Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qgYk8h23uIRZDZbGt-TW1iAZ5Bo.roa
File: qgYk8h23uIRZDZbGt-TW1iAZ5Bo.roa (raw, json)
Hash identifier: HWoMZxKtZuUNmd+JyYNwRKfiVTVDFIUbBwdkwGAkRw0=
Subject key identifier: AA:06:24:F2:1D:B7:B8:84:59:0D:96:C6:B7:E4:D6:D6:20:19:E4:1A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194F7E9D00715466FE2D66D0EFC184FEC3C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qgYk8h23uIRZDZbGt-TW1iAZ5Bo.roa
Signing time: Wed 12 Feb 2025 02:08:03 +0000
ROA not before: Wed 12 Feb 2025 02:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399114
IP address blocks: 193.22.158.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 12 Feb 2025 06:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:e9:d0:07:15:46:6f:e2:d6:6d:0e:fc:18:4f:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 12 02:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa0624f21db7b884590d96c6b7e4d6d62019e41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:70:19:cb:45:be:ef:d1:86:73:39:54:d1:
80:1f:56:35:0e:b4:89:35:86:0a:79:b5:c8:a5:b8:
c1:b9:f2:bc:bf:8d:9f:bd:e4:64:73:c2:47:2f:94:
79:ab:87:3a:72:8e:27:3c:3f:1f:59:4f:d1:61:76:
b0:29:49:12:6c:8b:4f:c1:74:f8:2a:49:88:1c:e9:
fc:4c:6c:c4:8a:01:69:bb:33:8e:5d:ee:42:bc:3a:
40:5d:2e:01:39:2a:ed:55:84:55:18:a6:fc:fd:7e:
72:a7:10:c6:46:1c:46:83:d9:d7:d9:6a:5b:81:19:
5c:8a:28:f9:ff:6e:6b:10:04:a4:9d:bc:c5:1a:eb:
d3:e4:60:52:38:f0:17:37:20:d3:95:02:de:39:1d:
5e:76:a0:45:07:cc:31:1b:22:c1:19:b3:f0:6e:23:
d3:f3:7b:96:dd:92:40:c1:c9:78:ec:70:6c:c0:5f:
f4:88:28:cc:da:32:e2:f1:68:3b:fb:78:b2:68:52:
2e:4c:54:7a:e4:3c:91:3e:fb:18:23:b5:34:75:0d:
65:91:df:20:15:74:fb:b0:6f:a0:08:a2:0e:16:11:
15:c7:da:cb:40:20:30:1a:0b:84:42:e4:9c:19:eb:
6e:1c:4f:4f:e7:04:42:c0:76:d0:46:21:f1:0c:e6:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:24:F2:1D:B7:B8:84:59:0D:96:C6:B7:E4:D6:D6:20:19:E4:1A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qgYk8h23uIRZDZbGt-TW1iAZ5Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4b:0d:02:29:fc:73:72:f4:38:31:17:4b:3d:c4:aa:6f:e6:
52:7f:90:b1:fe:2b:35:b9:d2:bd:0e:9c:de:96:b6:e9:52:95:
11:ac:88:a9:58:ad:97:a0:da:71:19:bf:32:a7:62:a5:6c:8d:
48:b5:98:6d:5d:7b:8c:96:ff:8f:e7:d5:47:0b:e8:c3:8b:03:
bc:30:bc:76:39:ae:df:70:91:92:73:ae:74:83:74:71:6f:74:
71:f2:c9:f1:bd:3c:ae:bc:09:73:72:21:2d:5a:3c:cf:8b:93:
42:f2:cb:ec:ad:dc:e2:d4:5c:a1:d6:8d:2a:f8:28:0e:93:ef:
cd:b8:7f:71:2d:c6:3c:49:9c:5b:b0:b1:ee:8c:0a:5f:9a:f7:
0e:c8:ae:9f:26:e4:6c:20:0c:a4:2a:07:43:dc:8e:8d:44:14:
bd:4b:d8:61:b4:1b:d2:9f:4a:45:e2:c8:93:5c:e8:7f:34:1d:
b9:ca:ce:52:73:1b:61:77:4a:23:ad:14:da:20:2e:9b:7d:ee:
86:d0:4d:9b:d6:b5:95:81:9e:70:f7:5b:72:fb:6d:30:52:6e:
86:96:0d:4e:e1:01:aa:ba:8d:49:9e:a3:46:71:31:e4:a4:ab:
40:43:a9:2b:0b:ba:d6:35:4d:e3:de:22:fb:d7:d6:b9:15:aa:
8e:6a:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:52 2025 by rpki-client