Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/c10hL6sUKAMlvjIsgDxP3V3FWU4.roa
File: c10hL6sUKAMlvjIsgDxP3V3FWU4.roa (raw, json)
Hash identifier: 2IaGWzn07faxug1cuscXxgboIlwo8XejaHQdU5/HnXQ=
Subject key identifier: 73:5D:21:2F:AB:14:28:03:25:BE:32:2C:80:3C:4F:DD:5D:C5:59:4E
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCDA77CA68DA8759FD1AA9346D1E39
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/c10hL6sUKAMlvjIsgDxP3V3FWU4.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49874
IP address blocks: 188.234.120.0/21 maxlen: 21
2a02:2698:a004::/46 maxlen: 46
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:da:77:ca:68:da:87:59:fd:1a:a9:34:6d:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=735d212fab14280325be322c803c4fdd5dc5594e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:6f:37:21:e5:38:06:d8:ac:61:01:5a:27:
ab:c8:44:c3:ac:3a:96:76:49:b6:10:6f:9d:e0:73:
70:b7:4d:8b:bf:b2:58:5f:6c:3b:7b:24:56:cc:dd:
9f:6b:15:93:6b:73:7e:81:c3:f9:e7:24:7d:f0:1b:
01:17:f9:f6:50:05:f1:f2:5f:2a:5b:ad:59:79:ff:
18:af:7f:5d:f7:f2:78:de:2b:83:cc:62:55:cd:9c:
ed:11:53:47:09:37:70:0e:a6:38:5a:7b:f3:44:6d:
c9:5c:f6:40:c8:5b:97:fd:5c:a4:c2:73:52:ac:77:
a7:07:a1:dc:26:6b:b2:d6:31:ed:b4:cc:e5:af:7a:
ab:15:95:b3:72:88:6d:86:bf:ea:11:a4:b0:02:c7:
0f:ed:4e:bc:9d:60:f5:a9:2e:59:34:8e:e3:60:0c:
d1:1e:3c:c9:47:78:32:64:65:96:a2:46:4d:2f:f9:
64:ed:2f:89:12:e9:fe:e0:e1:bf:e8:d7:bc:6c:c6:
32:e6:88:9f:b9:29:64:53:99:c1:5b:08:ab:3e:42:
8a:a6:dd:26:be:90:ed:e3:d1:b5:5c:eb:cd:23:f5:
3b:a8:85:32:9c:c0:69:6c:72:3a:df:39:e6:00:2e:
49:11:ce:2c:3e:6f:a1:89:60:87:6a:c7:c5:1a:27:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:21:2F:AB:14:28:03:25:BE:32:2C:80:3C:4F:DD:5D:C5:59:4E
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/c10hL6sUKAMlvjIsgDxP3V3FWU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.234.120.0/21
IPv6:
2a02:2698:a004::/46
Signature Algorithm: sha256WithRSAEncryption
ce:95:90:ff:71:d8:43:a2:72:88:0a:7b:a0:87:5e:30:47:a3:
ca:d8:35:e8:f6:eb:8d:15:e1:2c:d2:17:54:3f:53:82:c8:37:
59:fb:1f:a4:f1:30:08:dc:01:9a:00:29:91:9e:80:de:c3:81:
bf:5f:19:e6:27:aa:ea:59:12:4a:28:1c:d8:bb:b5:c1:26:27:
95:e9:bf:3a:05:d5:fe:e7:6d:b3:b4:29:8b:2c:67:a2:26:b5:
11:60:c7:89:1c:92:47:c0:d1:ef:cb:1e:18:70:4d:7c:cf:1b:
f0:44:40:4f:e9:02:4c:d6:1a:83:73:aa:aa:8d:29:93:6c:5e:
b8:c7:ec:60:ae:c6:e0:ee:78:3a:3f:b7:74:37:d6:2d:f9:67:
a1:e1:ed:89:7b:18:2a:62:f8:87:62:bc:f7:95:b6:fd:33:5e:
6f:2d:86:01:7b:02:ad:ee:24:3b:e4:f6:a5:f5:99:1a:d8:46:
20:cb:f5:f8:6c:62:c9:bd:44:df:97:46:f1:8f:b5:b1:f7:ca:
19:fa:a8:2e:e0:4d:21:da:c2:f9:30:da:46:24:44:ad:b4:06:
5b:8f:88:4d:6b:a5:68:96:ad:bb:79:c3:17:48:aa:6e:6d:43:
f6:26:49:a9:68:0a:42:f6:ca:d0:14:3d:66:42:26:57:f5:c3:
2b:50:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:49 2025 by rpki-client