Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/mQat0oYos0rz6WzLVENPxPll3eQ.roa
File: mQat0oYos0rz6WzLVENPxPll3eQ.roa (raw, json)
Hash identifier: N6TnYVEvI/viTJqec3klmEMQPG1n7Qe/LZMhMgsP5O4=
Subject key identifier: 99:06:AD:D2:86:28:B3:4A:F3:E9:6C:CB:54:43:4F:C4:F9:65:DD:E4
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 018CC5DC341ACD415C39232E650E551AECA6
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/mQat0oYos0rz6WzLVENPxPll3eQ.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213111
IP address blocks: 93.177.82.0/24 maxlen: 24
2a0a:e540::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:34:1a:cd:41:5c:39:23:2e:65:0e:55:1a:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9906add28628b34af3e96ccb54434fc4f965dde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:d2:da:dc:13:3f:dd:f6:7e:d1:c1:d7:70:
2a:fd:43:34:39:31:a4:ac:de:c0:48:42:70:19:fb:
5a:df:c8:af:ba:0c:18:3a:6c:59:04:20:25:fe:52:
3a:1f:50:48:ea:67:88:6f:af:78:82:ca:a5:7e:b2:
5d:3d:da:dd:b8:7c:a0:26:97:c8:3c:b5:4a:2a:8f:
e3:a4:54:15:0a:a5:f3:6b:37:04:ad:a2:e2:ec:a1:
c2:13:29:ab:29:ed:cc:97:73:5c:bd:4c:5c:22:6e:
c0:b0:e0:22:25:39:15:38:8b:b7:f2:83:12:aa:2a:
17:6a:92:8e:81:32:b7:d7:6e:0a:dd:be:57:1c:af:
09:25:ec:9b:24:0b:96:b5:60:55:26:e4:14:29:f5:
75:25:c8:85:53:2e:34:1e:d4:f0:5c:e5:2f:d8:54:
87:9c:8d:8d:c9:41:5c:4a:99:77:13:49:d4:3c:d6:
af:d3:07:c4:1d:13:66:f8:10:b8:6b:0e:f1:83:2c:
af:24:2c:20:6b:48:a6:de:30:6d:a2:79:db:80:87:
c3:82:69:cd:14:37:bd:11:8a:19:3f:d8:e7:9f:2f:
7b:e8:fb:f3:33:7f:bd:d9:ad:75:42:7d:0d:c1:5a:
7a:72:55:c7:88:13:bf:f7:71:e4:e2:04:71:59:78:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:AD:D2:86:28:B3:4A:F3:E9:6C:CB:54:43:4F:C4:F9:65:DD:E4
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/mQat0oYos0rz6WzLVENPxPll3eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.82.0/24
IPv6:
2a0a:e540::/32
Signature Algorithm: sha256WithRSAEncryption
34:e3:71:8a:fd:f8:2a:62:89:5f:67:69:b9:e1:e8:8e:2a:38:
39:d7:ff:21:c1:12:b0:58:f9:fd:6a:13:fd:33:2e:1c:4f:3d:
31:fa:b7:ad:bd:e6:e5:8c:a9:2e:3e:9a:b4:77:e5:99:cb:9f:
4f:0b:3e:bc:ee:df:4d:b4:36:01:a3:08:71:15:dc:6a:9c:55:
92:a0:ed:94:de:da:fb:c1:df:63:e0:a1:c6:e5:6d:da:ef:fd:
b9:70:c3:3d:76:7a:ce:1c:f4:de:51:af:d2:49:bc:0d:a2:3a:
68:9f:70:ae:26:51:b5:ee:60:2e:9b:ae:7c:f5:40:05:bc:dc:
72:1a:c7:a6:6c:a2:96:66:8d:bd:c0:45:7d:d4:05:2a:30:be:
6a:08:7c:20:55:af:29:a1:50:8f:8c:58:80:9c:7c:45:e0:a2:
f7:0b:75:8b:3c:99:bb:81:f6:17:1f:76:d0:65:ee:89:56:ab:
e3:a5:d2:25:a2:ae:3c:35:4f:6f:1c:59:61:83:12:95:c9:29:
94:ef:5e:bf:a3:09:d6:23:f8:04:55:bc:61:49:4f:40:87:d2:
06:da:18:ba:50:cb:8a:67:45:9b:4f:77:42:f6:34:2f:8e:34:
68:02:f0:93:88:29:a6:4c:0f:78:5c:ce:59:ab:6c:c7:1a:ce:
c8:14:1f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:35 2025 by rpki-client