Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/tRIw1ugwPWFTDbzfYrLfNcUiGq4.roa
File: tRIw1ugwPWFTDbzfYrLfNcUiGq4.roa (raw, json)
Hash identifier: L5dhgKkUUJ6tD8+iIbh13IV9ycWGCYinaPGA3Z2Kk34=
Subject key identifier: B5:12:30:D6:E8:30:3D:61:53:0D:BC:DF:62:B2:DF:35:C5:22:1A:AE
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 018CC801AF3495FF26A428FF345B29FB8CDB
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/tRIw1ugwPWFTDbzfYrLfNcUiGq4.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199773
IP address blocks: 193.142.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:af:34:95:ff:26:a4:28:ff:34:5b:29:fb:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b51230d6e8303d61530dbcdf62b2df35c5221aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:25:9e:9d:25:73:5e:3f:09:1a:f9:05:5c:
ea:e0:32:59:99:65:af:97:4c:96:92:71:e1:59:82:
17:ff:40:c0:d3:8d:3d:1e:47:00:a8:f1:2c:b9:75:
dd:59:e3:2b:e4:da:07:9a:ac:ea:b4:d3:6b:39:ac:
a2:f3:27:b1:60:31:52:97:59:de:56:bb:c5:8e:81:
30:cc:4b:b1:2a:7c:5d:58:93:b1:9b:08:75:a9:a7:
d6:19:dd:08:a6:41:db:2d:d1:8a:8f:ee:68:fa:d1:
af:03:8c:f8:e4:82:ed:65:64:34:b8:bf:9f:9f:76:
7a:9a:19:6d:2b:b3:28:2d:aa:5e:3a:a1:3f:05:92:
13:d5:85:86:43:6f:c6:04:48:26:2d:b9:a9:e0:ed:
0c:53:79:9f:96:cb:93:38:d0:a5:a5:3e:1a:86:2d:
13:9f:2f:d6:0d:5e:97:97:49:e1:c7:bd:e5:27:c6:
4a:18:f2:66:8e:59:12:92:d7:cb:26:14:ae:c2:69:
fe:44:bd:4b:1a:e4:9a:b1:32:6e:f0:ae:5e:00:f0:
af:c5:88:39:cd:e1:1d:f7:88:39:cc:08:d6:76:41:
cc:4d:26:ea:bd:12:82:78:71:11:5d:33:6d:0e:14:
b5:52:cc:1b:06:10:f8:03:17:6e:1a:75:f6:0d:0d:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:30:D6:E8:30:3D:61:53:0D:BC:DF:62:B2:DF:35:C5:22:1A:AE
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/tRIw1ugwPWFTDbzfYrLfNcUiGq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.211.0/24
Signature Algorithm: sha256WithRSAEncryption
26:14:a2:cd:f4:35:14:6a:68:de:78:2a:71:49:51:de:fd:1c:
be:57:7e:04:5e:c7:ad:0f:68:71:7c:f4:33:a9:cb:27:89:c2:
e6:41:ab:72:c1:17:62:e1:4e:44:89:c0:fd:be:e2:84:49:32:
c6:f8:28:c9:34:a3:83:a3:8c:ef:0b:8c:1f:0e:04:2a:48:50:
28:11:dd:8e:dc:26:cd:0d:3e:e1:96:d7:c0:44:a5:a6:cc:1d:
36:61:d0:03:0e:41:72:ba:18:93:4c:e9:af:35:e8:de:44:49:
7d:cb:50:53:3a:04:8b:e5:86:7a:bd:c8:66:20:5b:78:6f:e7:
16:c1:68:97:26:8c:d3:cf:85:e8:85:f2:a2:5a:ca:a7:9e:6c:
44:42:ef:ca:13:79:98:10:c9:71:67:39:a2:39:e9:b1:22:01:
40:4c:cb:36:e7:74:be:5a:98:ea:2c:19:03:8e:50:85:1e:27:
bf:ca:53:de:c3:67:9b:38:e7:31:61:9b:08:70:dd:db:78:5c:
3d:b0:5c:20:d1:79:9f:a2:eb:9d:9b:cc:8e:14:11:45:55:17:
af:bd:00:f1:a0:f5:a7:50:3b:3a:be:2b:85:1f:46:0f:c0:80:
4f:f5:c1:67:82:3e:69:91:e6:0f:b8:b1:fe:df:56:a4:07:5c:
6a:7c:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:12 2025 by rpki-client