Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/8XNmLdsmjqgXjioP30k-DfBOYtE.roa
File: 8XNmLdsmjqgXjioP30k-DfBOYtE.roa (raw, json)
Hash identifier: CDCBJoqjo/bTzbUNHNsu0cKxxL/7O13xX8PwHVMyEt0=
Subject key identifier: F1:73:66:2D:DB:26:8E:A8:17:8E:2A:0F:DF:49:3E:0D:F0:4E:62:D1
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01950AF4FE19BB4EE8BD79D3CEA63F7FC1EF
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/8XNmLdsmjqgXjioP30k-DfBOYtE.roa
Signing time: Sat 15 Feb 2025 18:53:02 +0000
ROA not before: Sat 15 Feb 2025 18:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca80:abcd::/48 maxlen: 48
2a0f:ca86::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 16 Feb 2025 12:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:f4:fe:19:bb:4e:e8:bd:79:d3:ce:a6:3f:7f:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 15 18:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f173662ddb268ea8178e2a0fdf493e0df04e62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:4e:ec:65:7e:75:17:08:72:45:fb:9a:43:
b8:26:e3:86:3f:c0:ce:e6:ab:e3:20:a0:20:79:ef:
65:63:65:fc:ef:69:e9:8a:ca:cf:23:b3:d4:6f:23:
a6:48:0a:15:89:fb:00:72:aa:42:1a:9f:e5:46:d8:
8c:b9:34:e9:3e:2a:fa:33:01:52:dc:64:ff:f9:d3:
6b:ea:86:ef:f2:eb:e3:06:fa:70:7c:7e:ff:76:fd:
d3:1a:b9:29:c4:16:56:67:8f:92:fa:c9:9e:0d:06:
19:ca:7e:5a:fe:20:ee:30:75:20:68:1e:73:ee:d2:
0a:73:0f:c6:97:66:bb:5a:7e:1b:89:c6:9a:3c:f1:
11:c4:43:00:c4:73:84:f0:e1:ae:15:de:86:d8:3e:
84:80:60:05:a0:1d:fe:16:99:24:da:7f:34:00:fd:
0d:2a:f3:d6:9e:e6:f4:0e:5e:f9:12:d9:d0:d7:6a:
10:32:15:43:f2:f7:09:45:2c:12:43:44:89:0d:ab:
aa:7a:94:fc:7d:07:d2:58:b4:f8:5e:ab:86:6c:ab:
83:6a:72:ad:22:03:01:e0:88:04:73:87:c5:a1:ee:
20:b5:1e:3b:97:25:d2:52:ca:c6:8f:75:25:de:7c:
95:e9:36:8e:23:92:dc:88:3a:94:fc:29:97:0b:56:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:66:2D:DB:26:8E:A8:17:8E:2A:0F:DF:49:3E:0D:F0:4E:62:D1
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/8XNmLdsmjqgXjioP30k-DfBOYtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80:abcd::/48
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
ae:d8:ef:47:1d:5e:64:11:56:f3:d0:c9:d2:2f:ad:78:7f:5f:
ca:bd:d1:ba:18:43:6a:15:bc:47:9f:d7:94:72:84:66:08:ba:
df:48:af:de:98:9b:be:af:66:8c:da:59:ca:41:ec:f1:76:8c:
55:a3:66:dd:7e:5b:ff:7d:45:2d:71:7f:15:bc:22:d4:39:a4:
f5:67:54:cf:9a:1c:4d:fc:ab:74:77:7e:9a:80:63:66:db:20:
02:d9:84:b8:fe:f7:35:ae:7f:bd:ed:f6:57:bc:f0:6f:f1:1a:
20:dd:e5:d4:aa:35:ff:b2:a8:98:2c:05:65:51:8d:a4:4c:a3:
99:30:b0:72:29:b2:ad:87:45:1e:72:01:5e:38:be:fe:f2:4e:
c0:bc:b1:cb:f2:97:6b:6a:76:2c:1e:05:f7:b7:34:56:b9:5e:
ea:46:6e:b7:6a:74:f7:5c:84:ae:7e:9d:e1:9c:c9:ef:3c:fc:
0d:be:9b:c7:cc:a7:0a:45:08:23:64:73:64:79:a4:22:86:58:
9a:71:ff:46:40:14:71:b5:07:f1:df:24:bb:9b:2e:9e:37:12:
04:82:34:ff:60:4d:47:bf:40:fa:b9:25:5d:3b:06:ca:70:47:
21:ee:6f:9e:2e:10:06:ad:93:d0:9f:2b:2b:eb:6b:20:7e:e8:
54:15:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:42 2025 by rpki-client