Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oAdyiry3fmvmpIHrmu0QV2wOPwc.roa
File: oAdyiry3fmvmpIHrmu0QV2wOPwc.roa (raw, json)
Hash identifier: hWwRQ7guDHP6O5scKBNqywqfDDRyYqoKVimeQUXFzyM=
Subject key identifier: A0:07:72:8A:BC:B7:7E:6B:E6:A4:81:EB:9A:ED:10:57:6C:0E:3F:07
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194D5033EE1FD8F8BD06C7FB6047256D38A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oAdyiry3fmvmpIHrmu0QV2wOPwc.roa
Signing time: Wed 05 Feb 2025 07:29:07 +0000
ROA not before: Wed 05 Feb 2025 07:29:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 13:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:03:3e:e1:fd:8f:8b:d0:6c:7f:b6:04:72:56:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 5 07:29:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a007728abcb77e6be6a481eb9aed10576c0e3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:ea:37:03:e9:7d:29:35:c6:89:cd:e6:3e:
bd:bb:45:4f:e8:cd:23:4a:a5:56:65:d4:a9:02:11:
37:db:8a:df:20:4c:b8:b9:e1:dd:71:d0:45:7b:33:
08:27:b1:5b:98:d5:c0:ad:17:ac:ef:d1:50:d2:1d:
7a:26:c9:b7:0c:76:58:97:5a:d9:bb:c0:01:fb:83:
7d:73:52:fd:7b:d3:75:c8:b7:2c:4f:3c:de:60:74:
17:b8:cf:bd:1b:91:ae:4d:fb:09:42:41:d4:e1:d1:
4e:55:fc:44:93:e6:ae:5f:86:ba:0c:ba:d7:2e:10:
38:57:0e:8e:93:f4:8b:b4:11:d9:b6:19:ef:d5:71:
93:81:e8:76:b1:c3:62:eb:ef:f4:b3:2f:29:1c:8b:
b2:3a:ca:ab:4a:e5:08:5c:7b:0a:c3:f8:08:ff:c2:
f4:1c:cf:49:95:42:42:67:a7:01:b3:51:c4:3c:05:
7f:27:82:74:4f:88:fa:ac:76:98:b0:98:7e:e3:e2:
d7:18:a8:5a:a8:98:24:2f:a2:6d:58:80:cf:d1:77:
cc:c5:17:86:34:b5:41:f0:3c:5f:2b:f1:ea:c5:51:
d8:5e:92:9b:63:29:3d:82:4d:00:56:7c:ee:3b:7a:
cb:e6:dc:40:14:8e:e4:cb:a2:24:e6:58:19:e7:37:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:72:8A:BC:B7:7E:6B:E6:A4:81:EB:9A:ED:10:57:6C:0E:3F:07
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oAdyiry3fmvmpIHrmu0QV2wOPwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/23
93.123.76.0/22
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:87:f7:b9:41:3c:00:e4:0d:59:46:86:04:f4:da:dc:e1:74:
e8:b9:e3:3b:96:c2:e1:2a:91:3b:0c:3e:42:7a:20:4e:cb:08:
a4:28:29:03:28:a6:8e:57:36:dc:ab:a0:3a:cf:8e:42:db:59:
eb:8d:83:bd:75:75:3b:bc:d6:e6:81:3e:54:84:8c:26:0c:93:
7e:a3:5c:15:a6:8b:81:73:e3:9a:12:76:88:70:e1:1d:a9:62:
01:2e:f3:97:6c:9f:7a:29:ed:03:62:55:35:5a:93:fe:a4:22:
e3:41:2e:77:eb:93:f7:c7:fe:00:48:79:ea:38:c0:0a:eb:22:
1a:40:c2:c2:14:87:83:65:b8:54:26:7c:7c:e2:29:6d:e4:bf:
7d:8e:d7:ed:1e:3e:b7:a6:80:7e:d9:86:e5:0b:24:99:89:52:
14:7e:31:bb:12:42:79:cc:32:c9:16:2f:98:41:1f:01:39:02:
dc:85:03:b2:07:35:9a:55:e9:89:3e:05:3e:e7:48:d2:2b:8c:
2c:42:c7:db:7b:1d:50:8f:87:ae:8c:f0:55:8c:01:e3:4c:b6:
18:fd:01:5d:17:ea:85:31:49:52:c5:5a:43:a5:13:af:70:8a:
f7:b8:43:fe:f5:36:3c:20:8c:8c:e8:42:e8:4d:06:59:ba:af:
e3:38:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:16 2025 by rpki-client