Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/1-NjDfK_nvVHtInlwB4n1ihBDusI.roa
File: 1-NjDfK_nvVHtInlwB4n1ihBDusI.roa (raw, json)
Hash identifier: 51SSwaurBjP3sf/0P7WAI9i83HTjmsNiDA8wld4VpT4=
Subject key identifier: F8:D8:C3:7C:AF:E7:BD:51:ED:22:79:70:07:89:F5:8A:10:43:BA:C2
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019479B890E2FA33F84C02F24AA8ACA4C907
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/1-NjDfK_nvVHtInlwB4n1ihBDusI.roa
Signing time: Sat 18 Jan 2025 14:02:06 +0000
ROA not before: Sat 18 Jan 2025 14:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25446
IP address blocks: 93.183.104.0/24 maxlen: 24
93.183.105.0/24 maxlen: 24
93.183.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 10:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:b8:90:e2:fa:33:f8:4c:02:f2:4a:a8:ac:a4:c9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 18 14:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d8c37cafe7bd51ed2279700789f58a1043bac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:b1:9e:7a:ee:e2:fc:7b:2b:44:2a:89:fc:
0a:a6:6c:04:d0:ed:b1:c4:ae:a8:7b:ff:21:e8:17:
8f:97:09:6f:46:3b:78:f6:bf:32:cb:fc:11:6f:44:
ca:ce:ba:25:57:34:ad:be:06:31:1d:a0:8d:e7:fc:
d0:cb:03:55:b1:c6:5d:36:53:fd:8b:f8:6a:0e:92:
f9:e4:53:c4:07:de:12:52:78:93:c3:28:4e:91:3f:
4c:08:aa:f2:87:02:b7:e9:e9:6d:9f:77:51:48:53:
77:b4:4f:ea:48:ef:0f:18:57:00:fd:47:b8:76:f7:
76:86:6b:c5:e8:19:14:c6:e5:e1:b2:ff:04:04:ce:
63:96:c0:bb:2b:bf:b1:ff:ec:fd:4b:e0:df:e5:7c:
8b:27:9a:5f:ae:ae:50:6c:81:fe:03:a3:52:f1:34:
34:45:4d:ee:f0:72:88:14:9a:d7:ae:33:61:84:38:
6d:89:9f:fa:cb:18:38:b8:10:31:3a:84:5d:8c:4c:
82:db:db:04:a2:10:44:99:3c:f4:3d:bc:2e:6d:52:
5d:d4:ff:37:f3:cc:3f:18:95:b0:55:6f:58:44:dc:
48:a3:4f:64:e0:c8:9d:2f:3d:ee:b5:da:a4:36:d4:
57:70:41:ee:42:2f:41:64:02:d0:67:40:33:3c:73:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:C3:7C:AF:E7:BD:51:ED:22:79:70:07:89:F5:8A:10:43:BA:C2
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/1-NjDfK_nvVHtInlwB4n1ihBDusI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.104.0-93.183.106.255
Signature Algorithm: sha256WithRSAEncryption
9d:f0:71:02:b7:e6:87:4c:42:91:f4:56:85:a9:6e:17:06:b0:
e9:f6:f0:62:19:3c:88:66:7f:59:6a:fe:45:3d:06:42:71:64:
82:f7:b4:1f:c8:2c:c0:0d:61:61:66:76:10:17:80:ea:3a:ed:
54:4d:24:4b:8c:f9:d1:e4:67:7a:ca:c4:43:c6:5e:48:c5:1c:
ef:5c:d9:87:35:65:68:0b:4b:6a:3b:06:e0:ba:84:48:64:93:
72:2c:01:ef:13:fd:d5:28:fe:82:c6:43:26:a9:bd:4b:db:c2:
17:20:30:43:58:75:87:1a:a1:0a:d3:a0:2c:09:4c:b2:39:94:
ad:c1:61:16:c9:4d:90:45:0a:0d:f5:97:0c:d4:b7:a6:90:3d:
1b:2a:4f:d0:65:36:f3:a5:b4:8d:05:c1:10:c9:2d:3d:4f:6f:
63:0c:04:01:ab:91:a0:55:1e:53:a3:9c:0b:e7:ab:e6:73:7e:
01:2b:9e:96:43:34:69:33:60:33:bf:2d:40:21:b4:c7:bd:33:
22:32:0e:ad:49:c4:dc:a3:bb:05:ed:58:3b:88:2a:24:29:ef:
a8:64:3b:97:84:7c:12:e8:5b:5f:53:33:eb:7f:be:7e:b1:69:
15:c3:b7:ad:76:b3:db:b3:65:72:4e:e1:bf:cb:b1:7b:54:a5:
32:1f:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:00 2025 by rpki-client