Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/bJqIYxJ8a4FFA6075zyb8j1x3_c.roa
File: bJqIYxJ8a4FFA6075zyb8j1x3_c.roa (raw, json)
Hash identifier: aJ+N7zlVXWgd1Q7ZfIYdj6+oXrZPvv+/daItT5A/G3A=
Subject key identifier: 6C:9A:88:63:12:7C:6B:81:45:03:AD:3B:E7:3C:9B:F2:3D:71:DF:F7
Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial: 01914C2CA42288F439B9879D450455AE64B5
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/bJqIYxJ8a4FFA6075zyb8j1x3_c.roa
Signing time: Tue 13 Aug 2024 14:37:59 +0000
ROA not before: Tue 13 Aug 2024 14:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43112
IP address blocks: 193.3.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:2c:a4:22:88:f4:39:b9:87:9d:45:04:55:ae:64:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
Validity
Not Before: Aug 13 14:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9a8863127c6b814503ad3be73c9bf23d71dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:cb:5c:ef:de:06:f4:2f:8f:99:7a:1e:dd:
61:14:b1:ff:92:17:05:eb:16:a8:7e:fe:b6:8c:18:
ee:49:45:f6:ac:d6:83:48:fb:fd:9f:79:a0:b0:24:
c7:47:56:38:f4:7b:f7:8a:20:ce:b3:7e:2e:be:d7:
9a:2b:35:1d:f7:e4:d5:a7:17:aa:36:77:44:e6:83:
a7:77:8a:41:22:e7:bc:38:54:04:f4:f2:05:1c:e3:
e3:7b:fa:e2:d5:af:71:13:ce:e5:28:6c:d8:57:4f:
0e:30:7c:31:11:1f:4c:91:42:83:71:b9:d0:25:e0:
37:e6:3a:4c:46:da:dd:1f:d3:66:bb:9b:71:36:6b:
85:51:df:f6:a8:0a:65:80:45:ba:79:51:d8:5c:83:
64:11:1a:27:e6:94:52:ea:d3:07:d9:d0:7b:48:8b:
76:df:da:31:cc:e4:bd:b1:40:39:ff:86:42:3f:04:
cf:9c:0a:06:6f:07:05:5b:2c:6d:22:bb:39:f4:d2:
3a:2a:b0:cc:d5:05:7a:7a:fe:67:35:5e:21:31:2a:
6e:50:32:c9:9a:7b:8d:f0:f8:bb:c3:06:9a:c0:89:
e8:e4:bc:83:a0:27:02:ad:5e:12:91:6e:ee:50:5d:
63:cd:69:04:72:2b:06:95:52:af:26:a0:8d:d8:c1:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:88:63:12:7C:6B:81:45:03:AD:3B:E7:3C:9B:F2:3D:71:DF:F7
X509v3 Authority Key Identifier:
keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/bJqIYxJ8a4FFA6075zyb8j1x3_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b0:77:3b:04:d7:fd:ec:94:b1:5c:ba:96:c2:68:d8:9c:35:
68:f9:e7:54:e8:89:e0:15:ec:93:c8:c1:45:c2:aa:d4:bc:f8:
a6:d1:78:25:a3:23:5d:5c:ad:41:e5:c1:bb:23:8d:ab:23:00:
b8:b4:0f:b5:56:c8:c1:d0:dd:ee:57:4d:a3:49:77:06:3c:1e:
81:50:08:5a:f4:46:66:12:d3:3d:7f:49:61:7e:23:61:5a:24:
93:33:28:a7:10:85:c9:6d:1d:5c:79:cd:64:a5:8a:52:25:4b:
ec:0a:ff:fd:bc:d8:7e:ac:85:3f:e2:52:fe:22:14:d1:63:5d:
d4:65:1d:ed:74:10:a9:48:fb:2a:f3:78:b4:d7:70:c4:f0:92:
6a:99:78:2b:bf:1f:1d:c9:1c:dd:70:5b:e1:08:af:16:19:2a:
91:6a:ed:48:7f:fa:bb:ef:a1:b1:7d:80:a1:95:a9:4b:5d:ce:
4c:dd:57:e9:66:e3:4e:02:ae:c1:c4:77:f4:ae:45:e1:a8:bf:
29:c8:78:b9:3d:a9:1b:30:cb:b8:cc:88:29:a1:98:2d:30:17:
8a:58:db:6e:8d:47:d0:39:8d:cb:f1:2f:5e:b4:f0:66:fa:c4:
7d:e7:31:cb:c4:bb:7a:06:4e:14:ef:fd:fd:37:b5:23:0a:4a:
04:6e:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:29 2025 by rpki-client