Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/KuiZRAiU19UhzXW3EN2VrwM8CfE.roa
File: KuiZRAiU19UhzXW3EN2VrwM8CfE.roa (raw, json)
Hash identifier: ZiiapkdM4F8rBpUTeaPSuG0DZ8mMgW80wpuvdZYzHAQ=
Subject key identifier: 2A:E8:99:44:08:94:D7:D5:21:CD:75:B7:10:DD:95:AF:03:3C:09:F1
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01942521C4560B53ED1AD206D33E0ABA3939
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/KuiZRAiU19UhzXW3EN2VrwM8CfE.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25446
IP address blocks: 93.183.104.0/24 maxlen: 24
93.183.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 14:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c4:56:0b:53:ed:1a:d2:06:d3:3e:0a:ba:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ae899440894d7d521cd75b710dd95af033c09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:46:63:8f:6a:98:87:08:05:82:32:e7:c4:
74:86:95:7f:af:ab:8e:e8:0f:f2:a6:28:8d:7b:cd:
d0:71:f9:87:0e:7d:16:35:38:2b:fa:de:43:32:a1:
9c:99:86:5d:e1:37:b4:3d:bc:62:cc:6f:54:30:a6:
df:ac:f4:a8:a1:53:9f:13:06:c5:b0:82:e2:c7:e1:
79:a2:dd:2f:5e:28:bd:27:4c:0a:3a:43:cd:b7:d3:
be:d9:81:58:a4:20:9f:ed:fc:76:50:0f:ca:ad:8a:
0e:50:24:5a:da:7a:76:d4:51:a9:21:db:5c:55:8d:
cc:19:c1:b3:35:c9:18:71:29:53:4a:58:a3:0b:aa:
0b:3f:49:b3:ef:ab:a5:4c:0c:aa:e3:43:0f:60:e5:
92:3a:12:63:66:2e:fb:d5:dc:c8:3b:da:36:eb:01:
5d:5d:e5:38:59:46:9f:ea:0e:17:3c:e6:0b:bf:6f:
ab:b7:cf:04:17:c4:a4:ae:85:7f:87:b5:21:92:32:
31:fc:ec:af:6e:eb:7e:2e:26:9b:89:8e:13:fa:81:
01:9f:27:6e:53:96:a3:b0:56:24:da:61:ed:a8:f9:
c6:7d:c3:ad:bb:d2:be:e5:c3:1f:8d:a5:4f:00:f5:
e6:6b:d8:5d:9c:93:ad:36:0d:2e:1c:78:6b:ea:ac:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E8:99:44:08:94:D7:D5:21:CD:75:B7:10:DD:95:AF:03:3C:09:F1
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/KuiZRAiU19UhzXW3EN2VrwM8CfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.104.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7d:b3:4e:15:6d:43:c9:b6:8b:96:70:52:76:4d:93:3a:19:
3c:2d:49:ab:72:97:df:60:4f:b1:66:73:d7:87:d0:fa:c6:94:
3d:8a:5f:b4:59:ae:ac:3b:29:22:c1:ca:a0:f0:f9:2b:c9:cb:
01:81:92:4d:d7:ce:40:1b:ea:c1:4f:ec:c8:3f:da:40:d2:f6:
ec:a8:12:6b:c0:0a:c6:82:2f:2a:55:a7:94:58:dd:9b:8a:70:
f5:8d:25:7b:9a:3b:f9:67:f9:eb:04:57:ea:90:21:a3:c9:ed:
6f:42:3c:56:9b:6c:74:f2:4a:81:0d:fc:72:50:ca:4a:51:9f:
df:61:9c:e1:20:b7:d9:72:66:78:e8:32:1b:b6:68:9b:5a:2c:
5b:39:a5:a7:36:29:3b:af:59:8e:26:8e:37:1a:33:82:e8:c3:
3b:3d:95:6f:f0:78:95:69:b1:4d:78:ff:bc:52:75:9d:12:d9:
6d:99:29:43:b7:0b:a2:d7:14:c2:0f:fe:41:ac:09:5e:d8:a3:
78:cc:4c:50:66:f3:99:7b:ba:35:d5:2f:4c:fd:0f:e7:f7:ce:
c4:97:7d:4c:34:8d:3b:db:1b:ee:07:12:14:47:4e:bb:d1:e3:
ba:92:12:3a:2c:75:80:f3:7a:28:91:a9:5f:7a:53:ec:e6:32:
a2:4c:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:33:46 2025 by rpki-client