Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_3APHfoUpRJP_UjcByibUN8GUBA.roa
File: _3APHfoUpRJP_UjcByibUN8GUBA.roa (raw, json)
Hash identifier: nW0fGfvZH2E80JjCTkntgI2/2pVE0C1X4XnAvDc6aTs=
Subject key identifier: FF:70:0F:1D:FA:14:A5:12:4F:FD:48:DC:07:28:9B:50:DF:06:50:10
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01936CE9ECCA2D053E93C94C69D37D9AA5C0
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_3APHfoUpRJP_UjcByibUN8GUBA.roa
Signing time: Wed 27 Nov 2024 09:18:09 +0000
ROA not before: Wed 27 Nov 2024 09:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.168.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 22:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:e9:ec:ca:2d:05:3e:93:c9:4c:69:d3:7d:9a:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 27 09:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff700f1dfa14a5124ffd48dc07289b50df065010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:8f:76:86:bd:2f:cd:63:78:e7:29:8f:43:
27:44:f7:20:f3:ef:d2:29:40:d3:60:2d:7f:16:2b:
d7:83:00:fe:b2:ca:f8:aa:bb:b9:bd:bd:67:a3:6e:
32:37:82:4b:56:19:ff:e2:3d:6d:af:8c:9c:fa:ac:
f7:bb:af:cd:f3:5d:2b:d4:bf:26:68:ec:ce:03:3f:
4c:c4:b0:11:3e:f0:f4:bd:db:8b:a6:84:61:6a:3b:
27:1e:e7:ab:d7:00:0b:d8:93:69:33:38:9e:c8:60:
5b:b3:c8:77:12:73:54:ae:95:a0:33:86:63:7b:45:
f5:4f:34:a0:e5:55:13:80:44:d6:a6:89:d5:7b:b3:
c1:ef:af:6e:cb:77:a1:d5:64:e5:25:60:f4:76:bd:
3e:01:97:31:c3:2c:7d:60:5f:24:6c:91:18:3e:7d:
68:de:af:97:05:0c:d6:50:83:04:64:b5:07:57:3e:
6d:d8:80:ac:10:bb:45:9a:f2:36:f0:be:ca:39:ec:
cb:d2:c0:89:e7:47:68:d3:f1:b4:36:ec:2a:a8:43:
6d:25:58:65:fd:93:d6:c6:30:05:32:65:4a:43:5f:
41:bb:93:1c:af:0f:3f:c2:8e:45:7e:07:70:4e:0c:
6f:8e:90:74:1d:23:29:64:b9:ac:90:07:58:e9:a4:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:0F:1D:FA:14:A5:12:4F:FD:48:DC:07:28:9B:50:DF:06:50:10
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_3APHfoUpRJP_UjcByibUN8GUBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:6a:bd:c3:57:dc:fc:99:3b:e5:f6:c1:50:ab:e7:57:12:
06:46:31:76:41:cc:76:31:eb:64:c6:c0:ed:f3:1b:e4:b3:a6:
8a:be:8b:77:59:b6:45:30:22:a2:bf:e7:c9:f3:21:2b:4c:06:
bd:f5:a8:42:5f:05:1e:b6:7d:3d:ed:64:c2:e3:83:74:d7:d0:
71:46:8d:06:67:4a:e5:0d:b2:4a:98:14:21:76:2f:da:ff:36:
b0:66:01:e1:fb:0d:c2:4c:73:ae:82:25:d3:27:c3:b1:71:a8:
94:14:ec:92:bd:ff:c9:52:d8:e6:6c:45:89:3a:de:03:df:fa:
09:a6:2d:76:22:5c:64:5a:9c:51:21:69:6e:21:a6:0d:f0:22:
ca:1d:5b:af:cf:71:05:c2:b6:81:f3:bd:ec:29:61:0e:fe:f8:
dd:79:df:c5:03:7b:bd:a3:e1:44:c9:d8:6b:40:6e:03:0b:a3:
77:82:b3:d0:fb:a0:2f:52:00:0b:d4:9e:2f:ff:49:3c:51:2e:
11:1e:51:78:1c:20:36:1f:e0:00:36:58:86:43:90:0b:a7:e7:
20:74:7c:18:86:7f:5c:a4:76:c8:bb:c8:78:30:0e:89:30:a7:
fc:18:b0:ed:16:d6:d9:a7:a2:6d:b4:34:d0:a5:36:b5:e3:45:
6b:62:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:13 2025 by rpki-client