Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/imbvIt5iHHVyt-5WwnpvMUe4VoI.roa
File: imbvIt5iHHVyt-5WwnpvMUe4VoI.roa (raw, json)
Hash identifier: y0zqCRkU+MRb5KhATwkox+Ht5wc9LoinJhErkmAWuJw=
Subject key identifier: 8A:66:EF:22:DE:62:1C:75:72:B7:EE:56:C2:7A:6F:31:47:B8:56:82
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0193898D7791D880F4E01E0B71E8151DA4F7
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/imbvIt5iHHVyt-5WwnpvMUe4VoI.roa
Signing time: Mon 02 Dec 2024 22:46:09 +0000
ROA not before: Mon 02 Dec 2024 22:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:8d:77:91:d8:80:f4:e0:1e:0b:71:e8:15:1d:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Dec 2 22:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a66ef22de621c7572b7ee56c27a6f3147b85682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:8c:1f:1d:02:42:07:6c:1e:e9:43:fa:0a:
5f:74:dd:24:4b:1b:a2:4b:71:2c:09:34:2a:29:90:
1b:60:c1:b4:26:f3:13:6d:2d:6c:80:be:e3:33:66:
b4:cd:7a:b0:37:ca:ce:03:78:c0:e5:ec:39:22:f0:
5a:9d:2e:1a:81:17:6c:72:6b:e6:19:2f:d1:ae:07:
35:c4:fe:5e:81:c9:43:46:27:8d:99:80:96:94:99:
a4:6e:10:86:66:a4:29:22:82:ee:af:4c:c4:3c:b1:
58:d0:26:c3:2e:87:c6:40:e8:81:7b:cb:3b:19:b5:
c0:2b:ce:ac:c0:77:9c:73:ac:79:52:59:9f:b9:ac:
d0:1b:59:de:55:dc:52:bc:a6:3e:da:b7:f6:01:6c:
3a:84:ec:72:7e:2b:57:cc:58:2f:2f:ce:df:93:d1:
fc:e5:4f:b3:ef:36:3d:15:66:9f:43:37:06:a1:f5:
a2:1b:a8:3c:bd:dc:bf:fd:13:85:28:60:91:8e:25:
e7:af:72:e9:a9:f5:5b:51:e5:71:40:f0:5c:5b:1c:
ba:9f:24:5f:ea:52:4b:83:3c:2c:5d:f9:ea:79:ff:
bf:9a:66:28:ae:04:0a:80:4a:c1:ce:60:22:ad:cb:
17:82:e2:13:68:14:70:bc:e6:bb:17:92:4a:96:b7:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:66:EF:22:DE:62:1C:75:72:B7:EE:56:C2:7A:6F:31:47:B8:56:82
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/imbvIt5iHHVyt-5WwnpvMUe4VoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cf:ca:c7:2e:24:d7:7e:32:72:d3:7d:67:94:5b:b3:d6:bb:
6f:5b:f5:55:f6:68:7f:c0:6d:2d:e4:be:12:85:1d:c7:e7:81:
42:5e:5e:25:03:42:87:9f:51:c9:54:fb:9e:92:63:6d:bf:35:
32:1f:05:27:92:d5:85:cb:ec:e7:09:b6:32:a1:bc:b1:21:02:
5b:b2:d4:b3:18:32:68:99:d9:ec:92:df:4a:92:c2:1b:52:d6:
c6:58:29:1e:ac:2c:f3:aa:e5:52:2c:c4:b0:50:2a:f2:3e:8c:
19:0c:ca:03:80:ad:29:d8:11:8a:55:d4:74:23:39:74:31:cc:
2b:aa:16:87:47:93:ec:ae:3d:ca:6b:6c:8e:7d:de:26:4f:25:
6d:ec:cf:74:b0:93:b2:53:59:d9:1d:94:4d:6b:75:42:ad:5d:
07:92:cc:e1:4d:15:4f:45:08:01:a5:4c:ab:a0:68:de:f4:6d:
d6:58:05:36:59:fb:31:76:29:57:35:e9:b7:99:1b:f6:52:8f:
dc:c4:de:11:da:ce:e8:53:b4:67:7b:92:6c:1a:da:0e:fa:18:
68:f8:5d:47:55:23:4d:be:6e:05:3f:36:db:a3:6f:33:cd:90:
48:f1:2c:ea:24:9d:82:13:56:c8:19:94:cc:2b:57:00:03:23:
5f:9a:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:17 2025 by rpki-client