Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/XPhgpJot6Ms_IWv2rEBec9GKBfA.roa
File: XPhgpJot6Ms_IWv2rEBec9GKBfA.roa (raw, json)
Hash identifier: r9KuftnNzXY/hKmblATTOmRCV9yIPrMtAcHLgpUFBI8=
Subject key identifier: 5C:F8:60:A4:9A:2D:E8:CB:3F:21:6B:F6:AC:40:5E:73:D1:8A:05:F0
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0193BAB274524476575D1FBFD932CB5EB966
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/XPhgpJot6Ms_IWv2rEBec9GKBfA.roa
Signing time: Thu 12 Dec 2024 11:47:57 +0000
ROA not before: Thu 12 Dec 2024 11:47:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202147
IP address blocks: 188.241.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:b2:74:52:44:76:57:5d:1f:bf:d9:32:cb:5e:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 12 11:47:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf860a49a2de8cb3f216bf6ac405e73d18a05f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:7e:97:a1:84:c2:d3:32:6f:24:0f:c7:97:
a0:ef:87:68:f6:74:6d:6b:a8:e4:ba:80:d2:32:74:
4f:4a:3a:6a:76:a6:c3:3d:aa:0c:83:1b:fd:d0:d5:
f4:ff:ba:d3:f0:f9:c7:cd:ed:4c:d3:6d:31:68:88:
07:68:37:9e:40:16:94:2d:29:c3:ed:89:45:04:ef:
7a:71:4f:f6:70:4b:4e:29:0f:de:95:a2:25:49:f7:
48:78:81:f0:7f:c2:55:4e:2f:dd:27:b6:b8:07:19:
25:d9:64:c1:57:90:5c:67:2d:65:af:a9:56:4c:47:
d4:3c:f3:04:a3:51:cd:df:c1:56:3a:f4:46:81:06:
b8:18:03:ca:eb:b8:27:5f:29:cb:4c:ff:71:2c:d2:
b9:f1:92:37:95:45:85:ff:4a:cf:b5:49:09:8e:75:
cf:38:84:50:05:47:03:79:d9:58:7b:fc:c8:4d:cc:
7f:32:99:30:e4:43:f4:31:b1:04:d2:6d:0e:28:fa:
47:9e:a6:3e:41:23:52:da:ea:9d:18:45:1c:21:7d:
79:84:b9:26:a8:60:c0:b3:f4:27:3d:68:78:cf:b7:
ae:7f:73:80:25:f6:bd:d5:65:30:50:38:36:29:76:
9a:ad:85:d3:f5:5c:d1:1f:5a:22:22:c2:c3:78:58:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:60:A4:9A:2D:E8:CB:3F:21:6B:F6:AC:40:5E:73:D1:8A:05:F0
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/XPhgpJot6Ms_IWv2rEBec9GKBfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.96.0/21
Signature Algorithm: sha256WithRSAEncryption
58:91:cf:b3:26:44:aa:04:67:1c:75:67:96:21:f6:bc:0b:7f:
3c:c0:c5:b7:53:08:67:07:a3:1a:65:76:42:e3:ed:3e:d5:5c:
dd:26:c7:37:3e:b0:da:54:af:85:7d:99:45:59:9b:04:aa:74:
b4:2e:f7:e8:ac:8f:ee:03:5c:c6:d6:ef:75:82:9f:2d:05:4a:
3b:78:a5:3c:cd:e6:41:4b:a1:3b:2c:3b:fa:4b:7c:fd:90:d1:
47:4a:67:d8:ea:87:09:d7:18:fd:bf:38:4f:d3:2c:5a:02:4c:
89:95:6c:16:99:66:4d:58:b1:35:7a:10:52:cd:3d:51:80:35:
69:b8:65:07:51:9c:f5:5a:27:06:bf:25:b0:bb:9a:9a:f2:92:
0f:0b:86:3f:3f:b8:7c:5e:6b:13:16:ee:2e:25:ba:ab:e9:ff:
2b:83:a9:3b:8d:23:81:c7:f9:07:69:78:2a:80:dd:8b:3b:b7:
e7:be:3c:b4:f0:30:87:45:7b:e5:31:87:04:f6:18:6c:0a:f2:
ff:a8:a5:09:7e:97:ce:c4:83:68:a7:e4:a0:9c:69:ec:96:9b:
77:04:6e:a5:66:6a:b2:d6:9a:2a:cc:1f:b6:78:b1:2e:b7:3a:
1d:8f:27:31:d9:73:94:de:a0:ec:2a:47:f0:a0:ab:e4:c0:bd:
3c:ff:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:22:19 2025 by rpki-client