Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3yWPawb5o5Uf5gxy7Rb8kxk_Qgs.roa
File: 3yWPawb5o5Uf5gxy7Rb8kxk_Qgs.roa (raw, json)
Hash identifier: Tl9zVs/1wJe20U6z8ZZS82iZYTr0svU1lPmtiyfmtpI=
Subject key identifier: DF:25:8F:6B:06:F9:A3:95:1F:E6:0C:72:ED:16:FC:93:19:3F:42:0B
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0193C0ACADF8E3B2A34AA8750EC2CC4417E5
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3yWPawb5o5Uf5gxy7Rb8kxk_Qgs.roa
Signing time: Fri 13 Dec 2024 15:39:22 +0000
ROA not before: Fri 13 Dec 2024 15:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 93.127.156.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 19:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:ac:ad:f8:e3:b2:a3:4a:a8:75:0e:c2:cc:44:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 13 15:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df258f6b06f9a3951fe60c72ed16fc93193f420b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:82:19:9b:32:f7:52:3b:46:18:68:de:c8:
54:a5:9b:dc:ee:e9:b0:9f:4f:06:bc:85:fd:ed:87:
5a:82:19:0b:e5:9f:55:9e:d8:51:21:91:cd:e6:4f:
22:b0:e3:1d:83:6a:57:62:66:48:8b:88:c3:0c:db:
ff:19:6d:d9:8a:d2:d2:13:e4:c5:cf:52:2e:1a:b5:
fa:ca:57:1e:c5:10:ae:01:6c:31:20:41:4e:39:20:
9c:f9:ff:cc:70:9f:ba:d2:85:f6:ff:65:01:c3:55:
13:b3:8a:15:ff:fb:3b:12:47:99:01:10:9d:41:44:
41:92:83:2c:19:5f:86:1c:47:57:c2:d4:bb:95:a5:
a9:de:7f:15:f9:89:fb:f4:3e:ba:0e:92:f1:7f:62:
29:20:86:7c:d5:0f:0f:7e:a4:86:ef:39:0e:15:89:
ab:7a:9e:cc:ef:4c:c5:a2:23:f0:bf:4f:9e:ea:e3:
ef:1d:ad:71:92:49:ce:6b:02:cb:77:0d:8b:e4:19:
25:79:74:17:96:7c:fb:01:75:9a:c0:ce:0c:10:0e:
8d:4b:aa:d3:2c:97:7a:5d:4a:0f:b9:e3:ed:39:c7:
ec:2f:a6:94:d7:23:b2:ce:65:44:22:c4:f4:8c:39:
9d:63:a8:44:12:fd:25:1d:4e:8e:a9:10:ba:3f:cd:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:8F:6B:06:F9:A3:95:1F:E6:0C:72:ED:16:FC:93:19:3F:42:0B
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3yWPawb5o5Uf5gxy7Rb8kxk_Qgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:87:2c:f3:21:df:21:b9:bb:08:d7:f3:b1:d6:97:dc:7d:f9:
74:03:ea:25:e0:d3:dd:75:e4:f6:df:fb:a3:7e:7b:f7:83:8d:
b7:a8:fb:93:d3:1b:86:9b:4f:42:0e:c1:2b:1e:cc:b7:f3:39:
1c:ef:72:91:08:82:db:2b:3e:4d:ed:3d:c9:92:b3:b9:5b:b7:
d9:0a:ae:3d:ef:44:40:29:28:8c:1b:f4:f8:34:f8:b5:bd:60:
0d:b9:70:9b:54:8d:85:c4:eb:a8:92:74:1e:01:90:1f:fc:09:
6b:2f:55:51:97:9e:18:97:3b:a5:b1:33:cd:96:e9:bc:a2:f8:
f6:3d:4e:22:51:5e:ad:53:3e:ab:1c:de:f5:56:12:c8:36:7c:
d8:5c:8e:60:d5:84:cc:24:2d:c5:91:bd:56:4f:1f:03:df:5e:
09:95:35:93:30:68:b5:40:10:7e:98:d1:59:ac:8f:7e:ef:a7:
a0:d3:2f:c9:67:85:81:30:98:22:1d:f8:b5:80:66:44:6c:90:
51:13:a3:81:58:9b:3e:b0:03:5c:50:16:50:4f:5a:05:a0:54:
f7:cf:ff:96:11:54:5d:be:1d:4f:17:3b:ca:8d:87:5a:f0:97:
83:4d:0a:a2:52:39:de:0e:f5:d2:39:ef:56:16:45:a5:e2:40:
18:f5:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:44 2025 by rpki-client