Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/6BemzIwQ_5IA1pugmvD4DGYNJuU.roa
File: 6BemzIwQ_5IA1pugmvD4DGYNJuU.roa (raw, json)
Hash identifier: P4y2pA1QQS4kwDeCeoFTquYxkZC8BGDSD0vxcs1idAc=
Subject key identifier: E8:17:A6:CC:8C:10:FF:92:00:D6:9B:A0:9A:F0:F8:0C:66:0D:26:E5
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 018CC2DB3B686F50E4C1DE857EE7787AB1EC
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/6BemzIwQ_5IA1pugmvD4DGYNJuU.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20509
IP address blocks: 193.178.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3b:68:6f:50:e4:c1:de:85:7e:e7:78:7a:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e817a6cc8c10ff9200d69ba09af0f80c660d26e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:e0:46:c0:89:f3:9f:f5:be:1d:6a:f1:0d:
64:31:69:fa:78:cf:c4:b9:be:19:f7:69:77:0e:07:
b5:7f:65:92:49:f4:87:dc:1f:76:fb:b7:1d:42:e5:
3b:c6:f2:c7:6d:cd:f9:e3:c8:34:02:73:20:b4:19:
4a:9c:c7:ec:c7:7d:74:20:76:b9:89:3b:58:b6:41:
7e:c9:50:9c:ff:11:f6:2c:20:76:8b:82:3c:5b:94:
48:74:30:7e:5f:2b:62:87:58:67:5a:36:c8:f3:9d:
ed:09:3f:a1:36:a5:2e:48:e1:8f:e2:6c:44:5f:81:
79:a5:fc:d4:76:6a:25:48:4a:97:5f:22:5f:3a:b8:
7e:72:bb:b9:8d:36:c0:b4:50:e4:81:a7:fe:5c:45:
70:03:0b:8b:8b:04:f0:c7:2f:39:9f:e0:de:67:61:
a4:4c:ac:17:ae:02:75:48:b6:40:4c:01:ee:41:b4:
31:a3:ee:49:01:55:13:6d:ef:dd:25:19:70:45:29:
4d:f8:2c:db:5b:fe:6d:d0:a2:ed:70:9d:f2:d0:50:
bf:ba:7c:c8:fe:b9:7d:c6:a5:dd:cd:6b:7d:1a:97:
6d:59:8e:2e:e1:d0:67:5f:95:68:53:0a:44:6b:78:
6c:d0:3b:c3:e7:a9:78:d6:57:77:07:b7:86:5b:39:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:A6:CC:8C:10:FF:92:00:D6:9B:A0:9A:F0:F8:0C:66:0D:26:E5
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/6BemzIwQ_5IA1pugmvD4DGYNJuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:74:f1:f1:ee:59:4b:66:69:19:08:1d:62:a5:4d:2e:6e:28:
5d:2e:a3:74:43:62:f6:1c:fa:ed:65:93:db:37:17:33:59:26:
e8:9a:fb:ee:62:d3:ce:fc:54:4d:9d:f8:48:8d:01:e6:b1:74:
f5:fe:58:9f:1b:20:de:6d:72:8f:ed:28:a9:ca:98:1f:d4:45:
8e:fb:b1:f9:ed:1c:ba:be:cf:aa:10:48:e2:95:59:05:35:3a:
ea:73:d2:d0:c2:69:4f:56:64:0b:51:8f:c9:31:ff:31:08:c1:
af:61:2e:3c:46:5d:4b:32:e6:4c:24:b3:ed:2d:e4:78:4a:7c:
30:6b:91:b9:bc:ba:9a:e2:e2:33:32:84:39:c9:98:bc:5b:58:
02:63:75:f6:2a:54:62:65:17:ed:13:79:d5:3d:17:47:3e:5b:
0f:a8:c4:e2:de:0e:82:e7:90:f4:35:93:d6:c4:09:80:9d:81:
9b:58:fe:7a:ea:40:4a:f1:ab:80:59:be:a4:bc:d9:6a:4d:17:
2e:13:0e:a1:67:c9:ff:12:4a:47:48:14:0e:ab:23:8a:60:9f:
47:d3:c4:68:16:90:a4:d2:fd:4a:1d:84:89:70:d1:55:40:41:
2f:c5:0c:16:3f:09:5a:98:2a:0e:9c:1a:ea:a1:08:d7:42:12:
67:28:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:10:11 2025 by rpki-client