Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_M5Ci7t97mE-1Xk-C_SOSb3-F50.roa
File: _M5Ci7t97mE-1Xk-C_SOSb3-F50.roa (raw, json)
Hash identifier: rFdmcMYRL/JVCaBAAMhxo4ZPvpfYc8l8ioRf5oY78+s=
Subject key identifier: FC:CE:42:8B:BB:7D:EE:61:3E:D5:79:3E:0B:F4:8E:49:BD:FE:17:9D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E75BB39DA8A420F40E1F8093C626
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_M5Ci7t97mE-1Xk-C_SOSb3-F50.roa
Signing time: Tue 02 Jan 2024 02:31:22 +0000
ROA not before: Tue 02 Jan 2024 02:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34385
IP address blocks: 193.183.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e7:5b:b3:9d:a8:a4:20:f4:0e:1f:80:93:c6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcce428bbb7dee613ed5793e0bf48e49bdfe179d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:f8:9d:5b:9b:38:fc:87:b3:a0:3b:8e:58:
93:5c:57:6d:e4:18:40:7c:b0:39:9f:45:af:6a:39:
f0:7b:04:11:8c:64:ad:00:9b:3b:b6:95:d4:d3:e2:
39:c0:74:7a:25:30:33:5c:04:1a:bc:a6:3a:cc:c8:
1c:3d:13:55:7e:ef:db:17:44:16:7e:ad:0f:31:25:
69:45:d0:87:91:7a:d6:37:9e:3c:7d:03:ce:69:ae:
22:3a:f3:e2:3e:89:c9:ed:ab:7f:88:ff:17:de:82:
ca:53:e0:2a:23:07:c2:b4:ec:66:a6:51:7a:3c:4e:
3c:f1:01:8e:e1:b2:d2:c8:b8:59:35:23:49:ca:43:
9c:62:ea:e2:98:79:cb:91:41:26:c5:25:e1:5c:bd:
df:18:9a:38:e6:1b:39:a3:a3:39:9c:f3:63:7b:b0:
3b:9d:1e:8a:f6:10:b1:00:6c:a7:ee:25:b7:db:c2:
43:22:6f:ea:bb:53:ed:fa:3f:bb:41:68:b5:47:29:
58:cd:1a:38:89:f1:12:7c:54:53:eb:50:c3:d2:25:
db:49:f0:10:3e:ee:f4:c7:2c:29:85:26:76:6c:6a:
1c:00:b4:b1:96:23:3b:24:eb:a0:81:0e:91:84:2d:
17:58:67:2a:f0:59:0e:07:4e:35:80:6c:dc:53:26:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:42:8B:BB:7D:EE:61:3E:D5:79:3E:0B:F4:8E:49:BD:FE:17:9D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_M5Ci7t97mE-1Xk-C_SOSb3-F50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.119.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:82:3e:36:84:c5:29:46:c2:ac:09:a9:0b:27:e5:e3:f2:68:
b1:2c:9d:6c:49:8b:ce:09:f7:8f:17:f1:35:35:ec:dc:dc:25:
a1:01:f6:6a:dd:32:7e:9a:08:8e:09:5b:17:7d:98:90:f9:71:
4b:6c:0a:90:79:5a:f6:78:b5:ef:b5:1c:c8:f5:a2:52:74:9f:
b3:76:e6:9f:d0:e3:56:f5:dd:c5:d1:b1:41:aa:e4:2b:bc:c7:
35:e1:5f:e0:d4:13:e4:e8:8c:ce:10:95:25:e0:58:58:24:83:
51:00:20:fc:ce:48:ec:d0:79:a4:16:15:31:ca:52:1f:40:98:
d0:47:51:5f:f6:b0:1e:31:88:cf:eb:da:85:41:48:7b:5b:77:
fb:0b:ff:b0:b0:ab:de:f7:b3:9d:ce:d4:4b:5a:88:de:62:8d:
01:38:2c:81:26:02:20:14:1c:a1:1a:ef:6c:63:27:45:17:94:
02:d0:7d:10:df:35:8c:9f:00:80:47:91:6b:a4:0c:3b:80:55:
2a:94:cd:c9:8a:ba:44:34:4d:88:23:3d:fa:7d:f3:80:60:5d:
1d:fa:eb:0e:d1:b1:c4:0d:1d:83:6a:c0:f2:e2:ab:d0:3e:5c:
1d:71:c4:a1:44:5d:de:f6:cb:1d:45:8c:00:20:4d:79:3b:11:
0f:bc:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:50 2025 by rpki-client