Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/OzdiGl9R47v1_xZ44PXRNgw8gZ4.roa
File: OzdiGl9R47v1_xZ44PXRNgw8gZ4.roa (raw, json)
Hash identifier: b3IL9nrRNwebgDN0sZUwet1wLc9aqVu189SXBXAfgK8=
Subject key identifier: 3B:37:62:1A:5F:51:E3:BB:F5:FF:16:78:E0:F5:D1:36:0C:3C:81:9E
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019388BCBBC84E3CE22F6088B014700C9FB7
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/OzdiGl9R47v1_xZ44PXRNgw8gZ4.roa
Signing time: Mon 02 Dec 2024 18:58:10 +0000
ROA not before: Mon 02 Dec 2024 18:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142113
IP address blocks: 176.98.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:bc:bb:c8:4e:3c:e2:2f:60:88:b0:14:70:0c:9f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Dec 2 18:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b37621a5f51e3bbf5ff1678e0f5d1360c3c819e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:19:3e:18:3a:50:17:c8:da:4a:a7:55:53:
dd:8e:40:01:08:c6:e6:83:4d:d1:fb:5c:06:82:0e:
ba:36:2a:86:4b:4a:cc:33:1d:db:ff:7a:08:2a:d2:
72:78:75:25:71:4b:95:f4:46:2b:e9:ae:64:9f:bc:
cc:1e:60:86:6b:f2:19:25:f5:e2:1a:b4:78:2d:11:
12:af:5b:5b:d4:d1:33:00:08:7f:14:b5:e8:7c:4b:
e2:de:bc:02:3d:f9:d8:2d:0e:68:84:51:2b:8f:d7:
98:c6:f8:10:a7:e4:c1:c5:3e:fe:46:d7:52:ff:ec:
ec:d5:c2:78:c0:68:f1:76:ec:74:f9:d2:e1:fa:88:
47:bd:5e:28:5c:49:d1:4f:af:a3:06:a7:7a:01:63:
6e:09:0f:c0:19:f1:e0:96:53:fc:5b:b1:f5:9b:bb:
f4:70:eb:8b:4c:a4:42:d6:05:b2:0c:28:4c:8d:0d:
0e:df:fd:71:56:2b:0a:5e:38:43:5a:e0:cd:57:04:
94:80:c0:4e:64:5b:fe:21:d9:f2:55:d1:3a:62:46:
b5:38:53:d2:c4:fb:1a:34:fc:e8:25:da:a6:90:c5:
ed:bd:87:2c:43:4f:ed:4f:e6:ac:b9:46:c3:3f:f1:
e0:bd:10:b8:f4:53:9a:4c:a5:4e:3a:17:43:90:39:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:62:1A:5F:51:E3:BB:F5:FF:16:78:E0:F5:D1:36:0C:3C:81:9E
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/OzdiGl9R47v1_xZ44PXRNgw8gZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:14:06:66:5c:9d:8e:54:67:ac:bb:ae:da:21:7b:22:59:76:
3a:59:26:19:73:be:2c:fc:ab:74:71:4f:18:ec:96:84:70:70:
e7:cd:a9:5a:fd:a0:b8:0a:ad:59:12:da:6f:bf:7e:df:a5:27:
8d:0e:67:21:9a:a1:81:2a:ac:f5:a7:47:fa:64:cf:3c:a6:22:
0c:c9:c4:eb:75:b5:31:21:b9:8c:12:b6:f8:f7:6f:0c:37:8d:
bd:33:23:f9:7e:d7:6d:a4:44:65:47:83:46:69:70:c2:0c:b7:
44:b8:7f:2d:5a:46:d3:80:ea:c4:e4:1d:5d:49:45:d3:16:44:
4d:a2:3d:7d:23:d5:1d:2f:5f:5e:a8:59:a3:6f:b9:25:27:e3:
1e:93:a4:d7:e7:bc:f5:30:03:36:95:88:24:7a:76:ba:cf:6c:
42:04:eb:ff:ed:d1:75:a9:8c:36:52:a6:ac:5b:d9:49:e9:4f:
df:a8:20:b7:25:b6:37:b9:e2:5e:96:0b:8e:86:56:83:fd:7a:
1b:8e:5b:6e:1e:f2:69:d4:1c:c7:eb:46:09:5c:b2:0a:01:fa:
a6:33:2e:45:69:99:29:e2:a4:29:a8:6e:95:39:62:2c:d9:a7:
3b:b2:c0:77:3f:45:3a:f2:19:f0:8c:6b:23:1c:de:14:4f:d6:
8c:5d:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:21:31 2025 by rpki-client