Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/T35jwJKWsRtWpe3PBE2mm8Ppu3k.roa
File: T35jwJKWsRtWpe3PBE2mm8Ppu3k.roa (raw, json)
Hash identifier: df8MouWaFmvx0UiDWHEq8CnEOm759VcUfMDwCvq5BFs=
Subject key identifier: 4F:7E:63:C0:92:96:B1:1B:56:A5:ED:CF:04:4D:A6:9B:C3:E9:BB:79
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 019424457A13C2F6E473EE9A8B7C3A4C3F42
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/T35jwJKWsRtWpe3PBE2mm8Ppu3k.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 193.104.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7a:13:c2:f6:e4:73:ee:9a:8b:7c:3a:4c:3f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f7e63c09296b11b56a5edcf044da69bc3e9bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:ce:6a:51:dd:48:60:67:c1:aa:9f:d0:3b:
22:74:7c:72:5b:b1:ce:77:0c:77:1e:2d:76:24:94:
64:bd:bf:7c:97:cf:1c:d3:d5:7d:7e:71:53:56:79:
30:13:87:74:0b:e9:7f:80:79:92:08:db:13:2e:9d:
84:eb:88:4c:3a:f2:5e:e0:fd:cc:f9:35:46:68:3a:
0e:ed:a4:79:cc:14:9a:d1:c8:e8:68:60:e6:78:21:
7d:1f:8b:a6:7b:36:43:b9:8d:9f:5e:45:85:a4:dd:
c1:a1:75:5c:ec:3d:69:b5:d2:ac:68:19:39:96:65:
d7:77:51:67:e8:6a:d2:c0:8d:9c:95:cd:8b:cd:25:
cf:02:d6:97:65:a8:55:53:45:d0:79:32:01:f0:43:
01:5b:e5:1d:db:b8:c8:d3:b2:ad:e6:00:3d:79:41:
6f:bb:84:49:06:1d:31:54:1e:89:1b:0d:f1:72:e7:
79:2f:da:5f:a7:5c:6c:a3:68:c1:42:36:b7:02:c3:
c3:71:29:c2:ae:e8:ee:f8:2c:f2:17:8e:1b:3f:3a:
47:96:bc:e2:58:89:fd:69:cd:7e:0d:b8:63:5f:40:
08:1c:e8:fe:eb:60:fe:1d:ea:9a:2b:a7:76:ff:a6:
ae:ff:b9:e2:92:a9:52:3c:55:6f:59:9a:40:06:00:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:63:C0:92:96:B1:1B:56:A5:ED:CF:04:4D:A6:9B:C3:E9:BB:79
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/T35jwJKWsRtWpe3PBE2mm8Ppu3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.245.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ea:ce:1f:db:e5:d1:e5:ad:ac:66:a8:7d:fc:08:ca:6c:a4:
18:c9:92:a6:59:83:83:5f:6d:2b:1e:fc:1b:dd:95:da:af:83:
f2:d3:da:d3:42:9e:4b:88:9c:97:05:2a:6d:f1:2b:da:8d:8b:
21:ae:56:db:8b:be:25:4d:94:89:e1:8e:d3:81:90:bb:ef:2f:
fd:e5:2e:4c:cb:51:6a:e5:11:ee:ae:aa:7d:bb:a9:89:02:85:
cb:7a:9b:9b:bb:6d:c9:70:31:39:eb:42:de:cf:d1:46:56:ca:
ff:0c:87:26:8b:bb:bc:1d:78:8e:ed:47:82:aa:da:b7:2d:0b:
83:d4:6d:35:81:eb:3e:b1:24:64:01:41:eb:bd:33:63:8e:71:
0a:00:a4:b0:6d:54:cf:bb:df:80:f4:58:f7:96:e7:3f:05:dc:
d6:d7:b5:78:d0:21:fd:73:24:36:2c:cb:77:34:ec:80:a1:2c:
b9:b5:d7:fc:c8:fd:03:3a:2a:b1:06:6d:fc:82:71:ab:d0:5e:
26:97:03:64:e1:18:1e:e7:52:1e:aa:1a:4d:e0:ce:53:df:ec:
62:48:66:46:cb:92:ee:7a:db:31:1f:dd:5d:b7:fb:07:c7:46:
3e:9e:b7:f3:c4:ed:22:e5:f7:ed:c2:d8:19:b6:9b:7a:25:ed:
fc:5a:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:10 2025 by rpki-client