Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/BXHvIKhrUoOdbcJ-U2IJx7Ik2j8.roa
File: BXHvIKhrUoOdbcJ-U2IJx7Ik2j8.roa (raw, json)
Hash identifier: /gZWkEnYMCdwhe6k5cAsKR/rqRpDtSgo/JyQLpSWROs=
Subject key identifier: 05:71:EF:20:A8:6B:52:83:9D:6D:C2:7E:53:62:09:C7:B2:24:DA:3F
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 018CC4246B7429519EC66B002144B8937904
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/BXHvIKhrUoOdbcJ-U2IJx7Ik2j8.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42417
IP address blocks: 193.239.218.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6b:74:29:51:9e:c6:6b:00:21:44:b8:93:79:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0571ef20a86b52839d6dc27e536209c7b224da3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:f6:66:d2:3e:ed:1f:8b:08:1d:e8:2f:e9:
83:c2:81:0e:51:29:50:59:3b:fe:dc:c5:21:2f:ab:
f6:26:d5:ee:d8:a7:a1:c9:6b:7c:c3:7a:4f:ca:d8:
b2:33:53:46:8d:50:f9:27:b7:f0:16:b9:97:72:31:
5a:6a:8d:55:bf:bf:02:99:77:aa:69:46:de:2d:75:
2a:f1:d1:b0:c9:a7:69:4d:ec:53:43:bb:82:06:3c:
ce:a1:36:d5:a0:69:7f:07:e4:b2:91:1b:65:f8:62:
79:5a:1e:ff:4f:10:79:54:7e:3b:22:74:d4:db:e1:
e3:4d:e8:88:f1:47:cb:79:3c:73:38:b8:52:1b:f5:
2d:67:1e:f4:46:6f:51:44:b1:4c:e3:fa:d9:da:48:
c7:19:b2:7a:21:03:f9:b9:7b:5c:14:5c:9d:d2:05:
6b:ed:e3:2c:a3:6f:d5:1a:6e:2e:41:81:97:60:a6:
d4:f7:42:e9:56:6a:c1:f1:57:0f:a9:d8:59:b9:98:
b2:67:1a:3b:4a:7b:34:8f:61:cb:b6:74:2c:ff:35:
44:12:5d:9e:cb:c6:e0:75:21:24:b1:6f:3e:8c:dd:
27:4d:d0:58:1e:f8:61:bc:37:63:2a:33:73:e5:ab:
0c:02:86:64:ae:eb:6b:53:61:82:0a:c1:29:0a:2e:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:EF:20:A8:6B:52:83:9D:6D:C2:7E:53:62:09:C7:B2:24:DA:3F
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/BXHvIKhrUoOdbcJ-U2IJx7Ik2j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.218.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:09:02:72:f9:f0:71:75:44:e1:f6:c8:12:39:db:20:15:c7:
3c:d4:31:cd:bd:db:82:f8:3c:24:1e:12:19:10:e9:7b:b1:c4:
d7:18:37:00:a8:55:f4:0d:54:97:28:ee:17:39:ac:1b:b0:57:
bd:57:43:1f:ca:a3:c6:1c:b3:64:96:dc:80:b9:42:18:02:86:
d0:bd:df:07:5a:39:66:fe:5c:c1:50:80:db:b2:46:c7:b5:b8:
c7:1e:68:20:57:e0:10:84:ef:20:b0:07:a0:e3:fe:3f:b1:6e:
2d:4c:3a:31:8a:e9:53:72:2a:7d:a5:99:9e:79:41:07:ff:44:
b3:23:66:ff:f7:17:39:af:ff:0c:1a:bc:6f:5f:8a:18:12:46:
94:43:b4:7a:bf:f2:0c:c3:61:18:99:50:72:b4:62:d2:dc:25:
34:62:44:87:75:1b:ca:84:1c:b4:c7:a5:b2:ff:21:b4:5e:e3:
41:e7:6a:97:9b:98:cf:b3:9b:b6:c0:30:d3:cd:f1:5a:f3:de:
61:32:6c:65:ac:c0:26:49:5d:36:42:0f:9f:2d:86:c4:3a:73:
bb:c3:66:5b:1b:1f:52:1b:4f:73:de:e6:0e:ec:f7:e1:aa:e2:
86:cf:eb:62:0e:29:2a:99:26:4f:0c:41:94:79:f4:b7:d9:d5:
72:04:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:26 2025 by rpki-client