Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/qRLH5nwjcmbv4W9mHexXJ89zFbs.roa
File: qRLH5nwjcmbv4W9mHexXJ89zFbs.roa (raw, json)
Hash identifier: aZ242YX6AmmDvH3o5h2oeo2Aj6CCyqgpmoVzgtlxYTk=
Subject key identifier: A9:12:C7:E6:7C:23:72:66:EF:E1:6F:66:1D:EC:57:27:CF:73:15:BB
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 0193DF18CA1C40C7FF85409CF7E729EE72C2
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/qRLH5nwjcmbv4W9mHexXJ89zFbs.roa
Signing time: Thu 19 Dec 2024 13:26:03 +0000
ROA not before: Thu 19 Dec 2024 13:26:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60751
IP address blocks: 93.157.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:18:ca:1c:40:c7:ff:85:40:9c:f7:e7:29:ee:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Dec 19 13:26:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a912c7e67c237266efe16f661dec5727cf7315bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:33:a6:22:4a:fb:66:a1:f0:7a:84:ab:86:
68:7c:2f:85:a3:e5:1b:d1:2d:ab:d0:e3:81:2c:2f:
ca:1f:55:4b:ba:85:0b:45:5a:94:12:04:32:08:64:
10:4b:51:2a:cf:c5:69:c1:bb:07:0b:99:8d:9b:89:
7d:ef:3a:d2:d3:13:f7:79:48:b0:a0:53:29:b9:46:
4e:3e:2f:93:94:91:da:6f:ca:09:1f:5f:d3:7a:9a:
a1:f4:2d:b1:27:4e:bb:d6:b8:0d:72:e3:11:7d:69:
9a:aa:62:fa:d5:44:30:86:0d:b6:c2:6d:c2:76:17:
00:80:9c:a8:c9:fc:48:ff:cf:9a:13:37:7a:c0:5a:
77:a5:4a:7f:56:19:12:ec:f8:de:94:46:3e:a4:b9:
5c:66:5d:0a:5b:c4:87:b0:1a:de:6b:15:58:8c:36:
e4:8e:6f:32:1d:59:c7:7b:d5:79:91:31:44:6b:00:
58:09:d0:94:77:79:b2:f2:23:dc:ca:ff:07:65:8b:
ca:00:3a:5d:83:66:a1:d9:40:42:16:21:57:a6:1d:
7f:e0:51:34:da:0b:f0:7a:e2:fa:21:aa:1c:dc:e0:
83:29:56:2a:60:85:63:94:2a:31:8d:bf:af:21:75:
62:3b:5b:1e:34:0c:e7:5a:20:a1:2c:86:73:ef:24:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:C7:E6:7C:23:72:66:EF:E1:6F:66:1D:EC:57:27:CF:73:15:BB
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/qRLH5nwjcmbv4W9mHexXJ89zFbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5b:93:3f:f0:18:7a:23:15:f7:4a:d3:d3:6b:34:11:09:4f:
31:b9:00:d1:d5:fd:68:26:fe:37:ad:b6:7d:52:6b:61:0d:45:
c2:6f:16:2a:11:74:4d:de:45:39:76:16:a4:1e:b6:71:79:fe:
ae:bd:1f:29:6a:3f:5b:d3:11:a5:db:6d:cb:db:e1:2d:bc:b4:
fd:85:7c:94:cc:3e:15:c4:67:60:68:48:e2:80:7c:69:95:61:
c0:55:c2:92:15:f8:d8:7f:90:fd:90:2d:01:e2:a5:ef:c9:3c:
69:3d:76:38:5d:66:4e:b1:7f:ab:aa:fd:79:bc:58:01:b6:62:
c9:af:8a:75:de:53:44:ff:78:6f:5d:91:97:a5:02:b2:e7:7e:
4b:9d:8d:4a:16:84:45:0d:f3:06:ae:be:dc:4b:c3:f7:90:f2:
fc:81:b4:32:e7:db:ee:bb:ab:51:42:0a:83:86:23:9e:36:2e:
d9:6f:45:ac:51:44:27:b9:4a:56:c8:bc:b2:e5:7d:7c:78:6c:
53:73:dd:16:00:1d:1c:ab:a3:3a:3d:92:f8:65:d9:0f:cc:d8:
fc:73:51:05:3a:e4:b0:3a:67:1c:b4:68:1d:5e:b0:b8:f8:71:
08:76:ac:6a:90:36:5d:93:34:24:20:cd:25:76:a9:82:88:4d:
12:97:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:04:41 2025 by rpki-client