Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7Nge8g2YgqQHibanpynjc_6Lu3E.roa
File: 7Nge8g2YgqQHibanpynjc_6Lu3E.roa (raw, json)
Hash identifier: FXPcE6tIcY4FpTcQ0gQh+6fWGNXS1EssmOXKl9rDsGc=
Subject key identifier: EC:D8:1E:F2:0D:98:82:A4:07:89:B6:A7:A7:29:E3:73:FE:8B:BB:71
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0193977F1BBB81AF438C0D57CE90AC097EAC
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7Nge8g2YgqQHibanpynjc_6Lu3E.roa
Signing time: Thu 05 Dec 2024 15:45:10 +0000
ROA not before: Thu 05 Dec 2024 15:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211462
IP address blocks: 188.119.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:7f:1b:bb:81:af:43:8c:0d:57:ce:90:ac:09:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Dec 5 15:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecd81ef20d9882a40789b6a7a729e373fe8bbb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:13:54:db:8f:80:91:e6:ca:a3:54:75:7a:
06:60:81:25:cf:65:78:e0:74:d6:74:6a:dc:7a:43:
9c:b3:5b:74:9d:87:43:dc:34:4e:6b:7b:7d:f8:90:
05:0b:bb:ce:e2:b7:9b:df:55:58:86:4a:79:bc:db:
06:cb:79:db:ff:25:f2:7b:f7:b0:95:88:20:74:8a:
dc:80:27:9c:9e:b1:11:a6:b4:43:a8:9c:e0:1c:72:
59:ae:ee:2e:25:32:63:97:97:03:4b:4f:e7:db:44:
85:23:92:79:a3:2f:1b:51:50:a3:07:14:4d:5e:41:
8a:51:3a:0b:6e:a7:d4:3c:49:22:35:19:f6:18:79:
3a:6f:58:65:59:d3:6a:86:36:b5:32:37:20:00:ee:
fb:1d:fc:f0:2f:e8:73:a3:76:27:5d:f8:58:e9:fe:
a2:90:cb:77:31:6c:3b:63:89:4e:67:1b:0c:0c:21:
86:de:59:a7:85:5e:3c:bd:56:81:a2:6c:bc:51:4c:
61:dd:6a:9b:97:ed:f1:f7:6f:03:0d:72:f6:8a:2b:
67:a5:f7:8a:85:a1:66:cf:32:a7:4b:65:df:7f:7f:
21:ca:5f:f4:be:56:26:23:96:bb:f6:c2:cb:00:5b:
79:e8:58:15:e3:15:19:6d:c3:52:87:88:7b:6d:05:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D8:1E:F2:0D:98:82:A4:07:89:B6:A7:A7:29:E3:73:FE:8B:BB:71
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7Nge8g2YgqQHibanpynjc_6Lu3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.191.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f8:63:f9:a9:2a:51:00:92:0b:0c:7e:57:0d:07:91:8b:98:
79:c9:91:4e:85:46:07:fa:30:30:f6:6e:38:a9:94:2f:5f:6e:
51:bd:d8:c2:0a:e1:ea:3a:89:53:0a:8a:bb:c6:2f:e0:3f:c5:
77:c0:5c:0a:a7:b3:7d:c5:8e:15:d6:6c:d4:f9:64:ca:6f:5e:
74:38:42:86:29:56:f7:ab:69:6e:65:13:33:da:a4:4f:08:ab:
2f:e4:94:f5:82:66:f2:b0:a7:24:96:2a:68:13:49:81:4d:6c:
db:27:d2:d5:59:48:80:c8:fa:98:f7:67:6f:25:a2:4d:9c:b4:
53:d9:fe:7f:4d:d2:b7:08:e0:b6:b8:0c:af:f3:a6:36:cf:be:
8b:9e:b5:9e:5b:9c:b9:28:ee:c6:7c:0b:25:e9:8e:24:af:7d:
b2:9c:e4:75:c9:0a:95:03:61:57:f7:14:0d:42:ea:93:df:63:
a0:20:05:48:11:aa:76:dc:df:82:77:1c:70:70:d0:c2:4f:20:
8b:9d:99:c3:ce:c3:06:33:11:4a:46:d1:74:7c:ca:57:96:25:
7d:0d:cd:2c:93:4f:52:13:b3:b0:bb:fb:6e:57:5e:93:b8:5d:
c4:26:27:05:29:e0:4d:75:32:b5:6e:29:bf:dc:ad:bd:89:27:
60:a5:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:24:11 2025 by rpki-client