Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/bN5npMdan5tH2_C2z5tPzt2qCr0.roa
File: bN5npMdan5tH2_C2z5tPzt2qCr0.roa (raw, json)
Hash identifier: IXf3qP9niPg8Ut4JjwNjveDW5Wqiqc8/RMB/DklsXKo=
Subject key identifier: 6C:DE:67:A4:C7:5A:9F:9B:47:DB:F0:B6:CF:9B:4F:CE:DD:AA:0A:BD
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019427B608005F8FE344E822D15C3E38D5A7
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/bN5npMdan5tH2_C2z5tPzt2qCr0.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43317
IP address blocks: 193.218.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 18:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:08:00:5f:8f:e3:44:e8:22:d1:5c:3e:38:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cde67a4c75a9f9b47dbf0b6cf9b4fceddaa0abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:36:b4:33:44:33:06:87:4f:b7:73:a4:71:
0d:9c:5b:fa:ff:f2:6d:a2:24:44:80:3a:ba:c1:16:
6f:94:73:77:27:df:0b:db:bf:fc:80:1b:b7:19:32:
87:59:40:6b:79:c9:f7:69:f4:8e:0d:34:40:db:42:
9e:b5:cd:93:5b:7e:af:2b:ce:65:df:db:26:0a:44:
bd:3f:28:78:70:3a:e5:ac:0b:4e:ed:5d:48:4e:f7:
db:11:c0:51:84:90:77:3f:90:52:41:8a:b3:e1:a5:
dd:58:d9:24:a3:4b:37:a7:76:4f:ec:b6:84:2c:20:
0c:77:c3:18:66:34:5b:37:3b:cf:d6:b6:3f:06:b8:
a0:88:83:02:42:a8:49:c1:6a:69:15:f4:0a:30:b5:
8d:72:3f:a3:79:16:46:1c:cb:75:03:8a:27:ed:95:
03:25:a7:fd:0c:bf:8d:f8:6c:3a:53:97:ab:db:bf:
d0:26:cc:e5:7f:a4:3d:39:7f:80:57:86:4b:bb:fd:
39:6e:63:34:fa:8e:19:57:b5:0f:ce:b5:e7:e9:a9:
1f:09:b1:71:bf:61:11:ff:a4:23:8b:0b:e5:1e:0b:
47:38:c9:93:98:8f:09:c1:10:1c:83:85:e1:b3:85:
11:6a:c8:8e:7e:21:5d:a5:e7:6d:72:f0:7d:66:3a:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:67:A4:C7:5A:9F:9B:47:DB:F0:B6:CF:9B:4F:CE:DD:AA:0A:BD
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/bN5npMdan5tH2_C2z5tPzt2qCr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d3:03:d6:43:5b:4c:34:bf:6d:ef:94:31:2f:75:89:df:c5:
89:88:b2:11:2f:ca:df:d5:0e:f1:39:b6:4a:b8:60:7f:ca:c1:
44:38:6e:da:b3:07:c5:26:ff:4f:3a:7b:53:29:32:06:ef:38:
d6:b6:4f:6c:91:9c:03:cc:db:c9:52:b9:a1:7b:3f:85:1c:e8:
09:e8:c1:55:68:f6:bc:ed:32:e6:f6:1e:3a:58:b5:dd:29:b1:
39:77:5e:ac:72:9f:6e:1d:20:8f:97:03:46:e8:63:72:ad:11:
01:54:b5:d5:71:9b:ee:ad:ae:94:0f:e1:c0:08:0b:d4:f4:5b:
84:57:4f:be:87:fc:5d:a6:60:e6:8a:93:d1:be:3c:59:3d:e2:
c1:e6:6d:0d:ce:f1:c5:86:7c:9f:a6:ec:6f:43:44:76:a1:94:
1e:83:0c:fd:a6:6a:c4:e1:74:aa:43:fa:eb:9f:3c:04:a4:7e:
ca:5d:2f:d4:22:f7:cb:f9:57:c5:52:fe:a0:d1:eb:6d:cc:8f:
89:75:01:53:2d:65:89:ba:8a:cd:fc:28:7f:71:bc:38:2e:90:
ef:78:ba:b8:ea:a5:ca:6b:50:f3:88:3c:7d:48:2c:88:e5:ab:
c3:c1:4f:84:ce:39:2f:7a:44:f8:86:10:e5:32:af:cc:66:ba:
54:f5:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:46 2025 by rpki-client