Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/9whcLq25_Zy-P3nFAi1JW4_6uqw.roa
File: 9whcLq25_Zy-P3nFAi1JW4_6uqw.roa (raw, json)
Hash identifier: 1JRng22rRq+WrUpqNWHiQDJn4DcMiK8+PnZ8MkPlQNQ=
Subject key identifier: F7:08:5C:2E:AD:B9:FD:9C:BE:3F:79:C5:02:2D:49:5B:8F:FA:BA:AC
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 01926C6A819A18BEA36F5F83C8DF03B238B2
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/9whcLq25_Zy-P3nFAi1JW4_6uqw.roa
Signing time: Tue 08 Oct 2024 13:56:12 +0000
ROA not before: Tue 08 Oct 2024 13:56:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42909
IP address blocks: 193.223.78.0/24 maxlen: 24
194.180.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6a:81:9a:18:be:a3:6f:5f:83:c8:df:03:b2:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Oct 8 13:56:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7085c2eadb9fd9cbe3f79c5022d495b8ffabaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:43:37:a1:12:25:b9:81:58:a1:bc:b3:a4:
6f:1e:38:9e:54:de:06:a8:ba:a5:ec:11:5b:18:f7:
91:cd:fe:fe:4c:bf:1f:71:b0:fa:f4:e6:2e:b0:d5:
67:3c:ae:a8:37:de:84:3e:5b:cb:4e:48:28:1c:b8:
b5:04:d5:4d:5a:98:d5:87:24:3a:3a:42:1a:a8:c3:
bc:c7:f9:7a:5e:47:86:84:64:2b:17:b4:88:65:f4:
13:d6:be:b4:db:86:eb:d8:2d:8c:3a:00:07:4c:50:
57:a2:b2:99:b9:3a:93:8e:ed:bc:46:c8:ec:23:79:
b2:95:e2:49:81:c4:3f:e8:9c:b0:10:04:d2:9a:dd:
14:fa:d3:1a:9d:19:ad:14:51:b3:34:3a:57:f0:68:
34:e2:2e:a0:ce:b6:76:28:de:eb:ae:88:41:5b:3f:
31:f3:25:38:a4:15:dd:38:97:30:fa:02:f0:fa:0b:
26:a5:ba:16:06:e9:f6:a5:2a:1f:7f:d1:90:59:3f:
00:2e:b7:e8:d5:5e:82:ff:b8:cc:56:ad:bc:03:64:
28:1a:fb:78:3f:ff:e5:c9:6c:50:ca:23:be:34:ce:
37:b4:27:a6:fe:db:60:a3:89:51:8a:ad:76:12:01:
19:3b:00:88:82:6b:97:eb:cd:e1:01:5f:96:00:4c:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:5C:2E:AD:B9:FD:9C:BE:3F:79:C5:02:2D:49:5B:8F:FA:BA:AC
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/9whcLq25_Zy-P3nFAi1JW4_6uqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.78.0/24
194.180.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:63:ff:b2:c8:29:63:83:29:a3:50:5a:07:a2:a4:c8:ed:b8:
7a:48:c7:52:fd:06:7a:01:29:08:7b:32:fd:de:3a:29:85:97:
f7:ba:3e:59:e1:ee:a3:c7:10:7e:9d:a7:a5:59:8e:34:1d:34:
81:36:cc:6a:60:35:0d:38:65:26:85:9d:56:26:0c:6d:7d:31:
c4:fc:db:08:52:54:5c:03:2a:ec:21:2f:96:f1:5c:5c:4f:50:
c8:64:1d:7c:ae:81:fd:e2:57:f9:cf:e6:b7:77:be:af:a4:3e:
d1:2a:03:b2:ff:66:e7:08:1d:a5:aa:e9:a3:3d:b0:b5:1b:c2:
c3:11:7b:d9:6b:0f:38:2d:7d:2a:d4:a0:ad:c0:88:6b:90:41:
bf:e7:29:da:b2:22:e7:91:50:64:34:f1:fa:6b:dc:8f:89:ea:
de:3c:7f:30:fc:cf:ef:ed:4e:cb:e2:69:c6:b2:b5:0b:61:b6:
79:8a:cb:93:10:15:41:4e:4a:02:7a:66:d9:14:7c:ec:77:6d:
88:34:71:ec:87:c3:63:74:bd:dd:43:20:f8:fd:a5:4a:d5:7a:
a7:54:40:bf:23:af:6f:cc:c3:46:8a:39:c4:70:00:0d:0a:16:
8d:4f:c7:18:a0:0b:08:9b:d7:aa:87:ee:79:16:51:96:10:ad:
4d:3a:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:37 2025 by rpki-client