Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/uN-S9mY8xv1smxIFj3A9w0EthwE.roa
File: uN-S9mY8xv1smxIFj3A9w0EthwE.roa (raw, json)
Hash identifier: MlNjOYSRnl1kZsRhnIR65g9gtQ8pHu/eLB5tbGBcNRg=
Subject key identifier: B8:DF:92:F6:66:3C:C6:FD:6C:9B:12:05:8F:70:3D:C3:41:2D:87:01
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 0190FEF1E766E19DAE549C9037E4417E4DA6
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/uN-S9mY8xv1smxIFj3A9w0EthwE.roa
Signing time: Mon 29 Jul 2024 14:43:04 +0000
ROA not before: Mon 29 Jul 2024 14:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28730
IP address blocks: 93.95.202.0/24 maxlen: 24
93.95.203.0/24 maxlen: 24
185.176.44.0/24 maxlen: 24
185.176.45.0/24 maxlen: 24
185.176.46.0/24 maxlen: 24
185.176.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 14:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:f1:e7:66:e1:9d:ae:54:9c:90:37:e4:41:7e:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Jul 29 14:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8df92f6663cc6fd6c9b12058f703dc3412d8701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:90:5b:5f:9b:db:fa:f9:05:f5:13:4f:89:
83:0b:1e:dc:d3:7f:dd:35:72:56:56:2c:e2:7e:e9:
ae:45:4a:a0:57:09:c6:23:77:b4:5a:34:b4:22:1a:
f0:4b:fe:2e:67:e6:a1:7b:f3:0c:2e:68:2e:43:86:
c2:18:a4:8c:fa:cd:84:d5:dd:9d:89:7a:f0:a8:aa:
86:83:a1:bb:86:d3:ab:96:d0:25:6f:b3:4b:d0:18:
c1:92:3e:a9:6e:e1:f6:cc:e4:8c:be:05:91:e1:e4:
c1:09:67:dc:e8:61:04:38:76:71:9e:f0:2f:6e:42:
40:78:24:7e:4f:fe:68:25:26:83:c1:35:ba:e5:aa:
7d:04:fa:a8:3a:e7:65:2c:d0:3f:b9:e2:62:50:fa:
35:41:ee:02:02:3d:00:e6:15:24:02:92:a4:51:bb:
7c:4d:b0:79:91:2f:41:5d:a9:ec:c2:f4:69:63:b3:
49:b1:70:a9:59:33:f0:73:c5:f2:e8:46:a0:28:48:
0d:2e:3e:e7:52:9a:bc:78:d8:3f:2d:ad:81:b5:84:
98:37:77:6c:0f:b4:f0:7b:17:ca:68:cf:aa:af:67:
3e:45:aa:22:19:8f:1f:9a:ec:f7:b4:cd:b0:f7:e5:
78:2d:b0:37:09:eb:68:c3:36:6e:c4:2e:8c:87:4f:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:92:F6:66:3C:C6:FD:6C:9B:12:05:8F:70:3D:C3:41:2D:87:01
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/uN-S9mY8xv1smxIFj3A9w0EthwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.202.0/23
185.176.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:ad:c0:df:95:fb:a0:f5:a4:20:6f:f3:02:63:7a:b7:40:6a:
5f:71:f7:bc:1d:9b:64:51:49:d7:45:b6:f0:50:ce:56:8d:ce:
72:84:65:44:e4:27:64:e4:0b:ad:91:31:f1:58:90:52:3b:66:
a7:fc:ab:fd:d7:6b:18:35:59:48:1f:2d:c3:1d:2e:72:f3:55:
01:9e:a8:4a:6b:33:18:71:1a:e1:b0:e8:f2:df:33:b7:ef:60:
80:4e:10:3c:92:70:e4:b3:de:5f:8b:2c:18:74:68:fd:d0:03:
ba:f2:32:ef:cd:6e:eb:0e:ac:97:86:18:11:bc:e6:62:f4:56:
50:0f:c3:94:8a:96:08:9c:a7:ae:78:7f:f7:e0:9e:14:6f:dd:
dd:c6:b9:b1:bd:b5:48:78:a9:5c:f0:26:a3:f5:db:aa:99:74:
c9:38:54:a2:19:fc:4c:b3:ab:34:21:bd:4f:47:a0:fa:fe:fa:
97:c1:ca:cd:d2:fa:ca:79:5e:4f:d3:b1:b6:31:e2:db:c5:f7:
dc:e3:6e:3b:0d:7d:86:13:aa:33:4f:fc:46:d4:0f:88:6b:50:
06:0b:9d:c3:9c:6f:56:c2:f6:20:c8:dc:6d:ce:f9:d9:fe:a7:
20:99:5d:c0:c9:92:eb:2b:da:2a:ac:1d:d4:eb:6e:c1:b3:55:
1e:ac:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:05:13 2025 by rpki-client