Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/SjpygmvuDVwIZnGtkws35dO3t_U.roa
File: SjpygmvuDVwIZnGtkws35dO3t_U.roa (raw, json)
Hash identifier: zqB2pIJNo9UfgQpoICcptCQoFDw4jU4AoFMpyl6BXPs=
Subject key identifier: 4A:3A:72:82:6B:EE:0D:5C:08:66:71:AD:93:0B:37:E5:D3:B7:B7:F5
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 019422FC33858D4317203564EE47BB11C889
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/SjpygmvuDVwIZnGtkws35dO3t_U.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 93.187.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 12:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:33:85:8d:43:17:20:35:64:ee:47:bb:11:c8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3a72826bee0d5c086671ad930b37e5d3b7b7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:07:b4:4a:27:b7:90:44:94:6f:22:a0:1a:
2e:9c:fb:37:9c:83:4f:2d:9d:72:c8:39:cf:b8:e1:
7b:e5:71:da:d8:48:b7:d3:15:3c:1d:42:b9:65:f9:
d7:fc:8d:80:7d:9c:87:d8:15:cd:4b:4d:f4:ba:86:
43:02:a7:70:34:88:0b:99:a9:15:97:cb:da:05:0f:
78:54:e6:0b:f6:a4:52:6f:d8:dd:5f:0a:51:51:ee:
a6:d8:83:5d:eb:ad:dd:f7:b2:80:f7:32:04:82:6a:
d7:f0:c8:1d:d9:f9:c2:92:f5:d4:c3:2d:d9:f7:c4:
11:4e:7d:c7:da:e7:90:fd:7b:61:ae:cd:20:53:39:
dd:0b:3a:53:c3:42:ad:f8:88:df:dd:25:9d:b0:87:
27:21:c3:c8:84:b6:fb:b6:9a:de:58:c8:b2:ab:33:
69:cc:4d:58:fc:58:b3:8f:51:a6:e3:84:64:df:3a:
a3:91:b6:8d:45:ea:29:84:79:54:30:82:aa:da:6d:
11:7c:32:9b:01:96:a0:6d:98:ad:7c:c7:9f:8c:87:
4e:c9:c8:fc:cd:77:22:9b:c6:d0:84:18:b9:ef:3a:
b6:cf:29:f2:e5:dc:06:37:40:d7:75:99:0e:5d:05:
68:13:1b:0e:10:61:12:cb:f5:cd:59:d6:83:25:76:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:72:82:6B:EE:0D:5C:08:66:71:AD:93:0B:37:E5:D3:B7:B7:F5
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/SjpygmvuDVwIZnGtkws35dO3t_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.70.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8f:0a:d2:49:57:2f:f2:43:06:42:bc:e7:da:49:ff:94:ce:
0e:cc:a6:c8:65:f1:7d:0b:fe:b3:5c:71:ff:84:d9:3d:69:29:
50:87:db:4e:79:64:88:a1:0e:a7:c6:7c:16:b6:e9:72:cb:91:
51:50:68:12:5d:b9:8b:72:1a:ae:29:75:ea:32:de:f5:cf:9f:
a2:46:3c:31:b9:f0:0c:47:66:da:cf:c1:c1:41:e9:77:b8:e5:
56:c4:b6:a7:eb:15:bc:6c:3a:bf:81:10:24:01:e1:c4:d9:57:
f4:10:50:83:fc:2b:e4:c1:80:5a:d4:2d:9d:15:d1:89:b4:2b:
1b:e6:0d:ee:a9:04:35:a9:ac:8d:91:58:81:21:55:3a:9c:97:
df:88:db:48:bd:a4:d9:28:f0:3a:8d:2a:d0:17:59:f6:a0:f1:
7d:6c:68:9a:e0:96:28:13:96:10:03:a1:f3:87:d1:db:9d:95:
85:91:bc:6f:ce:29:59:fd:c1:aa:1a:48:00:c3:a8:d5:23:7c:
68:3f:f2:bc:df:5f:0c:6e:52:63:bd:0c:c4:da:4d:5e:cf:74:
48:b3:1d:5d:7d:f9:d6:3e:76:10:1e:88:2a:ec:4e:f6:16:c8:
10:e7:66:b4:1a:a3:6c:98:9a:5d:5f:68:7c:22:4a:fa:30:00:
5f:bd:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:32 2025 by rpki-client