Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0jJrdIGQJsFTLVsA4BBJ4El7B-s.roa
File: 0jJrdIGQJsFTLVsA4BBJ4El7B-s.roa (raw, json)
Hash identifier: FWNVoKkIepMY/IhO6xojm32CN+c35+qGw7NK1sFfDcg=
Subject key identifier: D2:32:6B:74:81:90:26:C1:53:2D:5B:00:E0:10:49:E0:49:7B:07:EB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019325D13EF0BDE2C60715B7A2833FDBAC49
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0jJrdIGQJsFTLVsA4BBJ4El7B-s.roa
Signing time: Wed 13 Nov 2024 13:58:10 +0000
ROA not before: Wed 13 Nov 2024 13:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44803
IP address blocks: 193.180.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:d1:3e:f0:bd:e2:c6:07:15:b7:a2:83:3f:db:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 13 13:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2326b74819026c1532d5b00e01049e0497b07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:ab:a1:d1:f9:24:ee:74:5e:2f:8b:31:d1:
f1:74:87:93:95:29:41:35:c3:17:81:bc:3e:91:cc:
98:9d:3e:20:af:d5:5f:65:82:a4:d8:5d:e6:91:13:
73:e8:6f:47:b6:58:cf:61:8c:e7:1f:9e:0a:83:a8:
33:01:7a:63:78:8e:5e:21:72:8d:7f:1b:73:a3:b9:
67:93:af:69:50:32:0b:66:cf:15:8a:e0:5e:4d:57:
42:b6:76:66:85:51:95:05:ea:05:38:73:86:db:ea:
e0:99:20:64:f0:3e:12:8f:36:b2:66:24:aa:aa:c5:
cd:db:36:74:cd:a7:6e:57:9b:ac:46:f9:01:85:88:
62:48:24:17:de:e5:58:2e:7d:75:c9:44:7f:33:1f:
bc:55:bd:8d:ba:2c:46:37:c9:b9:67:45:4d:57:95:
41:cb:fb:d9:a8:fa:45:6a:fd:99:69:92:17:01:30:
48:3b:01:f3:80:40:df:0b:df:1a:c2:b0:e4:3c:de:
70:23:a1:d3:80:a1:4f:3f:ec:37:8e:de:e6:ca:06:
8c:be:fc:3b:ab:fe:ff:d9:8d:d5:ca:14:5b:c4:0c:
08:8c:cf:e1:97:45:0a:8f:ed:01:0f:d6:3b:34:e2:
5e:30:26:6b:e9:30:1c:5b:68:c4:96:0f:ec:25:19:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:6B:74:81:90:26:C1:53:2D:5B:00:E0:10:49:E0:49:7B:07:EB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0jJrdIGQJsFTLVsA4BBJ4El7B-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.208.0/21
Signature Algorithm: sha256WithRSAEncryption
07:15:fe:f4:73:32:09:da:46:fb:eb:ce:5e:0a:60:d7:33:a3:
6f:86:d2:c2:4f:03:2b:0f:b6:0f:45:91:5e:aa:bb:6d:50:fe:
e1:90:9f:0c:6a:03:b1:6d:5f:66:24:47:9a:bb:7e:ee:8b:c0:
c0:8b:c2:77:31:c5:5f:9d:6a:3e:46:48:44:02:8d:34:48:09:
c6:01:b4:4a:dc:9c:60:13:85:5f:6b:23:74:bf:df:c6:83:76:
6d:44:55:fe:e7:9a:61:20:f1:ab:37:d5:b4:2a:f4:4c:21:0d:
3a:52:0d:b3:69:8b:53:f1:58:fd:c5:f3:91:1f:dc:a0:c8:6f:
6d:f4:b9:d2:70:68:07:3c:76:26:e0:63:f3:8f:ec:da:d7:b0:
84:d5:8e:42:78:6a:af:4a:b0:5f:51:9a:af:45:26:35:ed:57:
60:6e:9b:31:9d:4a:80:4c:ac:aa:9b:53:08:6b:1e:57:e8:8e:
3d:4b:1f:56:69:82:84:db:a8:39:97:a9:9d:dd:ed:5e:bd:dd:
d6:41:50:1e:16:4f:12:b5:6c:6e:45:ea:c9:4b:7b:e4:cb:81:
77:e2:35:46:fb:b8:6f:57:0e:48:67:36:88:79:e9:4b:c1:c3:
62:98:bd:5e:71:2c:67:68:57:40:fa:4d:bc:57:cd:4c:18:de:
35:66:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:25 2025 by rpki-client