Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3wvXS9LZlXOY4xpYES-PRWXQW0U.roa
File: 3wvXS9LZlXOY4xpYES-PRWXQW0U.roa (raw, json)
Hash identifier: v7Cy946+SrkBmLxsc9h3FjICHUCNQhG+jlKxO64+JP8=
Subject key identifier: DF:0B:D7:4B:D2:D9:95:73:98:E3:1A:58:11:2F:8F:45:65:D0:5B:45
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01937DF0C1744D54E5CF1267E5744DE0F8A9
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3wvXS9LZlXOY4xpYES-PRWXQW0U.roa
Signing time: Sat 30 Nov 2024 16:39:10 +0000
ROA not before: Sat 30 Nov 2024 16:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 93.127.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:f0:c1:74:4d:54:e5:cf:12:67:e5:74:4d:e0:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Nov 30 16:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df0bd74bd2d9957398e31a58112f8f4565d05b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:b0:00:bd:01:e1:e2:0e:22:29:40:3c:a2:
5d:c2:91:16:61:06:34:b4:de:56:12:f2:40:ea:02:
91:23:a1:72:c3:32:70:6b:41:c8:56:03:e1:fb:8e:
eb:22:c0:81:32:e6:65:83:a7:36:ab:4b:f1:5f:bf:
1d:82:33:ea:44:25:91:4c:76:a9:e8:a3:cb:e6:40:
7d:2f:57:1a:13:b7:be:1d:a0:94:c7:94:4b:75:de:
af:47:8f:3a:02:61:0f:73:2d:a7:5b:a7:57:9f:b9:
dd:0a:75:90:c8:b5:c8:65:30:5c:88:10:0e:2e:5e:
95:58:f7:4a:0c:84:0d:0c:8c:f8:1b:9f:5a:a6:fe:
16:0b:ed:73:c9:40:0d:2b:7e:90:b6:ff:1c:a4:a6:
62:6e:91:12:89:e3:04:d4:5a:98:12:44:3b:99:08:
18:c8:19:77:b7:bf:d3:80:19:12:ea:39:5f:6a:db:
22:c6:13:89:33:e6:a7:72:21:be:67:3a:c2:bd:49:
1e:a8:45:06:81:21:e8:2e:f7:36:dd:3d:b9:c9:39:
f3:b4:f5:66:2d:10:40:00:bb:22:0e:52:12:9a:ab:
3b:0f:f6:f1:fd:1c:be:a3:e6:5a:d6:c9:55:61:cf:
47:28:9b:17:e6:b8:28:af:b5:a7:dc:98:2a:eb:84:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:D7:4B:D2:D9:95:73:98:E3:1A:58:11:2F:8F:45:65:D0:5B:45
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3wvXS9LZlXOY4xpYES-PRWXQW0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.144.0/22
Signature Algorithm: sha256WithRSAEncryption
98:18:02:09:58:24:71:07:96:b6:24:3b:73:54:63:4b:2c:f2:
74:3f:8a:65:de:24:37:80:a6:30:a0:16:99:76:f3:34:88:95:
a5:59:54:31:99:6b:41:d1:1c:ac:32:42:7f:a1:ee:67:c1:29:
4d:05:98:80:c6:67:42:ab:32:65:5b:dc:63:47:c2:5b:fe:ec:
2b:fb:b7:11:66:5c:59:d5:6a:98:67:c5:c4:ea:81:da:d4:ca:
97:69:1a:5b:40:48:61:6d:9b:39:93:58:32:45:06:98:03:5e:
2c:a7:bc:d0:e2:50:7c:3b:d4:c6:75:d9:c6:1c:6d:0c:8c:f9:
1e:a4:e0:64:ce:a5:b9:14:a1:da:ac:db:54:da:05:32:14:67:
2a:5d:12:a1:f3:3c:4a:75:86:db:ab:aa:1b:0b:87:25:5e:e8:
2e:87:da:db:ed:9b:0c:d3:f1:ba:33:1e:fe:2e:b5:56:99:e3:
ae:58:81:22:ce:49:e8:7a:f0:05:39:00:91:57:25:23:fb:2e:
89:7d:42:4f:c9:60:7f:2c:d1:90:3b:c6:1a:23:18:d8:c6:13:
3b:c9:24:be:6f:1d:0f:b5:55:b7:b1:31:c4:0a:bb:8e:a1:59:
3e:14:b4:83:4d:e9:08:42:9c:6a:50:88:7a:b9:9f:b7:c1:24:
16:57:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:09:51 2025 by rpki-client