Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/p1ZF3ZwK6VSqa5Wjne_-WNmZxF4.roa
File: p1ZF3ZwK6VSqa5Wjne_-WNmZxF4.roa (raw, json)
Hash identifier: PGOTJsa7FfCOFmevGIBCTgDrgLL3KoehZqogbE2ynBc=
Subject key identifier: A7:56:45:DD:9C:0A:E9:54:AA:6B:95:A3:9D:EF:FE:58:D9:99:C4:5E
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 018D3C28512D460AF8E91BF0A99673F52087
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/p1ZF3ZwK6VSqa5Wjne_-WNmZxF4.roa
Signing time: Wed 24 Jan 2024 15:48:11 +0000
ROA not before: Wed 24 Jan 2024 15:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207850
IP address blocks: 193.108.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 16:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3c:28:51:2d:46:0a:f8:e9:1b:f0:a9:96:73:f5:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Jan 24 15:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a75645dd9c0ae954aa6b95a39deffe58d999c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:5e:eb:a4:6d:9b:e0:f1:1e:ec:34:7f:6c:
bf:62:3d:0b:ca:26:9c:77:c1:51:03:68:56:22:8f:
1f:4a:e0:55:6b:3b:e1:d5:d4:0c:f3:ad:0d:5a:b4:
b9:26:2d:20:b2:89:2f:24:3b:17:d6:34:26:81:1b:
2b:5e:e9:f2:3f:cb:3b:e7:31:41:3b:0e:c6:06:42:
2f:4f:df:cf:05:4b:ac:df:ff:b6:2e:46:2d:ad:fc:
ef:14:0a:37:2d:5c:7b:50:f5:e6:b3:49:f4:61:39:
09:7e:c4:52:42:11:4f:e1:b9:56:a6:94:62:9d:35:
cf:8a:c6:34:98:55:cc:39:a5:07:5d:0c:a7:ad:2b:
34:a2:6a:86:da:08:54:97:d8:e0:30:cd:c8:71:f2:
93:a0:cd:22:e5:fb:6e:fe:4a:7b:fe:bc:43:68:3d:
bf:19:09:ab:28:28:5c:5f:e3:fe:b3:f9:00:aa:23:
96:52:14:93:dd:6a:3b:a6:3b:41:0c:eb:8b:07:fa:
a9:24:07:6a:6f:ba:17:34:47:ad:dc:6d:da:db:fa:
05:ea:01:25:a6:db:18:f3:b5:09:06:be:8c:0a:10:
4c:c6:8f:b1:f2:bd:db:55:37:fb:09:6d:c7:b9:c9:
55:be:fe:4f:04:99:34:9e:1d:9e:a7:f3:7e:40:14:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:45:DD:9C:0A:E9:54:AA:6B:95:A3:9D:EF:FE:58:D9:99:C4:5E
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/p1ZF3ZwK6VSqa5Wjne_-WNmZxF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e2:bd:c8:b6:fd:3b:2e:9e:46:14:2d:f6:16:5d:9d:28:46:
32:0f:c7:ac:dd:b9:9d:84:af:ff:89:ef:6b:ea:80:fb:3b:dc:
53:d4:b7:9c:f9:b6:ef:d4:4e:47:4d:82:80:a4:86:94:f3:1e:
54:8c:a5:57:f9:5a:af:db:dd:97:9c:13:3e:06:0a:86:cd:5c:
3c:66:b3:6e:88:62:07:c5:9c:5f:d7:b3:76:ac:67:05:10:21:
be:92:86:66:b0:bd:43:6a:18:bb:04:95:fb:e2:09:b2:52:62:
37:42:0e:bc:2c:db:c7:ae:7e:3c:21:2e:13:b7:11:cf:e3:b7:
60:c5:28:56:1b:41:a1:ff:f1:7c:c2:19:c0:33:c6:07:c0:e8:
1e:7b:d8:df:8b:33:3c:de:0e:da:7e:1d:89:83:f1:23:08:4e:
bd:cf:87:72:88:98:c5:60:1c:53:6e:ce:9d:6d:30:a7:2f:8d:
db:b4:88:a5:71:90:56:43:ed:2f:21:41:00:94:37:c3:04:83:
91:79:7a:0f:ea:19:ba:54:ca:26:76:6d:06:a1:6c:2c:e6:48:
5d:a7:e6:46:76:42:53:23:ba:0c:dd:2e:49:3f:68:21:c8:50:
e0:a4:95:1b:38:6c:c2:fc:ea:37:35:79:07:0b:41:7a:e3:69:
8a:4e:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:46:01 2025 by rpki-client