:9F
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0193E01F8C40644E6E1A38276BDDE2F4B7B6
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/v30Ny4pKBxo8PyWv7j1P2Qlfa58.roa
Signing time: Thu 19 Dec 2024 18:13:04 +0000
ROA not before: Thu 19 Dec 2024 18:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:1f:8c:40:64:4e:6e:1a:38:27:6b:dd:e2:f4:b7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Dec 19 18:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf7d0dcb8a4a071a3c3f25afee3d4fd9095f6b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:da:17:5a:03:f5:23:21:9c:00:56:2e:68:
f9:c7:6b:ad:1b:30:ed:2c:6f:25:e3:e4:43:4b:16:
9f:0f:08:41:b9:d5:a7:bd:c5:8b:74:34:ef:ed:6b:
40:57:96:52:0a:9c:bd:52:39:ee:7d:f7:67:f5:fe:
d5:5f:f1:37:c7:af:d2:d1:65:88:a9:50:38:3f:0d:
92:04:c6:93:46:e4:9f:a4:f1:02:4b:4b:0a:df:18:
8c:df:60:a3:47:d5:66:4e:59:21:c0:58:d4:97:94:
6d:79:a4:b8:17:7d:14:71:d7:20:4c:82:8e:63:b0:
b6:88:03:e4:91:33:ff:d6:ed:92:c9:e1:d5:4c:79:
e3:d1:d0:6f:ef:28:01:d4:36:20:7a:75:7a:5d:73:
35:d2:6c:6c:fa:2a:da:3f:c9:df:91:06:8c:67:81:
01:d7:75:24:65:2d:c5:b3:9b:a5:e6:f4:9f:99:6c:
c1:b5:b1:f7:ac:7e:05:2a:fb:1b:f0:a2:87:4d:d0:
ca:c3:8c:81:f5:76:b7:48:6f:7b:f8:e0:72:c3:c6:
71:69:25:2d:97:53:e8:9a:63:06:7f:f2:8f:a2:94:
1e:94:27:29:ca:ac:ac:d8:ca:8b:a3:3a:ac:be:87:
4b:2f:e0:21:a8:16:97:07:c6:73:ce:c0:b0:02:40:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:0D:CB:8A:4A:07:1A:3C:3F:25:AF:EE:3D:4F:D9:09:5F:6B:9F
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/v30Ny4pKBxo8PyWv7j1P2Qlfa58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.8.0/21
94.247.48.0/21
Signature Algorithm: sha256WithRSAEncryption
72:87:f7:88:d8:1f:2b:a9:48:16:0c:19:5e:26:7e:52:e0:4d:
16:c8:87:b0:e6:a6:2c:30:1a:ab:f2:05:27:92:d4:ff:bc:d5:
bf:f0:00:2f:3c:9d:ca:62:d0:e6:49:02:50:65:69:c7:87:bf:
6e:54:70:6b:4d:e6:fd:e7:36:58:d6:5b:a0:c8:36:db:0f:f9:
45:91:b0:87:96:93:52:bd:a6:9e:80:d7:03:5e:33:72:c8:6d:
a5:02:8b:9e:14:ef:a7:ee:1d:17:9a:16:0c:34:a8:91:94:af:
f1:a1:ad:d2:01:a1:9d:0c:fe:2c:28:d1:b0:0c:f3:e9:9b:18:
fc:88:28:dd:ec:b6:cc:94:f3:51:f3:65:1f:c8:c2:ae:5f:3e:
52:7a:55:f2:2b:64:82:84:69:b3:de:18:30:e7:94:3f:ee:8f:
6e:a8:43:ec:6b:31:72:2b:79:75:b5:e1:6a:e2:e7:c2:b8:4a:
ee:d4:9d:50:1d:dc:01:ec:82:12:56:af:d1:75:26:ce:43:8e:
d4:78:b1:8c:bf:2b:7f:3c:74:67:1b:fa:e5:5d:da:67:7d:9a:
a0:23:1e:0f:2e:f6:10:44:33:26:4f:21:e0:d0:70:ce:17:13:
56:0e:36:f6:c7:90:d9:df:7d:98:8f:7f:89:4f:56:07:ec:5a:
7f:ff:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:14 2025 by rpki-client