Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/dDG5tbv2JV90zGXp8AHPTZI6juY.roa
File: dDG5tbv2JV90zGXp8AHPTZI6juY.roa (raw, json)
Hash identifier: +158DhbPsLbnBTSygtOIZXFz13NQQuuJlJRu2gSaYzA=
Subject key identifier: 74:31:B9:B5:BB:F6:25:5F:74:CC:65:E9:F0:01:CF:4D:92:3A:8E:E6
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0194D0B2332A224E4C657C85D2DB7B4DF5B3
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/dDG5tbv2JV90zGXp8AHPTZI6juY.roa
Signing time: Tue 04 Feb 2025 11:22:06 +0000
ROA not before: Tue 04 Feb 2025 11:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 93.152.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 10:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:b2:33:2a:22:4e:4c:65:7c:85:d2:db:7b:4d:f5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 4 11:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7431b9b5bbf6255f74cc65e9f001cf4d923a8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:ae:e0:e7:a6:6b:51:b0:75:b2:df:5d:fa:
6f:d7:b8:9f:22:a2:cc:27:91:f3:86:71:e5:ae:29:
ef:e2:03:bf:d6:de:ff:d7:1f:85:05:23:a5:8d:52:
c7:c2:e7:f8:b1:77:04:55:01:3d:d8:d5:db:2d:64:
60:71:fe:49:4a:30:75:17:01:64:3a:3c:03:02:8a:
bf:49:fd:8a:82:5f:03:13:e2:a7:e7:44:9c:80:a2:
ac:92:c0:5c:29:52:0c:06:1b:97:1c:70:6a:e0:26:
a0:69:24:90:be:eb:82:6b:80:26:82:59:0b:86:f5:
93:05:89:bc:14:07:ee:e4:2f:47:2c:8e:82:64:c4:
b9:62:9b:af:ae:aa:83:1c:1f:c6:43:2c:e7:25:0c:
be:dd:66:60:56:e0:0d:28:d8:4e:44:8c:5a:4c:c1:
62:c5:6c:f1:ee:d6:ca:e8:db:1e:59:82:f6:08:f3:
59:83:f3:83:f5:07:07:07:54:d8:b2:01:15:53:bd:
61:eb:db:38:3a:ae:57:4d:6b:31:7b:26:9a:1a:ad:
77:46:52:c2:75:c8:ed:ac:0b:1f:f3:44:b7:84:89:
55:cf:08:85:28:9d:4d:a7:83:59:8a:72:f6:a7:71:
f8:4f:39:a7:f4:28:d9:d0:71:d1:d4:7e:c8:7a:a9:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:B9:B5:BB:F6:25:5F:74:CC:65:E9:F0:01:CF:4D:92:3A:8E:E6
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/dDG5tbv2JV90zGXp8AHPTZI6juY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:85:ad:b8:85:d9:ad:40:49:26:25:bd:51:78:46:48:c0:94:
cf:76:48:ad:b6:67:7f:6b:c2:f8:69:51:29:da:ef:1f:ed:19:
7c:03:d3:5d:09:b9:1d:ed:2e:e7:ac:b2:5e:5f:9c:7d:78:d3:
c4:14:c9:d6:9e:2c:40:06:a0:54:0f:5c:48:c9:cf:7f:28:ad:
a1:22:40:af:d9:cb:c9:a0:16:c1:cd:45:4c:a9:69:f2:71:78:
8c:e3:c5:00:b5:d0:73:f3:60:65:52:fb:75:17:9c:59:cf:b5:
53:ac:1c:30:38:c3:54:74:19:23:4c:12:80:8c:f3:17:97:41:
63:72:b9:df:00:e6:0f:da:8f:95:d9:77:b6:f4:2f:38:d6:a9:
f1:c8:f5:a1:8b:45:55:af:81:0c:0d:bc:76:77:5b:e9:fb:44:
5f:e4:e0:7f:3b:a2:75:a6:d0:3a:b8:e0:36:a0:29:26:43:4c:
7d:71:00:56:77:5c:ec:d6:5b:cd:e4:56:40:c8:44:9a:f2:29:
64:41:2d:ad:c8:98:9e:1a:75:88:a2:4e:6a:ec:25:ad:cb:de:
e2:d6:9f:9f:91:9a:b4:ff:e8:0e:36:94:81:27:46:0d:d8:db:
b1:09:1e:2b:5f:a9:aa:61:f7:4e:da:6c:af:62:d9:42:8b:2c:
88:c3:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:18:27 2025 by rpki-client