Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/UsLSmA1Qdl_Mpnq5NP9sN5FmDqg.roa
File: UsLSmA1Qdl_Mpnq5NP9sN5FmDqg.roa (raw, json)
Hash identifier: RivXQrTJVoDo/1WU3khtQf9xHXXAVtkdITYzvhJZ5U8=
Subject key identifier: 52:C2:D2:98:0D:50:76:5F:CC:A6:7A:B9:34:FF:6C:37:91:66:0E:A8
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018CC7934E62ECE2789A6DF0AAC0D2E42A1E
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/UsLSmA1Qdl_Mpnq5NP9sN5FmDqg.roa
Signing time: Tue 02 Jan 2024 00:29:29 +0000
ROA not before: Tue 02 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 193.43.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 13:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4e:62:ec:e2:78:9a:6d:f0:aa:c0:d2:e4:2a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 2 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52c2d2980d50765fcca67ab934ff6c3791660ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:1f:04:1e:80:40:96:dc:da:15:d8:56:c8:
b0:26:32:ad:51:8f:0e:ad:a5:6d:ae:91:91:16:54:
f4:d9:dd:a9:6f:38:d1:66:37:95:56:bc:b8:cf:63:
31:15:44:77:95:58:b4:c7:d1:ea:5a:a3:0e:a2:b1:
ad:1d:c4:06:bb:29:77:0c:36:5b:f3:da:2d:87:ae:
6b:15:b0:79:39:1e:3f:08:92:d6:ec:96:7c:23:4f:
01:db:a3:07:c9:be:46:b4:b5:0d:bd:db:c9:67:c0:
eb:eb:46:90:0f:16:78:83:a2:1c:7b:91:dc:83:b1:
6c:2c:af:02:f9:eb:d2:56:1f:bd:f2:3b:18:1c:5d:
84:ac:ba:b3:74:e1:c9:b6:76:5a:26:57:b6:c8:27:
ee:7c:19:7c:1d:57:fa:5c:26:e9:7e:01:ab:15:b1:
bd:53:1f:be:69:86:a4:87:44:60:13:1c:2d:9f:d9:
4e:1a:4a:41:2b:35:3a:a1:1a:13:71:5d:f5:a2:95:
fc:80:5a:28:02:ed:4a:38:16:7a:cc:63:c7:bf:8c:
26:6b:c9:64:50:97:6b:c1:87:d3:44:26:ef:41:f0:
7b:4b:7e:81:ec:30:6d:32:39:16:68:49:e2:87:78:
2c:75:34:c1:b2:5b:fb:1c:84:a5:78:ee:fd:13:11:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:D2:98:0D:50:76:5F:CC:A6:7A:B9:34:FF:6C:37:91:66:0E:A8
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/UsLSmA1Qdl_Mpnq5NP9sN5FmDqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7b:a6:bd:53:3b:8d:2e:b3:a8:88:e6:e0:a1:e6:bc:0e:7c:
3b:98:1f:bc:bc:84:49:40:11:21:54:7a:db:f7:69:7a:50:fb:
00:b3:54:88:66:e7:95:20:83:bb:52:bb:ed:dc:cf:49:8f:66:
00:53:80:2c:97:23:30:40:02:de:ca:d1:5e:9e:56:ec:2b:33:
26:f6:e8:e7:73:c1:7b:43:8f:ec:51:e6:ef:99:ac:94:d6:a4:
16:f2:93:4d:21:70:fd:aa:e8:d9:c7:5d:2e:c4:5a:da:2b:04:
36:7b:cb:d3:65:20:51:71:d5:99:92:f2:ce:3c:a6:0f:1c:bc:
d9:f4:7b:01:93:b7:51:44:40:3b:17:fb:df:5f:ad:ec:df:3c:
ed:37:fe:5c:a2:fc:d8:3c:ec:b3:dd:4b:46:85:5b:0f:8a:37:
21:3c:84:3d:5b:d7:89:b3:e8:88:b9:88:7b:4e:d7:d3:bf:f4:
6b:f7:83:22:0d:e6:66:e0:2c:ed:91:58:19:d5:9c:dd:87:9e:
c4:6e:65:a4:30:cd:ec:ae:a5:65:95:35:1f:09:e1:b3:ca:5d:
2a:f4:7c:e3:7b:ce:bb:31:27:6b:e7:5c:74:96:e1:35:85:dc:
1d:77:79:8c:d1:e3:d6:e7:72:78:81:28:da:4c:ac:32:f9:6c:
8b:7b:46:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:37 2025 by rpki-client