Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/LIJdhBw98UAfu409Zwh84mS4RZ4.roa
File: LIJdhBw98UAfu409Zwh84mS4RZ4.roa (raw, json)
Hash identifier: dOGbpcXHQisJAs++ycAYBST9gy9b4Y/FJtkS7534yjM=
Subject key identifier: 2C:82:5D:84:1C:3D:F1:40:1F:BB:8D:3D:67:08:7C:E2:64:B8:45:9E
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 018CC4936945785F8FAF4ABCCC0049F1E137
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/LIJdhBw98UAfu409Zwh84mS4RZ4.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50321
IP address blocks: 193.169.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 12 Jul 2024 09:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:69:45:78:5f:8f:af:4a:bc:cc:00:49:f1:e1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c825d841c3df1401fbb8d3d67087ce264b8459e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:24:bc:aa:47:92:c5:f3:b7:00:d3:1b:e6:
2a:ba:e1:f8:17:a7:c7:20:dd:93:fd:2e:2b:dc:f6:
30:1c:eb:b3:c9:1c:db:df:b6:5e:fb:61:d2:06:86:
0d:f2:55:07:bf:8e:0e:02:87:3f:62:19:ea:33:15:
09:07:fc:c8:52:0a:41:46:70:19:7e:7e:3a:cb:f3:
f1:12:48:66:8f:b9:85:fc:8a:2c:35:ae:58:9e:1e:
bf:33:48:1d:2a:21:82:59:b6:c8:cb:4c:a1:e5:36:
35:f7:60:eb:70:8b:b7:2b:85:79:82:8e:11:8f:b6:
32:c3:2c:c8:ac:bd:22:0a:cb:d7:83:f9:37:4b:26:
fc:97:49:3c:c2:db:3e:a8:5b:44:cf:38:f6:6f:4c:
aa:c6:e8:18:42:d7:ed:ae:4f:04:5a:28:21:e2:6d:
cd:2d:b6:5d:1a:0d:1e:d3:b6:7f:69:b3:db:a9:24:
0e:dc:7a:c7:4e:be:30:55:d9:55:91:4f:4c:5f:e2:
b0:94:76:66:5b:dd:4d:3e:97:fa:03:f0:aa:21:c4:
73:74:27:d9:0a:a6:20:a7:98:74:08:0e:91:f4:c0:
b4:22:70:8b:7b:5b:d7:bc:2d:a7:24:ed:49:43:ec:
5c:0e:a1:c7:c3:9e:b8:28:36:9c:77:ea:6c:29:06:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:82:5D:84:1C:3D:F1:40:1F:BB:8D:3D:67:08:7C:E2:64:B8:45:9E
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/LIJdhBw98UAfu409Zwh84mS4RZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.194.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:76:42:e4:87:7c:0a:aa:58:87:c5:1a:c2:c6:4c:0a:ec:30:
fa:b9:c7:20:3d:63:76:f3:fa:f2:3c:7d:61:1d:aa:db:07:85:
a5:a3:94:38:37:da:28:dd:69:0b:d4:72:63:ba:5d:10:66:48:
0f:c4:4a:66:9c:2b:7f:ca:66:4a:7e:fc:bf:7a:b5:be:b8:e5:
11:4f:60:64:c4:1f:13:5a:2e:65:ab:04:e5:ab:7b:5f:7b:4c:
16:40:1c:bf:38:fd:03:62:f1:c5:ff:94:f0:8f:b5:1b:f8:26:
5a:cb:90:e7:ae:a3:44:d1:6a:91:b8:2d:e0:c7:c4:49:77:cf:
54:b3:70:5e:c7:4f:df:d5:a3:dc:96:0f:33:66:82:79:c6:ee:
f7:c1:aa:e9:7e:48:8f:f1:6d:ff:6e:4f:6e:33:c6:03:d2:bc:
c1:31:a6:2e:f8:2b:c9:ec:0e:04:d7:2e:52:ba:b4:bc:a2:c8:
02:80:04:cb:f5:63:96:ce:ae:41:7e:df:f4:f6:de:5e:93:ad:
1a:53:2f:b7:c6:9f:3d:50:06:23:9f:30:f4:26:fc:a6:68:82:
ef:b7:b9:c2:fa:a4:84:66:67:26:a0:53:b8:2b:91:5b:c3:0d:
08:e9:0b:5d:86:67:42:56:1f:23:30:3c:6a:b3:7a:26:92:f4:
45:c8:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 08:35:28 2025 by rpki-client