Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/rCR0qoBqbxzNfOJzMB-ndpE3gt0.roa
File: rCR0qoBqbxzNfOJzMB-ndpE3gt0.roa (raw, json)
Hash identifier: wV2MuxA/qnbYD8w8w9D5Mg5LU3LXaYLqYlNJF+AQsbU=
Subject key identifier: AC:24:74:AA:80:6A:6F:1C:CD:7C:E2:73:30:1F:A7:76:91:37:82:DD
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0190C97964849F746B4B2568C2ED493EAC50
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/rCR0qoBqbxzNfOJzMB-ndpE3gt0.roa
Signing time: Fri 19 Jul 2024 05:31:34 +0000
ROA not before: Fri 19 Jul 2024 05:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.160.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Dec 2024 11:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c9:79:64:84:9f:74:6b:4b:25:68:c2:ed:49:3e:ac:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jul 19 05:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2474aa806a6f1ccd7ce273301fa776913782dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:03:a2:18:4c:f1:4f:0d:1e:19:02:58:c8:
a2:a6:8d:87:32:d8:aa:ba:c9:7b:9c:3a:b1:15:34:
f1:6c:d3:d5:b7:68:7f:60:1b:f6:5f:77:ba:ee:1e:
c6:9e:b2:30:4a:7a:40:ec:9b:d2:65:d9:77:e2:d7:
19:32:df:06:6c:ea:fc:e7:fa:75:ec:d5:c3:81:7c:
6b:64:0e:03:59:17:c1:9c:9a:ab:ae:fb:f1:94:0a:
09:04:0a:69:7f:62:ba:8d:5e:63:0a:31:d9:fb:3a:
fa:a8:da:6a:0c:fc:e3:07:11:27:84:33:9e:eb:ec:
0f:e6:90:77:91:1a:fe:02:03:d5:3a:b4:40:2f:2e:
64:f1:a2:1b:8e:86:95:6a:7f:c8:68:bc:4e:7d:a7:
d5:2f:61:68:e2:59:b0:2b:0d:05:85:43:6b:1b:c3:
3c:d0:fd:0e:1e:2d:9b:cd:21:c9:b8:17:84:d6:52:
83:8c:ad:1b:c2:e0:a6:36:38:d8:ee:5d:aa:0a:07:
46:56:58:e4:d8:16:33:04:a3:9d:f8:a9:d6:62:3c:
be:c3:68:54:dc:43:a9:b5:5f:54:ae:b0:e5:d4:7e:
7a:d8:da:1e:ab:dd:9b:9d:b2:be:c5:e8:3b:44:8c:
08:62:ab:30:3a:01:93:31:a1:5e:b8:f2:32:f7:0b:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:74:AA:80:6A:6F:1C:CD:7C:E2:73:30:1F:A7:76:91:37:82:DD
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/rCR0qoBqbxzNfOJzMB-ndpE3gt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ae:47:0b:7f:bd:3a:5a:b7:44:5c:17:4c:ae:af:97:08:b6:
de:46:40:8f:b5:7a:8e:a7:7c:7d:3e:c8:4e:be:c6:a6:21:e1:
65:1a:14:1d:08:3d:31:36:90:9a:61:94:95:42:21:b8:62:a3:
d2:9c:d5:0d:b3:81:fd:94:87:96:1a:ba:f5:87:84:6d:9e:70:
9c:21:d0:28:be:e4:ef:33:d8:7b:7a:0e:7e:2e:92:05:7f:8d:
8b:02:86:3d:5e:c3:9b:56:a8:b8:78:49:5f:41:54:c6:28:2a:
e6:79:4a:b7:0f:3f:d7:ec:63:9f:09:0e:18:04:22:1d:9d:10:
b0:83:7d:ca:c0:21:b9:65:d5:a0:fd:ba:a9:96:72:35:5c:a7:
76:36:45:a8:07:f7:a9:c5:c6:30:35:ad:a9:63:24:33:c4:db:
a7:c0:b0:9e:c8:d0:05:3f:9b:a0:14:81:54:cf:ed:da:1e:ea:
b5:e7:cd:9d:9e:42:fa:a7:48:13:1f:f2:19:d5:fe:a0:45:cd:
b2:dc:a8:e8:bf:19:26:c3:1c:f6:cb:73:0a:ec:8f:a2:d5:68:
60:0d:ab:98:f0:fd:c3:2f:84:59:ba:50:88:86:55:10:12:29:
06:3a:86:0c:28:e8:43:7a:a2:30:35:4f:20:a8:d0:d5:0e:36:
6c:68:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:34 2025 by rpki-client