Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8OwEByMV1gJqBxoBPgDOSpxuvqw.roa
File: 8OwEByMV1gJqBxoBPgDOSpxuvqw.roa (raw, json)
Hash identifier: hY9kpJETGNfCoM40WDVjbCOJ2MqgOgLgT8NZ/FWpJmo=
Subject key identifier: F0:EC:04:07:23:15:D6:02:6A:07:1A:01:3E:00:CE:4A:9C:6E:BE:AC
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FEF53486DF7859F6BB2F6DFE1032F
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8OwEByMV1gJqBxoBPgDOSpxuvqw.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 193.168.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 16:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ef:53:48:6d:f7:85:9f:6b:b2:f6:df:e1:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ec04072315d6026a071a013e00ce4a9c6ebeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:e3:72:bd:ba:ec:21:c8:1d:5b:ab:9e:15:
07:a7:89:02:95:1d:83:37:c5:d2:c4:03:a1:98:8c:
30:0f:4f:42:dc:b8:01:19:61:96:24:37:8c:bb:10:
c9:27:b3:2f:05:2e:27:44:63:15:14:df:94:3d:9f:
12:70:6b:15:1b:38:88:9b:b0:62:d5:b1:06:69:81:
06:b3:f2:19:77:eb:b1:55:14:5c:51:d5:ae:91:77:
4c:dc:42:37:b0:59:16:06:e8:86:ab:47:28:29:0e:
8e:1f:32:4c:82:c3:f9:9f:66:11:d5:b9:98:b0:62:
7f:a7:4a:c3:28:41:0b:d5:59:f7:2d:08:68:19:79:
e0:25:c1:b0:f1:53:36:6c:e5:28:79:b7:91:bb:98:
2e:c7:88:80:60:6d:d1:48:26:91:4e:fe:ec:bc:f3:
51:72:dc:8b:94:08:18:6a:8a:09:d0:10:10:68:56:
9f:23:5a:0f:5f:72:9e:68:b2:c5:41:7d:c3:ae:d3:
1f:f6:2a:40:c7:ce:5e:44:bd:92:f3:b9:5c:93:7f:
ec:bf:2e:91:84:a3:c4:3b:83:1c:36:1e:87:52:cc:
dc:67:12:86:82:70:3f:d8:5f:85:83:4a:36:0b:78:
e8:5d:af:8c:e2:8b:52:93:d8:e2:ef:60:fc:0f:d4:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:04:07:23:15:D6:02:6A:07:1A:01:3E:00:CE:4A:9C:6E:BE:AC
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8OwEByMV1gJqBxoBPgDOSpxuvqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.203.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cb:8c:1e:94:8e:37:eb:ab:37:95:f4:38:9e:89:49:f3:cf:
d5:c2:77:7e:ff:c0:a2:04:06:a2:bf:93:6c:5b:70:90:7e:0f:
59:09:82:c2:b4:e8:35:e2:9c:08:b0:88:a0:20:1e:d7:05:1b:
86:70:48:f9:ac:5d:f5:ea:0a:10:7e:1f:95:62:ac:9c:40:c7:
52:76:35:59:c1:1e:4e:c1:93:e0:be:09:2f:bc:68:2b:d7:bb:
e1:77:0e:fe:01:d4:e7:2e:36:5f:ca:59:49:84:18:1a:2a:57:
19:51:6f:dc:a3:67:4d:1b:3d:03:27:21:ed:46:8c:34:c9:14:
09:fd:22:d6:ba:24:f7:44:d1:86:7f:c2:a5:aa:0f:81:18:f9:
00:ba:5f:8d:63:16:e6:ca:7f:5b:07:c6:d4:fe:f0:f0:a8:25:
2e:e6:cb:1f:56:e6:ea:29:f9:03:45:92:ed:43:84:97:b4:fc:
a0:dc:4a:19:81:ce:68:e0:f3:0d:f5:b5:1d:44:40:60:f4:92:
ac:38:29:a6:70:47:86:e2:79:50:9b:e9:6d:9c:54:64:b8:9f:
6c:91:b9:4f:2f:3f:a7:df:9b:cc:3c:94:73:08:98:4a:33:37:
45:59:ce:3e:2a:84:9b:a7:b9:a0:91:60:7e:3e:0f:36:2c:a1:
d3:54:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:33 2025 by rpki-client