Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/XTgtaZpsrpjKlqdIdDaxeItaAzs.roa
File: XTgtaZpsrpjKlqdIdDaxeItaAzs.roa (raw, json)
Hash identifier: aQWrQFDPDO819JZHc6SLTfMlovNKDPu5NbMY83YznsU=
Subject key identifier: 5D:38:2D:69:9A:6C:AE:98:CA:96:A7:48:74:36:B1:78:8B:5A:03:3B
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194976EC4C61FBE38253159F578661433A4
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/XTgtaZpsrpjKlqdIdDaxeItaAzs.roa
Signing time: Fri 24 Jan 2025 08:30:06 +0000
ROA not before: Fri 24 Jan 2025 08:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5411
IP address blocks: 193.44.76.0/22 maxlen: 22
193.44.76.0/23 maxlen: 23
193.44.78.0/23 maxlen: 23
193.44.172.0/22 maxlen: 22
193.44.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 24 Jan 2025 09:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:6e:c4:c6:1f:be:38:25:31:59:f5:78:66:14:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 24 08:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d382d699a6cae98ca96a7487436b1788b5a033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:dc:ef:b5:b3:50:ef:62:12:32:fe:b0:f8:
72:93:59:41:3d:84:b4:a8:53:98:15:55:bf:8a:eb:
07:4b:8b:d5:1d:e2:17:3d:69:6f:8f:a2:55:b2:81:
b8:eb:81:be:9f:5d:8c:27:7f:f0:04:ba:42:0c:cc:
d1:c2:09:5e:8d:9d:e7:de:f3:88:53:e2:ae:e5:c7:
1b:5e:ff:b6:26:cf:8b:f3:c9:72:e3:40:a0:0b:18:
e0:5e:ff:91:f1:ed:42:61:7f:09:20:d7:94:3d:8c:
5f:e0:d5:e2:a8:23:55:64:8b:c7:22:16:05:c2:fc:
e0:ee:f2:58:f5:d5:d6:8c:3d:e1:f3:d9:40:c7:4f:
08:8f:f4:b5:41:b4:a4:46:34:c0:16:78:36:b0:68:
85:b7:c4:f5:1c:16:bc:f1:5e:95:b2:03:01:a0:fb:
55:d1:11:84:89:be:f2:54:b4:f8:64:92:a9:9a:41:
86:51:59:16:6b:74:9d:96:f3:0a:42:c1:37:c7:92:
74:af:09:bc:07:fd:0c:82:a9:04:d6:7e:9b:13:28:
33:99:cc:e7:45:33:7a:d3:be:53:c4:af:bb:d1:37:
7b:fc:a9:2a:b6:71:19:4f:a6:81:66:96:ac:76:bf:
2b:d8:a3:48:ad:cf:e9:a1:a2:e2:8f:b7:c4:7f:42:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:2D:69:9A:6C:AE:98:CA:96:A7:48:74:36:B1:78:8B:5A:03:3B
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/XTgtaZpsrpjKlqdIdDaxeItaAzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:c1:ed:cf:03:c9:81:c3:71:c0:92:3b:74:7e:37:94:44:d7:
de:78:8a:4b:eb:a3:f6:4a:07:37:41:0f:16:34:b8:b8:58:cc:
68:8c:1f:f4:32:8a:0d:4b:78:16:1a:b9:cb:ec:3a:fb:c4:52:
1e:79:55:78:f8:59:50:08:8c:0f:b8:02:1b:c0:16:7b:ac:13:
27:4d:6b:a6:1a:2e:bf:81:53:50:ca:04:43:eb:8f:82:cf:25:
83:ed:e5:6d:66:76:ba:65:eb:4b:e1:86:fa:60:45:89:45:b7:
1c:74:67:1f:53:7c:18:b9:cf:7c:c8:a1:c1:30:07:4b:8f:73:
2c:31:60:15:bd:3d:da:ed:2c:02:6c:f0:d4:9d:80:4f:f7:45:
cd:b2:bb:6e:1d:c9:ee:f0:cc:e1:7c:14:75:79:ba:5c:a6:6c:
d9:3e:05:c3:35:e7:1b:f4:a0:84:14:76:de:41:2b:26:00:3e:
76:2c:dc:00:c1:fa:65:d2:ea:89:b1:e1:b5:84:7c:4e:da:44:
2d:38:a2:9f:b9:dc:2f:62:3f:5e:22:d2:f6:98:ef:77:b5:d5:
64:77:cf:c7:ef:57:e7:ae:af:6f:23:1d:67:03:52:8e:2c:09:
60:73:be:37:7c:e2:13:ec:6a:4d:86:1d:48:46:ea:d4:bb:75:
ad:ca:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:46:56 2025 by rpki-client