Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/lDOx824uX4NlRGJCwNX6GvIEjes.roa
File: lDOx824uX4NlRGJCwNX6GvIEjes.roa (raw, json)
Hash identifier: aB2z5d7aVLVITP/HFVN7yNrGSydtiBSktafJbKLLrMM=
Subject key identifier: 94:33:B1:F3:6E:2E:5F:83:65:44:62:42:C0:D5:FA:1A:F2:04:8D:EB
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 0193869EBC486BA5DEE0A29C6EB9E9524035
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/lDOx824uX4NlRGJCwNX6GvIEjes.roa
Signing time: Mon 02 Dec 2024 09:06:10 +0000
ROA not before: Mon 02 Dec 2024 09:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28726
IP address blocks: 93.190.198.0/23 maxlen: 23
213.153.96.0/19 maxlen: 19
2a01:6d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:9e:bc:48:6b:a5:de:e0:a2:9c:6e:b9:e9:52:40:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Dec 2 09:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9433b1f36e2e5f8365446242c0d5fa1af2048deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:76:87:98:07:32:49:96:15:66:a3:26:e6:
08:75:46:b6:8b:20:33:78:43:1c:d4:ab:c0:0d:bb:
a5:80:37:1c:91:1c:ed:80:1b:66:1a:20:91:93:06:
22:87:56:67:0a:3e:c4:d9:84:85:b2:89:10:f4:4b:
9e:6f:76:11:b0:1d:db:ea:f8:17:0d:2a:d0:f6:2f:
73:3d:81:7a:78:7d:c2:de:57:5f:2f:cf:8c:ad:29:
48:23:51:8b:9f:79:38:6f:1b:64:05:a7:17:30:a5:
f5:8e:02:af:4a:99:2b:b8:9f:8b:26:a2:ea:25:90:
de:46:a3:d4:66:89:5e:af:b8:3a:7d:f0:0c:7b:0a:
8e:da:12:c9:29:b4:04:ea:f8:36:0d:57:c0:6c:96:
5e:00:4c:d2:99:52:55:dd:39:99:18:3d:b2:a3:0b:
ee:7c:cf:ed:05:b7:62:c5:cf:15:6e:fb:03:33:08:
27:9c:b3:6b:0a:ed:cf:aa:16:dc:9c:d1:45:bb:b3:
0e:3d:02:7a:b2:ec:75:fa:8b:45:fa:2f:84:e5:88:
46:8c:69:69:2b:f1:e4:7e:53:c0:e7:7a:b0:61:a7:
8f:05:3e:8e:ec:7f:ad:82:b3:dc:52:8b:bf:5c:21:
70:24:bc:10:f3:16:42:bd:2e:1d:65:90:f3:73:25:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:B1:F3:6E:2E:5F:83:65:44:62:42:C0:D5:FA:1A:F2:04:8D:EB
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/lDOx824uX4NlRGJCwNX6GvIEjes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.198.0/23
213.153.96.0/19
IPv6:
2a01:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
a0:70:0b:a3:20:0d:31:03:4b:2c:a8:82:ef:29:64:28:16:b4:
b2:27:82:74:8e:f2:39:9f:44:91:c0:75:7b:fc:37:29:7a:cd:
84:05:38:01:22:2c:cc:fc:db:3a:c0:45:6d:ee:c8:17:6a:97:
a9:10:b5:7c:6f:1c:3e:ba:b9:7d:6f:05:1e:60:dd:e1:bb:c3:
49:8e:88:8f:c6:65:27:91:74:ca:46:2f:3f:be:57:84:ac:41:
ee:d4:58:f9:96:de:31:34:7c:97:75:5b:07:54:0c:11:c6:59:
25:61:26:e4:fd:dc:6e:b0:ad:b2:ca:af:bf:e4:61:01:c8:98:
7a:09:83:07:2a:89:51:f1:1d:e7:de:a3:93:d5:ae:66:e3:45:
a9:4d:e5:35:d1:3e:ad:a9:55:70:10:4a:03:20:4a:64:ba:03:
a1:6b:a9:91:56:84:d2:59:22:98:be:1b:ff:a8:2d:f5:e0:dd:
75:56:f2:7e:5e:7b:ec:84:eb:4d:50:5f:16:8a:e4:e4:a7:f1:
c3:da:04:47:4c:b9:f2:72:92:8f:ba:52:53:36:ad:68:c0:d8:
87:d7:70:a8:9f:8d:ff:a4:9a:9c:09:3b:7b:d8:f9:fc:b9:5d:
25:57:84:7a:09:05:eb:77:67:8e:4e:b2:6a:b6:a0:cf:6c:92:
f3:45:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:14 2025 by rpki-client