Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/A4CmN2NMvOLSOJ2ov0p-9fK9cWY.roa
File: A4CmN2NMvOLSOJ2ov0p-9fK9cWY.roa (raw, json)
Hash identifier: UitrGWnbz1MdM69dIx73jTmEE7KaaoYNxKper5J0n6Q=
Subject key identifier: 03:80:A6:37:63:4C:BC:E2:D2:38:9D:A8:BF:4A:7E:F5:F2:BD:71:66
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019295A2901E138DD8C7AB09C49C84ED34F7
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/A4CmN2NMvOLSOJ2ov0p-9fK9cWY.roa
Signing time: Wed 16 Oct 2024 14:01:51 +0000
ROA not before: Wed 16 Oct 2024 14:01:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214298
IP address blocks: 193.218.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:a2:90:1e:13:8d:d8:c7:ab:09:c4:9c:84:ed:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Oct 16 14:01:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0380a637634cbce2d2389da8bf4a7ef5f2bd7166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:71:61:e4:2a:9b:a8:38:9c:bf:9d:2a:e3:
6a:cb:91:df:f4:38:a2:35:10:a6:f7:f4:2c:31:7d:
f5:03:13:16:33:df:11:62:02:20:68:54:c6:0c:c6:
5f:6d:50:7c:6f:10:7a:9d:16:6b:32:7d:2a:48:df:
86:64:95:51:1c:e2:de:84:74:01:97:01:f3:36:fb:
95:b1:de:08:b1:8a:69:42:92:f3:f9:91:c0:c7:ce:
5e:aa:eb:9d:58:7b:0c:a2:c4:53:06:59:af:87:db:
47:cc:a8:b5:24:83:df:ba:40:4d:c8:50:2f:2e:4e:
0a:ec:b5:a1:37:99:f6:67:e4:f1:87:cc:39:8b:87:
79:29:6e:44:95:6d:3b:6c:45:bb:e1:b7:af:65:2a:
fe:21:ae:9b:ac:4d:e9:ee:eb:b8:30:c5:26:fa:fe:
f0:8a:b4:94:ed:6c:f1:a7:6b:2b:ce:45:86:44:36:
68:5b:81:87:5f:2d:9a:90:15:69:b6:0f:87:f5:d0:
94:5e:e3:6d:82:55:6c:40:24:ae:88:38:51:a3:84:
a1:fc:e0:c3:da:97:c5:4d:d3:5b:2b:6f:d4:79:35:
2d:cc:44:fc:fd:1e:ec:c2:6a:4e:0b:90:6d:ed:68:
03:7a:50:07:74:39:1f:12:7e:5d:1c:2a:15:10:a2:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:A6:37:63:4C:BC:E2:D2:38:9D:A8:BF:4A:7E:F5:F2:BD:71:66
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/A4CmN2NMvOLSOJ2ov0p-9fK9cWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d2:1f:18:c7:27:31:c5:85:b9:bd:36:d8:3c:f8:c1:ad:89:
5e:ac:10:f3:05:35:61:93:a2:61:d6:7a:37:3f:e0:13:91:03:
e6:ee:5e:75:2a:a5:4b:5e:31:b7:82:15:56:e9:01:64:ea:68:
d0:24:03:3e:87:75:f7:14:a5:d0:e1:6d:03:3e:d0:c3:07:ac:
5f:37:e6:4c:ee:e3:ed:8f:32:2b:3c:62:ba:b8:bb:45:cc:74:
66:fe:85:a5:07:5d:2b:62:b6:fc:6f:bc:0d:b7:12:f6:4c:55:
2b:27:0f:66:43:b0:3a:36:b0:e2:27:af:99:60:0f:f6:75:fd:
9d:d4:30:36:f5:54:86:2f:03:51:16:5e:36:b8:2a:58:a1:89:
86:8d:cb:03:d4:e7:01:89:a8:c0:7e:73:3b:6c:16:0f:69:2f:
09:3f:f4:30:69:da:a9:e2:f0:80:5a:45:7e:1c:a5:bb:d5:70:
78:ef:ce:e3:59:07:cf:db:3f:14:0f:ee:1c:2b:a2:9e:0b:01:
47:6d:71:7f:ef:60:04:5b:11:47:2c:dd:3a:5a:c2:3b:76:8c:
6c:24:dd:f8:77:cc:6d:37:2b:d4:76:83:f5:ea:e8:dc:2e:23:
83:b3:49:e9:d0:d5:97:a0:1f:b9:a8:5f:9c:1e:a7:40:43:1a:
36:6d:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:25 2025 by rpki-client