Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/1mr4eI9hOQOf9vgTH58su_upnEs.roa
File: 1mr4eI9hOQOf9vgTH58su_upnEs.roa (raw, json)
Hash identifier: nh1a2Xde3McHhjcimS5KSLE5f7VwlOY8YvYgtIg4IwQ=
Subject key identifier: D6:6A:F8:78:8F:61:39:03:9F:F6:F8:13:1F:9F:2C:BB:FB:A9:9C:4B
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 018CCA285E2F06BAF96E7E4F9822E86AF0BB
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/1mr4eI9hOQOf9vgTH58su_upnEs.roa
Signing time: Tue 02 Jan 2024 12:31:32 +0000
ROA not before: Tue 02 Jan 2024 12:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59572
IP address blocks: 193.35.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:5e:2f:06:ba:f9:6e:7e:4f:98:22:e8:6a:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Jan 2 12:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d66af8788f6139039ff6f8131f9f2cbbfba99c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:87:70:98:93:45:68:47:f0:10:74:8c:0b:
cb:cd:2a:b8:dd:ed:26:b6:a1:0e:c7:83:6c:34:f4:
f9:1d:cd:13:61:b9:c5:b8:1b:71:96:8a:49:fb:a9:
02:06:01:3a:dd:53:4a:0f:ae:28:b2:84:18:85:f0:
b7:74:98:ca:54:4b:bd:49:b0:18:33:ca:c6:5a:71:
bf:1e:57:74:a5:d1:6f:f4:57:3d:7e:e4:1c:46:89:
94:1b:81:f2:9e:d0:d4:6b:4a:a6:3f:cc:50:88:72:
11:9f:dd:cd:e1:cf:4b:db:56:ef:82:21:da:3a:e0:
ce:02:2e:8c:e1:aa:18:b2:45:6d:3a:b8:17:d7:5f:
1c:8f:e8:ca:90:e4:b3:10:5e:da:9c:69:34:1b:e3:
98:ab:f8:f2:95:af:b5:c8:a0:d0:ed:a3:83:bf:7c:
2a:3d:b2:fb:1d:43:18:46:94:b8:4e:83:01:28:51:
ae:f5:22:58:dc:1b:95:22:02:af:66:3f:75:78:42:
87:e6:bd:0d:f4:11:fc:c7:f7:2e:30:ee:40:d1:64:
4b:c3:c3:cd:c1:ad:26:b3:59:58:e7:1d:6c:d2:40:
93:b3:3b:21:05:18:bc:82:e0:86:ec:46:e4:98:49:
cf:01:f1:db:7b:23:18:66:0c:74:e1:52:d2:2c:e0:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:F8:78:8F:61:39:03:9F:F6:F8:13:1F:9F:2C:BB:FB:A9:9C:4B
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/1mr4eI9hOQOf9vgTH58su_upnEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.1.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:87:d7:90:a6:47:f3:1f:95:b6:2a:23:b6:67:86:d2:fa:
cd:3f:1c:36:53:08:07:3b:2c:4d:77:ce:82:16:a4:78:a7:2c:
00:b8:7d:0c:bc:52:1c:6d:68:c8:be:aa:67:53:87:8d:8c:54:
3c:53:b9:e3:95:c0:1c:fe:63:8e:6d:68:57:ab:99:2c:e0:55:
c3:5a:31:87:19:ad:36:c7:cd:58:53:9f:ae:f6:00:a4:d3:40:
b8:f6:3c:75:08:57:2e:ec:f2:31:6f:fc:bc:db:b6:58:0f:65:
ee:35:be:be:4a:b2:35:24:56:0a:42:f7:5e:3d:ed:42:5a:b5:
32:0c:fd:7e:ed:2b:95:96:06:48:7f:67:96:af:0a:c0:e3:32:
87:94:c3:47:58:36:35:23:c6:3e:e2:4f:ad:db:13:39:95:95:
e1:b5:44:9f:37:9e:62:7e:1b:71:bd:ea:e6:7f:22:0f:49:31:
40:f0:02:24:c6:29:9e:11:ce:07:1f:84:eb:46:68:c6:23:20:
f0:1d:34:78:fa:7b:57:b6:b0:f5:7a:54:f7:d4:14:d6:a8:9c:
1f:1e:a3:f3:ac:37:b8:63:9f:41:9f:97:c5:88:12:a6:2f:dd:
4b:60:9c:49:38:ed:2e:89:ea:2d:87:38:4e:e0:c6:7c:3e:94:
61:15:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:57 2025 by rpki-client