Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/_8wSTRunlaUJLOjaO-ge472YjD8.roa
File: _8wSTRunlaUJLOjaO-ge472YjD8.roa (raw, json)
Hash identifier: Yp02N0tDlp2ic/WGYO66F4RMUuk0OI8LX/33C2T/fkQ=
Subject key identifier: FF:CC:12:4D:1B:A7:95:A5:09:2C:E8:DA:3B:E8:1E:E3:BD:98:8C:3F
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 0193534A2BA2CF4455B47DE5404D53AFA37F
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/_8wSTRunlaUJLOjaO-ge472YjD8.roa
Signing time: Fri 22 Nov 2024 09:53:09 +0000
ROA not before: Fri 22 Nov 2024 09:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214837
IP address blocks: 193.53.35.0/24 maxlen: 24
193.53.82.0/24 maxlen: 24
2a14:57c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:4a:2b:a2:cf:44:55:b4:7d:e5:40:4d:53:af:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Nov 22 09:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffcc124d1ba795a5092ce8da3be81ee3bd988c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:f3:a2:db:b4:4e:21:ab:41:45:bd:0c:6c:
cf:fc:21:a1:b7:05:57:c2:4c:40:7a:6c:2f:ef:ac:
9b:8a:a3:f4:9a:af:d1:4e:41:a1:8e:6d:11:cd:07:
8d:f3:53:b3:87:5d:ee:55:06:38:45:d4:ab:43:7a:
6a:bc:1d:21:b8:96:38:16:d0:78:41:23:00:06:7a:
b6:0b:44:35:fd:53:96:8f:49:80:c5:8d:f1:e3:b5:
71:17:e8:c1:f6:a9:2b:52:5c:76:04:12:bc:0c:70:
3d:8a:ab:47:26:fe:dc:ee:28:18:07:b3:6d:61:e5:
da:d3:d4:89:97:13:01:aa:9a:21:d6:94:1b:ba:d5:
0b:d8:57:f7:6a:c3:42:92:2b:c2:4a:7e:42:60:b7:
a6:f3:32:8e:35:93:41:1e:78:0c:42:f7:7f:3a:00:
3f:fe:e2:85:e3:15:f9:ce:c0:52:1d:89:67:71:8f:
d7:00:93:a8:c6:77:ed:e3:ad:53:4b:1e:8e:f8:15:
80:af:1c:6e:5e:4e:5e:b1:a5:11:71:6c:91:e4:a7:
4f:79:df:7c:e5:26:28:cc:d3:64:ca:5e:34:b2:80:
51:9d:a1:23:6b:59:92:c5:8b:3e:05:20:52:1b:f3:
8b:cf:e4:86:9a:61:bc:06:23:de:5f:b5:89:63:f0:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:12:4D:1B:A7:95:A5:09:2C:E8:DA:3B:E8:1E:E3:BD:98:8C:3F
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/_8wSTRunlaUJLOjaO-ge472YjD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.35.0/24
193.53.82.0/24
IPv6:
2a14:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:c9:9a:63:cb:56:b1:36:3b:7b:94:24:93:a9:fc:03:31:c9:
d4:0f:40:62:75:ff:54:61:68:f3:bc:cc:9c:57:21:bd:07:f2:
8a:ed:94:2a:56:3a:ce:40:c3:4e:cf:f8:45:d7:0f:28:5d:4a:
94:bb:a2:49:e2:dc:5c:35:7b:80:40:46:b7:ed:31:d9:d4:35:
56:ec:e1:7c:7c:58:4c:0a:3b:2d:ed:b6:e6:ea:aa:7c:ce:f8:
4c:8d:21:ee:7a:d0:99:86:f4:c4:bb:0a:0b:26:8c:ac:db:f6:
13:f1:fb:28:a2:1c:2a:72:8a:f3:5f:23:ee:eb:3b:c0:f8:e4:
4d:c6:12:bc:de:f0:0a:83:7a:b1:d2:bd:16:28:9f:cd:c0:2c:
0d:ee:01:bb:3f:a2:13:9b:83:8a:fb:c3:b8:18:6d:cc:19:40:
3b:73:7b:c5:a8:db:5a:27:7a:f0:de:2d:37:17:06:54:69:72:
1b:8c:6f:e2:39:8d:3d:cd:61:93:51:48:d0:ca:29:f0:58:2a:
52:36:8b:b2:b2:12:0c:22:fa:d4:e3:32:0b:09:eb:30:2a:fe:
a2:4d:54:e2:13:ae:39:01:a8:e6:c5:8b:55:84:84:ac:e0:bb:
a0:d0:9e:4b:5a:5f:79:0c:86:4a:9e:f4:cb:73:12:ef:06:15:
86:74:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:13:12 2025 by rpki-client