Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/eighutQF57gl_oHvgyGcBuhwOcY.roa
File: eighutQF57gl_oHvgyGcBuhwOcY.roa (raw, json)
Hash identifier: M/EtpyLKEBlv1ftVFUelzx/zoZNX7Ysh7PkvU8iFiC4=
Subject key identifier: 7A:28:21:BA:D4:05:E7:B8:25:FE:81:EF:83:21:9C:06:E8:70:39:C6
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 018CC500B684E027DC79A302E21B6709196A
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/eighutQF57gl_oHvgyGcBuhwOcY.roa
Signing time: Mon 01 Jan 2024 12:30:07 +0000
ROA not before: Mon 01 Jan 2024 12:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13165
IP address blocks: 213.128.192.0/20 maxlen: 20
193.43.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b6:84:e0:27:dc:79:a3:02:e2:1b:67:09:19:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 12:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2821bad405e7b825fe81ef83219c06e87039c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:82:66:8c:e7:63:74:94:55:cc:4f:f3:9c:
3a:9f:fc:16:80:cf:2b:64:64:8b:e6:af:48:86:36:
58:ed:87:12:7e:b6:35:e0:13:a5:50:88:74:4a:6c:
42:ff:df:42:d2:46:f3:f2:30:71:08:9f:31:da:c6:
cb:57:1f:37:ca:f2:8c:62:ef:48:03:19:c2:f5:41:
fa:c5:e1:8c:f8:93:a4:eb:12:f7:7a:b9:74:ad:64:
88:fa:e6:af:04:db:af:9e:50:df:4e:7e:e8:f1:93:
25:43:a0:1a:17:92:63:7e:7a:21:8e:72:e1:a0:93:
0e:67:cc:ad:aa:b1:9b:d1:3f:1b:d4:fc:9d:9a:61:
6e:07:33:04:07:94:de:8b:dc:1a:b7:f8:10:a5:68:
47:ae:9b:6c:2c:49:a5:ad:26:49:58:7d:86:95:24:
5c:e6:bb:0e:64:07:6f:5d:6a:58:8d:88:d0:b6:ac:
f7:4e:23:c0:91:98:f3:63:45:00:68:3a:50:87:dc:
25:10:5d:ea:25:b8:59:f9:eb:bf:f3:82:fe:53:1d:
19:da:7f:9a:7b:a9:5d:83:aa:08:3d:95:ff:3b:0d:
b7:42:b6:c3:08:fb:6a:81:34:6d:3e:88:3e:01:b9:
dc:df:1a:b7:2e:7c:95:44:da:84:e1:13:ec:96:bd:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:21:BA:D4:05:E7:B8:25:FE:81:EF:83:21:9C:06:E8:70:39:C6
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/eighutQF57gl_oHvgyGcBuhwOcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.182.0/24
213.128.192.0/20
Signature Algorithm: sha256WithRSAEncryption
52:75:93:cd:92:c4:18:11:f8:81:bf:36:c5:5b:84:dd:a5:ab:
05:c0:80:3e:d3:cf:28:dc:5e:a8:be:60:21:99:38:2d:7a:4d:
b2:db:41:99:0a:32:4c:20:6f:1a:ea:a6:08:8d:4f:43:7f:fb:
d8:68:91:28:60:ed:89:70:c8:e2:3c:e1:5b:52:4a:c6:8d:14:
fc:4b:60:20:c1:fc:a4:86:b6:f9:16:91:cd:3b:db:60:45:ff:
b3:95:12:a4:e8:75:da:d3:36:27:19:7c:0e:12:a4:62:63:11:
28:48:0a:c6:c9:b5:9e:79:66:8b:df:2a:5b:f0:ab:de:7a:2f:
83:6d:7e:85:11:e8:36:6d:26:63:3c:1d:a7:0c:46:fa:ae:4a:
d9:5e:c2:b6:f6:1d:f6:89:75:b3:8a:c0:3e:90:37:25:51:b0:
bc:23:c2:72:bb:22:d5:5b:c6:0a:36:4a:80:91:d4:07:e8:e9:
96:c7:16:50:15:b4:02:08:1e:fb:d2:b5:26:41:5d:71:b0:1e:
04:50:d4:d3:bc:f1:66:fb:f8:a5:f2:b9:7a:e2:bc:61:1e:fc:
78:1a:69:4f:9e:dc:09:f1:17:ea:8a:77:90:cb:69:8c:be:be:
2e:76:cc:1e:82:83:66:2b:2b:89:f0:af:75:70:6a:0d:67:1d:
59:d1:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:56 2025 by rpki-client