Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nzGenFIo3JP8xBRULN9NdPidF_I.roa
File: nzGenFIo3JP8xBRULN9NdPidF_I.roa (raw, json)
Hash identifier: KzPrdOC4UFpO8LzPpsz+FbXORahcdgg5rRf6hGu+o9M=
Subject key identifier: 9F:31:9E:9C:52:28:DC:93:FC:C4:14:54:2C:DF:4D:74:F8:9D:17:F2
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019017AC1F935B1C115173D28A3DC5E7B4DE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nzGenFIo3JP8xBRULN9NdPidF_I.roa
Signing time: Fri 14 Jun 2024 16:54:34 +0000
ROA not before: Fri 14 Jun 2024 16:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401039
IP address blocks: 193.38.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 15:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:ac:1f:93:5b:1c:11:51:73:d2:8a:3d:c5:e7:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 14 16:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f319e9c5228dc93fcc414542cdf4d74f89d17f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:16:97:d7:45:2d:8d:e5:2c:61:a1:9b:d2:
3f:a1:21:4c:6c:af:86:c4:dc:9b:f3:72:ed:d4:d4:
51:88:93:87:53:2f:5f:ca:5c:6b:f5:f4:70:b4:34:
53:af:30:26:1f:92:e6:4d:e0:a3:1d:76:df:fd:1f:
1f:be:38:cc:ac:1a:ad:1f:17:ef:f2:8b:70:e7:60:
4c:1d:1d:89:5e:19:d2:8b:d6:c1:ce:3d:73:2b:58:
43:e0:01:7d:71:05:73:27:7b:65:70:b6:02:61:82:
41:88:fe:94:3c:39:78:8d:70:91:fb:10:20:6c:5d:
0d:e8:66:37:dc:29:66:07:08:f8:10:cf:86:85:eb:
ce:ec:22:d5:cd:33:a7:ea:fa:fe:a6:4c:0e:27:6f:
6b:e5:6a:6a:24:18:3c:ed:cc:1b:14:60:a4:5b:58:
54:11:81:d1:ca:43:4f:de:c6:cd:fb:42:bb:9f:a6:
de:ba:f4:f4:fb:7c:6d:6c:ea:e8:80:49:97:f3:33:
fb:b3:42:4d:81:32:db:2d:bd:1a:7e:a9:7d:ac:32:
7b:21:4a:89:db:b5:82:96:a3:a6:c1:65:19:10:02:
5b:13:de:0e:6f:43:ad:c4:62:32:c3:a9:0f:33:36:
2d:33:80:85:6d:27:62:6e:1d:2a:54:9b:ea:1f:28:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:9E:9C:52:28:DC:93:FC:C4:14:54:2C:DF:4D:74:F8:9D:17:F2
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nzGenFIo3JP8xBRULN9NdPidF_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
85:30:1d:1b:57:ce:cd:e6:81:97:df:46:5f:f6:c6:be:1e:48:
f1:1e:26:49:f0:49:68:68:da:6e:2b:22:82:c2:4d:d8:c8:da:
03:5b:2f:a9:f2:22:24:3c:34:aa:a2:31:f8:95:ec:7b:99:14:
22:9d:29:6f:85:64:d5:2a:e1:42:5a:a5:08:a9:10:11:2e:ab:
90:31:cd:5c:9f:60:b1:86:bc:b0:5d:74:d2:42:dc:32:8b:93:
94:cd:00:f6:c9:da:47:39:e8:1d:3b:00:0f:4d:ef:2d:18:9d:
1d:63:4e:1d:c6:96:fb:cf:4f:7a:a5:ee:aa:8c:0a:c5:d1:e7:
23:3d:10:76:5a:b4:1d:29:c6:ae:cf:d8:fd:23:8f:c7:cb:74:
e6:8b:21:0a:45:bc:13:6f:6c:1c:35:a8:66:fa:ff:c9:f0:a8:
2b:2b:94:e4:96:11:43:95:b2:f7:8c:41:ee:18:20:cd:55:5a:
26:a6:35:bb:e5:ac:98:d4:d5:28:82:39:6c:e8:71:33:44:e7:
d6:69:47:96:62:6b:ad:59:8e:b1:cd:b5:21:a8:8f:2d:b3:09:
9d:96:50:5b:f4:a8:13:7a:1b:3d:1e:fc:03:9c:da:73:b3:81:
69:7a:29:f2:b9:08:37:2d:4e:d6:64:09:7d:c7:a8:27:9f:a4:
42:b2:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:03 2025 by rpki-client