Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/XJuOFkk0zBQKbXvkdZwC0vv0Gvk.roa
File: XJuOFkk0zBQKbXvkdZwC0vv0Gvk.roa (raw, json)
Hash identifier: hJRdjimAp6wKECfEOiqylWktXHi4iZAEfTp+n29adY4=
Subject key identifier: 5C:9B:8E:16:49:34:CC:14:0A:6D:7B:E4:75:9C:02:D2:FB:F4:1A:F9
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 01916B065445E5F68658E5CD9DDA5D615565
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/XJuOFkk0zBQKbXvkdZwC0vv0Gvk.roa
Signing time: Mon 19 Aug 2024 14:24:22 +0000
ROA not before: Mon 19 Aug 2024 14:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206557
IP address blocks: 81.93.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:06:54:45:e5:f6:86:58:e5:cd:9d:da:5d:61:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Aug 19 14:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c9b8e164934cc140a6d7be4759c02d2fbf41af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:3b:1b:c4:f9:0e:23:c2:38:af:57:fc:e1:
7f:b6:b3:1c:0b:cf:7e:16:29:c1:ad:1b:f4:5e:81:
3e:f9:6a:6b:81:91:7e:8b:93:29:f8:00:e0:9c:3d:
d0:b0:91:70:12:d3:a3:30:1f:17:65:42:d2:2d:67:
57:71:fb:a7:3d:8c:1e:81:70:e2:cc:40:cc:9b:ef:
26:9c:35:08:92:27:6f:64:86:44:18:14:4b:16:b9:
a8:d6:59:82:0a:6f:56:58:2e:d7:6d:1c:ec:2f:73:
0b:14:d5:6d:08:ef:89:3f:4a:0a:0e:af:8d:fb:68:
d2:7a:0b:b0:33:1e:6c:21:08:33:87:d5:ea:73:f1:
2a:18:d9:f2:a0:b2:d1:80:db:d2:fc:cb:ff:80:f7:
07:f6:a0:7d:96:e7:6a:10:dc:a2:1f:2b:20:f8:32:
35:69:c2:f8:a3:92:59:4e:1e:c3:f2:60:23:bf:2b:
b6:9f:9e:fd:72:d5:aa:d8:2f:46:61:06:3b:d3:02:
82:9a:f3:2d:46:92:a1:12:f7:70:6d:4c:f0:56:e8:
56:40:8f:f5:9a:cd:38:1b:51:da:4e:f7:df:cf:ac:
ae:91:8b:43:8f:db:d9:8a:d2:e2:93:3a:5d:c6:d0:
1a:8a:9b:c0:ed:d1:22:f8:bd:6e:13:32:3d:5d:96:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:8E:16:49:34:CC:14:0A:6D:7B:E4:75:9C:02:D2:FB:F4:1A:F9
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/XJuOFkk0zBQKbXvkdZwC0vv0Gvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.96.0/20
Signature Algorithm: sha256WithRSAEncryption
21:67:9d:8f:2d:7b:84:0a:37:25:88:f9:a4:b5:47:55:39:39:
b5:c7:e9:03:e9:43:bf:4b:df:28:71:11:50:7c:40:42:23:f7:
ef:87:e5:06:0e:e3:43:9f:c1:ff:82:69:1f:9d:d1:32:3c:4a:
a3:67:73:b1:f9:11:b0:7e:72:13:bf:c6:59:57:d4:93:ac:6d:
c5:d3:52:30:a6:fb:b9:4b:48:11:61:bb:f3:38:38:03:c0:a8:
d9:b8:6f:3e:20:74:3f:3b:60:c5:1b:3f:21:19:59:a8:b5:14:
56:c7:d9:e8:fd:67:f6:44:a4:0b:45:e0:36:10:32:47:2d:7d:
5a:e0:84:80:67:3f:1a:93:c1:f5:88:70:08:18:98:2b:b7:98:
71:18:e4:c0:aa:81:5a:61:c4:8a:7a:3c:57:f9:6d:66:60:a5:
e3:8b:80:02:5d:41:49:bd:35:30:f8:2b:ec:84:85:a3:6f:11:
b9:dc:ed:ba:46:2a:33:3d:dd:10:a7:a9:59:63:00:bc:a3:7d:
f7:fc:58:fc:32:68:3f:19:d2:64:5a:e6:49:ce:ba:03:8d:de:
f2:1e:37:24:a9:e3:af:53:a6:75:1e:13:4b:08:1d:11:5d:de:
dd:b2:9b:06:c6:1d:40:d0:c6:f7:a3:bd:74:fc:57:18:9c:fd:
67:5c:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:28 2025 by rpki-client