Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/SUhIKx7SeVZcmaT1FmTkyzzJKXs.roa
File: SUhIKx7SeVZcmaT1FmTkyzzJKXs.roa (raw, json)
Hash identifier: xWwERGqKtOwKJ/3XgrTi3ee/d1EbfW8fAHV5SBIIy/8=
Subject key identifier: 49:48:48:2B:1E:D2:79:56:5C:99:A4:F5:16:64:E4:CB:3C:C9:29:7B
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019427B60862318FCA7406E3B074010422DE
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/SUhIKx7SeVZcmaT1FmTkyzzJKXs.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 193.150.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 18:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:08:62:31:8f:ca:74:06:e3:b0:74:01:04:22:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4948482b1ed279565c99a4f51664e4cb3cc9297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:96:36:38:ac:03:66:8f:59:a3:b5:96:4f:
24:34:ea:b2:87:50:7a:a7:b2:c4:f5:a5:fb:90:cd:
45:da:9e:09:af:eb:99:38:87:36:b8:8d:68:e1:db:
c2:ce:88:ef:d5:0d:47:2b:7a:21:68:78:de:68:ff:
99:67:b3:a3:9a:ab:64:b5:97:19:39:96:e6:fc:fa:
48:9f:0f:3c:43:76:d1:7c:2d:75:a7:92:79:e9:d2:
92:14:2b:97:da:1c:78:4d:fe:c1:ad:cc:6c:55:5d:
d8:53:33:ea:9c:8b:31:d3:08:4d:2d:ef:10:35:5e:
49:b8:5e:b6:03:34:81:b8:2c:0a:eb:81:ef:13:07:
6d:d3:ef:f0:de:98:20:da:44:8a:0a:16:94:dc:bb:
9f:99:01:fb:71:41:4e:46:62:a4:35:b8:5a:7b:e8:
7c:8d:35:ad:21:d3:ad:10:99:58:d7:b2:85:00:7c:
a1:c2:82:5c:c5:b3:92:50:22:9d:88:33:ca:21:ef:
98:0b:4a:5f:d0:6c:d8:86:e5:7a:41:c4:83:8e:a9:
a6:0e:21:95:01:9a:e2:a9:4d:1c:cd:60:38:76:2e:
f5:fd:33:17:6d:9d:d7:1e:ee:5b:67:f7:01:b0:b0:
7a:15:da:1a:0a:76:e9:f5:88:c2:00:41:ea:22:30:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:48:48:2B:1E:D2:79:56:5C:99:A4:F5:16:64:E4:CB:3C:C9:29:7B
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/SUhIKx7SeVZcmaT1FmTkyzzJKXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4c:10:97:a1:cf:fa:d9:c4:2c:f6:bf:07:bb:18:14:36:81:
dd:72:f0:bc:92:e4:ca:f9:a1:7d:bd:52:51:39:fb:48:0f:24:
9d:b4:98:cb:4a:67:95:92:fe:91:61:14:bb:75:dd:a8:3d:54:
f4:ef:45:f3:32:8c:94:b0:02:68:70:f1:b5:13:3d:a5:69:1c:
b8:b6:34:9e:0e:30:9f:88:df:5a:ff:55:6e:d2:05:ce:9e:d3:
27:f6:82:a5:d0:ea:77:f8:77:76:6d:36:18:78:fe:8f:0d:18:
d9:b4:a5:35:f8:5e:d5:f5:86:52:8e:35:15:19:18:3b:92:75:
2e:48:8a:e7:ba:f1:93:25:d2:7f:c6:49:b5:d7:3d:a7:f8:c5:
e3:27:fb:1d:4e:33:8c:fd:55:6c:91:b0:5e:4c:70:fd:bd:9e:
23:6f:67:e8:3c:86:98:a8:1d:b8:d6:73:07:67:a4:06:2c:21:
c4:70:7f:20:80:01:a2:c0:cd:56:ec:e9:97:57:6d:4a:69:18:
5b:b3:ab:74:35:72:c6:bf:0b:15:f5:dc:a5:91:13:e0:98:f8:
4d:16:d8:28:e9:1f:b4:f0:70:62:d7:b2:5c:bb:f5:b2:cb:bd:
35:b2:ba:ff:24:36:c3:aa:26:b4:35:8c:d5:d1:37:e4:5e:ab:
9a:fe:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:47 2025 by rpki-client