Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/DU0Fqw4f2uf3OvNrioh7F5pIj8E.roa
File: DU0Fqw4f2uf3OvNrioh7F5pIj8E.roa (raw, json)
Hash identifier: Xs8vLXm86zIIIJOzj7ru5o4zAnT4jU70YsrUeTdjtUs=
Subject key identifier: 0D:4D:05:AB:0E:1F:DA:E7:F7:3A:F3:6B:8A:88:7B:17:9A:48:8F:C1
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 01912934B0B2AAE3BC03C5915146F25BC2EC
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/DU0Fqw4f2uf3OvNrioh7F5pIj8E.roa
Signing time: Tue 06 Aug 2024 19:40:04 +0000
ROA not before: Tue 06 Aug 2024 19:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215546
IP address blocks: 193.243.183.0/26 maxlen: 26
Validation: Failed, certificate revoked on Fri 11 Oct 2024 13:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:34:b0:b2:aa:e3:bc:03:c5:91:51:46:f2:5b:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Aug 6 19:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d4d05ab0e1fdae7f73af36b8a887b179a488fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:d8:17:92:10:c7:97:15:91:5c:c4:70:d4:
4c:bc:60:e6:d7:9a:74:76:e3:bf:ca:9d:78:b0:06:
5a:b7:33:3a:ab:d8:38:f2:c6:c6:ca:c6:83:80:a5:
cb:16:b5:25:6c:5b:57:a8:63:02:51:40:fd:50:c7:
12:c0:d7:29:a3:3e:ae:59:39:52:c3:7a:7b:71:d7:
75:38:38:f5:b7:94:d4:ef:68:53:c5:b4:e0:4c:b7:
b6:db:3f:9c:67:9d:1e:5c:07:81:8d:76:4a:91:d1:
5d:6d:a7:9d:70:dd:18:e6:27:85:67:bc:36:fa:6c:
d0:4d:2d:9a:1f:74:93:bb:8c:93:fe:0a:7b:d5:0c:
2c:48:b9:a4:ff:6f:25:4f:4c:0f:a5:20:6c:a3:07:
6b:3a:e3:0f:3b:91:d5:4e:23:98:da:01:9a:6e:78:
5b:43:b5:c2:e2:bb:9c:87:b9:2f:67:d9:21:7a:89:
04:98:92:44:83:43:06:db:a1:05:61:33:09:d3:5d:
5c:0e:dc:c8:31:a9:14:45:02:79:a3:66:6d:3c:36:
33:d6:d6:5b:00:6b:28:d2:42:c8:a0:ab:3b:bd:80:
5f:ee:95:ad:fc:42:7c:3f:56:e2:09:9a:22:94:e3:
65:ad:e6:5b:43:6b:fe:c3:10:9d:63:98:1e:f8:e5:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:05:AB:0E:1F:DA:E7:F7:3A:F3:6B:8A:88:7B:17:9A:48:8F:C1
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/DU0Fqw4f2uf3OvNrioh7F5pIj8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.183.0/26
Signature Algorithm: sha256WithRSAEncryption
31:16:4a:1d:5d:05:8a:87:55:7a:59:59:5f:77:e2:93:3e:ec:
c5:61:2f:19:cb:1b:eb:1d:62:6b:59:d6:31:e6:5d:f5:5e:dc:
99:28:6b:89:9f:bc:63:51:3c:0a:2b:46:72:fe:8d:de:2f:1b:
7f:22:1a:f8:08:34:62:62:5e:6d:70:b5:9a:a9:17:7d:3c:49:
8b:07:45:85:1a:76:44:99:08:e4:83:ab:12:ad:b9:73:87:9d:
09:9e:80:2a:4c:9f:95:f5:61:23:bb:3c:96:e4:9f:a9:42:dd:
ac:5f:52:7f:58:42:4f:58:f0:60:10:3f:28:e2:19:6b:95:dd:
3d:f1:c6:2e:ec:ab:b7:7e:4d:07:b3:f7:62:d4:5d:19:14:8e:
5c:85:54:df:0e:9e:5e:43:3a:03:86:22:cf:ac:67:26:11:54:
d9:ef:16:bc:17:c7:36:f0:54:a8:6e:a3:4a:57:1f:0a:a9:84:
a5:1f:da:14:2c:c4:c0:b7:3c:c9:66:a2:f4:d6:d0:3f:fd:bd:
1e:51:34:1f:9e:41:70:36:04:32:01:ad:8c:21:a0:93:e5:07:
e7:af:3e:73:59:c9:f6:6d:77:91:5d:2f:a1:b0:78:ae:1b:5c:
72:1c:9f:f8:3e:a9:b7:01:b3:c2:1e:08:ec:ea:eb:4f:35:7b:
d6:34:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:13 2025 by rpki-client