Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/EtpLuuzlNIU0Azo8gnvkZwXd7ZY.roa
File: EtpLuuzlNIU0Azo8gnvkZwXd7ZY.roa (raw, json)
Hash identifier: YE2ssdniIy3dolFk94LcRO4Ze0alK4+fqOFndKyox+8=
Subject key identifier: 12:DA:4B:BA:EC:E5:34:85:34:03:3A:3C:82:7B:E4:67:05:DD:ED:96
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 018EA85F42083F18A98DD890D72AEAC4B41A
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/EtpLuuzlNIU0Azo8gnvkZwXd7ZY.roa
Signing time: Thu 04 Apr 2024 09:09:58 +0000
ROA not before: Thu 04 Apr 2024 09:09:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35574
IP address blocks: 93.101.0.0/20 maxlen: 24
93.101.4.0/24 maxlen: 24
185.40.12.0/22 maxlen: 24
2a04:a9c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 08:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:5f:42:08:3f:18:a9:8d:d8:90:d7:2a:ea:c4:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Apr 4 09:09:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12da4bbaece5348534033a3c827be46705dded96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:5d:f3:a6:79:c8:f1:d2:ea:35:e0:cc:34:
dd:d3:45:4b:ff:7d:52:9c:d6:57:e0:c1:ff:5c:2a:
20:2b:de:99:5d:8b:ad:af:3c:f7:c2:0d:b4:1b:f9:
74:b8:d8:78:05:fe:3a:a5:e3:38:0d:27:3c:27:5c:
9a:9d:4f:7d:6d:28:92:1c:dd:5b:b4:9a:ba:6b:ab:
ac:0b:e7:1d:b1:bd:4d:1c:f9:73:e0:63:6c:2b:dc:
d2:32:13:8b:61:90:6e:35:b6:98:11:21:2d:85:c9:
74:da:84:c8:10:47:bc:cc:80:be:f6:79:cc:8d:cf:
a3:d3:7a:25:90:ee:4f:d6:d6:f1:91:d9:d6:46:5f:
af:2f:4f:66:0f:15:f7:a4:93:63:87:3c:6e:cf:50:
5e:d4:10:f3:c5:85:8f:25:85:4f:98:01:c1:e1:66:
6b:0b:97:c4:32:76:18:f5:f7:5e:e5:e7:9e:57:5d:
26:ba:0e:53:39:5e:60:ba:05:7c:fe:5b:46:6f:8f:
ce:06:c1:e9:3c:ce:56:2b:03:a2:91:26:09:ca:24:
90:eb:0c:c6:c2:30:64:c2:03:5d:bc:5e:3c:c7:95:
3e:c7:5c:62:50:4e:94:f4:e4:9d:ce:85:df:81:18:
f7:a4:f2:5a:5c:9a:f7:1b:98:72:de:7a:fd:bf:77:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DA:4B:BA:EC:E5:34:85:34:03:3A:3C:82:7B:E4:67:05:DD:ED:96
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/EtpLuuzlNIU0Azo8gnvkZwXd7ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.0.0/20
185.40.12.0/22
IPv6:
2a04:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:a6:da:42:f1:aa:2c:2f:3e:52:ec:75:22:41:eb:53:53:ee:
85:6f:77:8c:b8:5b:10:33:27:23:31:ab:4e:bb:23:89:f0:b8:
22:da:0a:8d:84:5c:37:a1:5f:e6:90:8c:1d:8c:f0:5c:50:03:
4c:33:93:86:4e:5e:e2:e8:89:10:ea:ea:f3:b6:1d:79:2e:c8:
6f:40:63:94:a8:e1:6e:a0:c7:f0:7c:b6:d4:5f:08:10:8f:01:
78:d0:ce:e4:f2:97:93:47:2f:bf:2c:6f:1b:e2:1d:e2:93:aa:
ad:aa:a2:1f:4f:45:1a:76:9a:17:e0:f4:34:ea:fa:f1:d0:24:
b3:8f:96:c5:4e:dc:98:3b:66:f6:e8:9d:ac:2c:bf:c1:6c:6f:
e5:6f:d7:af:27:b4:cb:ef:81:ca:53:be:d6:3a:c3:32:4e:51:
5c:88:6f:4e:fa:fe:d0:eb:2b:29:6f:86:e7:24:02:61:c8:ee:
e2:20:6c:ac:e3:a2:9a:2e:5d:08:19:cb:02:10:95:53:f0:f8:
ef:f8:9c:49:4a:1c:7e:24:8a:e0:f7:98:7c:84:69:8f:d0:61:
a5:9f:d0:f7:7e:93:50:f4:5b:29:7f:e6:85:8d:cc:76:32:7d:
54:e1:83:34:67:a6:b2:86:8b:84:70:a4:8b:6d:d5:1d:c2:9a:
2d:8f:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:23:30 2025 by rpki-client