Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/tJ43vlQtc6AynJBG52ugHLlHQoA.roa
File: tJ43vlQtc6AynJBG52ugHLlHQoA.roa (raw, json)
Hash identifier: +m6H6FWu0UF5lGr/KPLuYJunPx6Ns1p8iA97lZ0LBq4=
Subject key identifier: B4:9E:37:BE:54:2D:73:A0:32:9C:90:46:E7:6B:A0:1C:B9:47:42:80
Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial: 0193D92756EE8CB4FFF96D23EEE541C60B22
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/tJ43vlQtc6AynJBG52ugHLlHQoA.roa
Signing time: Wed 18 Dec 2024 09:44:14 +0000
ROA not before: Wed 18 Dec 2024 09:44:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8317
IP address blocks: 194.88.238.0/23 maxlen: 23
195.24.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:27:56:ee:8c:b4:ff:f9:6d:23:ee:e5:41:c6:0b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Validity
Not Before: Dec 18 09:44:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b49e37be542d73a0329c9046e76ba01cb9474280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:a9:b4:a4:5b:47:91:f9:bb:a7:9f:db:3d:
50:f1:6f:be:68:90:d8:01:d4:c2:eb:b2:3e:c2:3f:
d4:61:4b:bb:50:09:3d:86:2b:7b:be:1e:0e:27:da:
3b:7d:ae:d5:b8:27:23:b2:5a:0e:f2:4b:c8:68:5c:
19:72:8d:7f:81:6a:8e:bf:4c:b7:76:eb:18:c4:b3:
6d:27:ce:93:e4:74:f4:22:fe:ed:35:ff:52:bc:87:
c5:49:69:25:00:2a:2e:1c:09:c9:8a:75:b1:69:29:
92:55:af:4e:88:c9:af:12:20:69:ee:d7:88:df:f5:
51:93:c8:aa:10:84:52:18:3d:37:ed:84:e3:dd:cb:
05:37:f6:45:83:ca:42:e3:d2:c4:7b:23:ec:fe:bf:
6d:b7:88:b8:3c:fd:67:bc:d6:51:c3:8e:64:ff:f6:
44:0a:b9:53:23:f7:8d:95:b0:ee:02:35:6d:61:7f:
2e:f7:94:d2:4b:b7:3b:5a:94:96:1f:e1:d5:fe:c0:
d9:94:0b:48:ed:f6:f0:d8:0e:b4:b8:88:d1:1d:c4:
54:3d:07:66:8e:84:e1:39:e9:c0:94:ad:b9:10:5e:
d4:e0:1e:05:cf:4b:cf:79:76:28:e7:36:63:ef:f2:
98:f7:4b:cd:77:8a:46:d0:63:be:29:c5:2b:50:95:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:37:BE:54:2D:73:A0:32:9C:90:46:E7:6B:A0:1C:B9:47:42:80
X509v3 Authority Key Identifier:
keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/tJ43vlQtc6AynJBG52ugHLlHQoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.238.0/23
195.24.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:a9:95:35:70:d2:00:6f:a1:fe:e8:34:c9:95:3b:7c:8c:9c:
a1:de:af:b5:54:02:0e:9f:3f:fc:0b:c2:ea:e8:af:a1:87:91:
96:40:c6:fe:1a:6e:f4:96:fd:60:51:d2:f0:5a:0f:af:c4:0e:
04:31:8f:ad:a5:b9:64:14:92:60:14:67:40:ad:5c:3a:f0:0a:
f9:c8:76:98:8c:bc:cf:57:d5:f6:fb:97:6c:45:d8:43:87:a9:
45:43:2e:31:5d:98:1d:5f:29:1c:d3:e9:9f:82:5b:f9:b1:7d:
43:e6:0d:e8:3e:6b:71:a0:c4:6a:b3:c8:f8:7d:86:00:a3:86:
dc:5f:f4:2b:1a:9c:b4:4e:aa:45:5e:24:17:5c:09:29:32:84:
1d:3e:5f:9c:10:43:95:1c:15:de:5a:fb:5f:3f:6e:4b:b5:9b:
3a:10:ca:e3:9a:16:7f:29:d4:31:9c:3b:c2:a2:d2:4c:e8:7b:
ff:a5:6e:c3:60:4b:54:96:83:65:82:5e:fe:e9:e3:4e:d0:06:
56:39:f6:ad:af:55:d1:e4:31:6d:80:d6:71:c8:de:74:2a:4c:
87:d5:57:2a:60:43:82:45:86:06:92:c5:f6:47:8b:a3:05:7c:
b5:1e:b6:97:bb:00:89:09:a7:82:12:7d:5d:a1:f8:78:f7:bc:
31:c1:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:30:48 2025 by rpki-client