Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/fVQg-kYrdJDgaM_yQekgbnttJU4.roa
File: fVQg-kYrdJDgaM_yQekgbnttJU4.roa (raw, json)
Hash identifier: 78TftuhqGTlGQ9IzX06jAjdTAR0rmzk1jLRTeUqLr7o=
Subject key identifier: 7D:54:20:FA:46:2B:74:90:E0:68:CF:F2:41:E9:20:6E:7B:6D:25:4E
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 018CC2DB64075B5A007398C09112F7E66B53
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/fVQg-kYrdJDgaM_yQekgbnttJU4.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35262
IP address blocks: 193.27.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:64:07:5b:5a:00:73:98:c0:91:12:f7:e6:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d5420fa462b7490e068cff241e9206e7b6d254e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:cb:1f:bb:a8:19:b0:b8:25:bd:bc:67:bf:
2d:d0:99:5d:04:b5:8c:01:f4:13:e5:c6:48:44:5a:
2b:98:27:40:e0:ac:ab:ed:6e:3d:cb:cb:04:59:cd:
22:6f:2a:ef:3f:57:62:21:33:7d:7a:b5:ef:60:60:
4b:4e:71:d6:c4:b4:70:a3:dd:c5:04:56:0b:3d:8f:
be:5f:ca:66:33:a3:fb:83:a8:ad:32:d0:53:b3:93:
17:3a:8a:6d:23:4c:4b:65:38:b7:b3:95:ac:36:6c:
58:9d:4a:f7:00:6e:96:bb:13:ba:9a:43:61:7b:6a:
74:75:c0:45:4d:56:ed:0e:73:b2:1e:45:19:1a:84:
8c:8b:54:cf:6d:c3:a6:50:c3:13:1c:47:fb:36:65:
c3:07:64:99:8a:f0:20:a7:31:7a:88:f1:d5:79:e8:
ff:f1:72:dc:f3:88:bc:20:6c:d5:65:bf:4e:ec:a4:
8a:9e:18:b9:f5:fb:7b:84:df:86:6f:63:36:d0:54:
31:a3:c2:59:e6:ec:88:0a:f2:ff:9c:6b:df:19:d4:
40:42:a6:54:ac:28:92:06:9c:9b:a9:e3:af:4f:83:
71:2a:79:d5:f6:e8:1a:e0:a9:10:7d:03:92:df:3b:
d3:fd:5d:a9:ab:e3:89:ef:31:1b:38:ef:4b:b9:c1:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:20:FA:46:2B:74:90:E0:68:CF:F2:41:E9:20:6E:7B:6D:25:4E
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/fVQg-kYrdJDgaM_yQekgbnttJU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.1.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:01:c4:95:ee:1b:25:22:c1:38:55:32:51:19:3f:52:76:5f:
38:58:14:e4:ea:41:fc:e2:90:b4:b2:40:25:d6:7a:1e:bf:42:
a3:91:d5:ae:df:04:a5:fe:61:40:69:e2:13:92:ba:35:77:b4:
5f:43:92:e9:a2:be:96:6c:fb:ca:af:a0:77:9d:3a:9e:7d:07:
b7:38:15:de:19:bc:6d:82:6d:90:35:c7:6a:10:16:27:80:dd:
33:3e:6c:9e:d9:7c:f9:d9:2a:fe:ed:f7:0a:6b:80:a1:a3:a0:
c3:30:a4:28:56:b3:bc:8d:dc:8a:96:56:dc:43:7b:40:c6:c5:
d1:70:e7:c1:6b:02:76:24:81:64:39:36:eb:fa:ee:7b:f1:88:
16:6f:08:93:dc:97:1f:48:1f:48:7c:fb:d9:7c:6e:c7:d1:e5:
39:5c:69:a0:b9:60:20:29:dd:5a:a8:df:cf:8e:9a:2c:c6:3a:
d5:73:64:bc:2d:1c:3e:47:0e:ee:7a:11:c2:e8:6a:c2:c6:b1:
dc:92:9a:a3:43:7b:37:78:82:bc:e0:94:9a:38:5d:0f:44:28:
c5:9b:03:e7:33:5e:c6:ec:74:b7:f3:43:54:64:45:d4:ab:7c:
79:25:38:87:da:f5:0e:ac:77:17:f8:e5:ca:16:ad:3b:1e:16:
2d:c6:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:05 2025 by rpki-client