Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/54FHpD8xkE0wvhmwUYaCtGhwWN4.roa
File: 54FHpD8xkE0wvhmwUYaCtGhwWN4.roa (raw, json)
Hash identifier: OBU2jDHl7qZj0eWzsH7nD2HhBpfOo73P5x9ZIZKcphw=
Subject key identifier: E7:81:47:A4:3F:31:90:4D:30:BE:19:B0:51:86:82:B4:68:70:58:DE
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0193C546F797A336FCFE5F7A67048CD3BFFA
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/54FHpD8xkE0wvhmwUYaCtGhwWN4.roa
Signing time: Sat 14 Dec 2024 13:06:22 +0000
ROA not before: Sat 14 Dec 2024 13:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:46:f7:97:a3:36:fc:fe:5f:7a:67:04:8c:d3:bf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Dec 14 13:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78147a43f31904d30be19b0518682b4687058de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:8c:d1:51:73:5d:a1:52:30:2b:51:12:1a:
08:77:0f:dd:22:b8:3f:95:6b:3d:92:ae:e3:c2:dc:
95:d3:e0:f2:dc:dc:42:61:5e:e4:61:d8:6f:0c:59:
a8:61:13:6d:ea:e1:07:97:a7:9f:f6:2f:b0:48:84:
e7:7b:af:c8:c7:90:23:86:88:9c:5b:f9:b3:2b:8e:
ac:7d:d8:79:c2:d7:b9:c7:83:ee:40:9f:70:34:75:
23:99:b2:86:fe:20:04:42:c5:fa:c9:d3:59:ba:cb:
d7:89:f0:9f:63:49:a0:c1:36:2c:84:91:b2:e9:8b:
3a:2d:dc:63:3c:c2:0d:94:c5:0d:23:45:52:0f:f7:
36:32:f4:22:88:0f:5e:31:84:72:39:03:ed:fd:3d:
5a:e6:a6:f9:01:cd:19:ef:78:15:60:31:53:38:80:
8a:e7:bc:9d:8c:fc:86:2e:78:27:3d:1c:b5:8b:13:
1f:5f:cf:8b:67:89:2a:fe:58:cc:62:ca:d2:a7:ff:
50:e0:9f:a7:76:7d:30:02:c3:32:05:9b:f0:25:bf:
f5:60:a4:22:cc:b1:a2:b2:48:4c:14:de:87:7b:bb:
3b:ed:ba:f6:20:92:61:62:f9:28:dc:75:f0:36:cf:
b5:8d:3e:16:73:9d:09:1a:d4:bf:38:cd:b1:79:ec:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:47:A4:3F:31:90:4D:30:BE:19:B0:51:86:82:B4:68:70:58:DE
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/54FHpD8xkE0wvhmwUYaCtGhwWN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.199.0/24
80.93.203.0-80.93.205.255
Signature Algorithm: sha256WithRSAEncryption
26:fa:75:e1:d6:8a:37:30:c2:ea:e1:bf:35:1a:c4:cf:81:70:
e4:6b:e0:0d:45:af:ea:4f:61:fb:4e:21:d9:1c:23:f1:3f:e0:
77:b5:a6:31:94:b4:40:ec:fe:cd:2b:7a:03:2e:01:09:46:ae:
24:3d:07:75:ed:7a:da:e2:c8:7f:f6:6e:4a:ee:fc:71:cb:f2:
e9:fa:20:74:46:5c:94:ae:d7:3c:a8:75:cd:60:6b:9c:85:1c:
c0:8d:a9:6d:35:0e:01:f7:45:4a:de:2c:8c:c1:37:18:f2:83:
01:78:06:64:9d:84:eb:4e:ef:ff:a3:2c:cf:41:40:c1:28:4d:
c2:49:35:47:d8:d4:a9:5d:f4:13:9a:ae:0d:fd:91:29:9e:25:
ad:63:4c:94:0b:29:e2:47:a3:29:21:22:5d:9b:d5:11:d5:13:
09:cd:eb:0d:07:f0:7a:39:25:ad:07:d8:ed:45:77:19:8a:b3:
dc:c1:1a:25:5e:43:6c:12:c3:bd:ca:bf:d7:76:92:6d:aa:52:
48:f1:16:c5:b7:9c:69:6c:64:4d:cb:d2:0f:db:8f:05:cf:a0:
fb:a0:7d:45:de:a5:64:48:2a:a7:c0:64:55:8f:3e:45:0b:62:
89:d6:f5:c3:4b:13:3c:c0:70:79:81:f7:5f:92:ec:9d:c2:be:
53:a6:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:18 2025 by rpki-client