Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/wDobpP9R5No3OmsmsVeY7NeNWjs.roa
File: wDobpP9R5No3OmsmsVeY7NeNWjs.roa (raw, json)
Hash identifier: f7J+/rZ/wbdgY1m0BY4be4BQjGfw1/Tou/YJ8bTLWrs=
Subject key identifier: C0:3A:1B:A4:FF:51:E4:DA:37:3A:6B:26:B1:57:98:EC:D7:8D:5A:3B
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0194469777A43849825AB5BF514D50C3283C
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/wDobpP9R5No3OmsmsVeY7NeNWjs.roa
Signing time: Wed 08 Jan 2025 15:45:19 +0000
ROA not before: Wed 08 Jan 2025 15:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59597
IP address blocks: 193.176.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 17:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:97:77:a4:38:49:82:5a:b5:bf:51:4d:50:c3:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jan 8 15:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03a1ba4ff51e4da373a6b26b15798ecd78d5a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:1b:a4:d2:af:0f:6a:bd:63:19:9f:66:56:
c6:90:f7:66:5c:f3:24:5e:9b:ed:0e:80:39:20:41:
73:51:90:9c:ea:58:5c:92:70:7d:02:3c:33:19:1f:
f9:98:8b:7d:79:df:87:7e:68:2a:26:aa:97:bc:e9:
1b:d0:c6:d3:f0:42:21:a9:dc:bd:10:e2:b0:27:90:
11:ea:b6:fe:6a:65:a7:66:b5:48:f0:f8:c5:0f:56:
a5:2c:02:4c:13:f1:6e:58:00:60:ce:f9:1d:29:b9:
14:e5:ca:a7:da:9c:0b:b1:0f:71:1a:a7:0f:f3:6a:
81:c5:87:53:81:53:a3:45:57:f5:da:3a:70:d7:64:
94:a0:af:ef:44:97:2c:4b:b4:d4:ab:d8:00:73:70:
a6:80:a5:71:26:f0:2d:2d:f6:12:99:ed:47:62:e1:
b8:8f:5b:39:99:7a:b6:33:0f:a4:36:12:4c:b5:ad:
42:e7:a4:0f:06:bf:00:bf:0a:e2:90:a0:93:08:b3:
f2:b2:7c:96:d3:2a:57:e4:2c:52:7d:3e:37:bd:99:
50:97:e4:ed:3e:f5:d0:5b:f0:5a:d7:28:07:44:74:
ad:fe:8f:45:e7:3b:28:87:3d:ba:bc:f7:d0:7a:0d:
df:a8:cf:e9:e8:bc:80:fb:ef:20:f9:3f:73:51:cc:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:1B:A4:FF:51:E4:DA:37:3A:6B:26:B1:57:98:EC:D7:8D:5A:3B
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/wDobpP9R5No3OmsmsVeY7NeNWjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:44:55:b4:de:07:5b:13:2e:99:f5:84:dd:94:ff:66:30:
dc:c8:d7:e8:5e:34:b7:a6:bb:20:7f:63:a2:0b:9f:65:bf:27:
45:c3:21:b7:c4:f9:6a:a4:fd:52:71:dc:60:7d:73:ff:65:6d:
ee:ff:21:6e:06:be:fe:71:f8:71:e0:2d:60:06:ad:b3:6c:0c:
26:de:e2:c2:3f:ee:4d:ae:14:af:a4:d0:88:e0:19:d8:ac:56:
74:31:69:2a:ea:3a:5b:e1:a7:a5:de:37:21:b6:bd:97:1f:d8:
7c:ae:31:1b:57:b1:81:19:13:26:97:21:64:ef:d8:dd:00:f5:
ab:3d:2a:42:3f:76:6c:c9:ba:3e:db:6a:e0:c8:e3:2d:cf:07:
32:fb:32:5d:ef:85:5d:9e:cb:5b:25:94:28:d4:1d:ba:4c:76:
7b:3e:8b:20:d3:3a:6d:df:64:b3:69:51:72:97:fe:c3:eb:2b:
f0:89:4b:47:0e:76:e2:55:d4:3c:e1:8e:d1:58:7d:48:1f:b5:
ba:b6:7d:8d:86:87:d1:91:66:13:8d:94:42:45:03:3a:d4:d5:
5f:72:be:8e:b1:4c:a7:12:51:cd:c4:5c:8e:82:81:94:e9:f1:
56:84:c8:b3:8a:55:1e:c9:ac:3e:70:b4:51:2b:11:bf:26:0f:
80:77:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:33 2025 by rpki-client