Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Gf45P9Sbc4NEl6256iljLKKn26U.roa
File: Gf45P9Sbc4NEl6256iljLKKn26U.roa (raw, json)
Hash identifier: 6lykrzIiBcO8/pnKAubiRRo6nPoCK1hDCmOGJLqsJjc=
Subject key identifier: 19:FE:39:3F:D4:9B:73:83:44:97:AD:B9:EA:29:63:2C:A2:A7:DB:A5
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0193871881333BE1ED04D3CDA2F6EDAE13A3
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Gf45P9Sbc4NEl6256iljLKKn26U.roa
Signing time: Mon 02 Dec 2024 11:19:10 +0000
ROA not before: Mon 02 Dec 2024 11:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215113
IP address blocks: 193.68.88.0/24 maxlen: 24
213.21.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:18:81:33:3b:e1:ed:04:d3:cd:a2:f6:ed:ae:13:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 2 11:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19fe393fd49b73834497adb9ea29632ca2a7dba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:4c:f8:97:6c:21:91:ea:9d:20:df:e2:63:
32:90:07:09:1f:9d:6d:b4:86:00:5f:c4:32:bf:86:
11:10:7b:ee:14:27:08:c1:61:b3:b3:2d:9b:f9:d6:
8f:56:c9:57:fa:fb:ea:b8:3f:f0:03:11:8d:2c:1a:
f2:91:e7:70:ed:f0:f5:8c:80:9e:5a:36:35:21:bf:
8e:9c:35:39:dd:89:3b:bb:49:2e:c0:4e:bd:d0:e6:
01:d5:8d:80:51:51:c8:13:56:b9:d2:d5:89:35:7e:
2c:8b:97:29:a4:b7:a4:c7:74:8b:8f:0f:bc:6f:09:
5d:8d:52:67:c4:19:30:eb:d2:52:fb:37:6a:b3:75:
cb:cb:6f:a0:b0:4b:8a:84:f7:40:e0:4e:d3:7e:f9:
3d:9c:13:5a:e4:ef:44:90:e7:13:28:c5:92:9f:3f:
cc:e8:1c:6f:5b:93:2c:ac:0b:ad:ec:61:d1:6c:6e:
99:3d:76:a2:5f:e5:9d:74:99:08:17:ca:7a:a5:ad:
c1:00:fd:73:03:18:35:d9:85:d6:b9:21:24:d9:5a:
e4:c1:2c:fd:99:1c:f4:d7:70:36:10:4b:48:64:f4:
aa:ec:23:56:8e:d2:24:4e:2a:23:83:f0:18:f6:00:
ca:34:73:c7:4c:09:fb:20:4a:59:71:18:20:65:68:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:39:3F:D4:9B:73:83:44:97:AD:B9:EA:29:63:2C:A2:A7:DB:A5
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Gf45P9Sbc4NEl6256iljLKKn26U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.88.0/24
213.21.240.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5b:06:f4:1a:9e:54:1c:e0:03:55:5d:79:77:cb:9b:1b:0a:
0e:41:ce:4e:c7:2e:2a:81:b1:2c:bc:63:bf:92:ed:4e:13:c0:
9c:3d:3a:14:aa:88:b2:44:d1:c0:c4:7c:13:26:0e:db:b0:25:
82:f2:29:df:b4:76:45:0a:c0:ef:9c:2b:b2:4f:db:13:01:3c:
d3:6d:d1:c8:9f:f9:98:33:f6:42:d3:7b:db:2a:b5:de:d5:22:
a9:7d:01:84:57:2d:08:2d:cd:19:39:9d:32:86:9c:47:e0:df:
5c:55:b0:f0:11:54:05:47:85:56:e6:68:02:52:f8:6e:5c:c1:
51:04:a5:b3:03:87:98:4b:f3:2d:0d:14:2b:24:27:10:91:22:
40:6f:94:1f:03:7a:c3:42:ce:c2:1b:9f:31:02:af:85:3e:84:
c8:5b:eb:2b:13:49:5c:fe:7c:8a:a0:60:03:f5:c4:51:34:c4:
0d:84:3f:34:fd:0c:2c:3d:62:f7:b7:a1:f0:ca:46:1d:12:1c:
89:56:79:8e:a7:04:43:9f:f3:c2:a1:0b:7a:27:c1:0a:ee:4b:
fe:da:aa:ab:87:55:74:ef:00:50:59:fa:e0:75:33:94:ab:3d:
a2:71:ca:fb:a1:bf:4e:5c:86:2c:de:e5:0b:af:95:11:e4:a9:
5c:c4:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:23 2025 by rpki-client