Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/02DN_gznIfsZZeYb_yKpVaus1eE.roa
File: 02DN_gznIfsZZeYb_yKpVaus1eE.roa (raw, json)
Hash identifier: Al/TZ32Md4MRERGfAY4tWPc87qkpZMMqWoLz80OGwRs=
Subject key identifier: D3:60:CD:FE:0C:E7:21:FB:19:65:E6:1B:FF:22:A9:55:AB:AC:D5:E1
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018CC7953F534343AA5CDFD23745A2ED553C
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/02DN_gznIfsZZeYb_yKpVaus1eE.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.33.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3f:53:43:43:aa:5c:df:d2:37:45:a2:ed:55:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d360cdfe0ce721fb1965e61bff22a955abacd5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:33:ba:74:e9:f2:61:7c:a5:b2:31:66:f5:
a1:b4:34:f8:de:65:77:5f:4e:f5:87:c5:11:a2:26:
f8:fa:51:5c:66:a1:9f:fb:c6:d6:4d:e6:2f:1e:fa:
f6:00:f0:57:f5:98:a2:0b:ec:46:86:f9:62:7d:73:
9f:d5:cb:1d:b0:6f:ec:07:61:99:0f:32:01:f0:ab:
f1:0a:05:94:fe:2f:d2:b3:38:ab:87:5a:c3:7a:8b:
9c:1f:c8:35:9a:cf:f3:d9:0c:41:29:a5:cf:bf:3e:
7a:99:3c:5a:8e:5a:96:9a:6f:80:17:f0:a3:88:96:
03:b8:c5:3a:92:53:28:6f:06:04:9d:cc:66:77:4e:
e4:56:3d:c0:f4:7a:5a:d2:41:40:71:eb:df:5c:f1:
b3:68:d0:4c:57:fc:70:84:53:11:29:75:d5:8a:76:
b2:04:b8:d7:df:08:ef:d0:c3:90:30:9a:bf:31:a4:
85:f0:03:db:1c:dd:58:36:5e:ec:39:e0:a6:0c:d7:
85:26:4c:f2:fd:a6:15:5f:ee:84:38:f0:c1:9f:63:
5f:d2:0b:82:1e:dd:d3:73:28:35:e4:d2:1a:ee:9f:
25:b3:90:01:54:e8:43:88:73:31:7b:b8:35:e2:aa:
a8:bc:7e:af:fa:92:6c:65:2d:35:d4:85:e2:89:45:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:60:CD:FE:0C:E7:21:FB:19:65:E6:1B:FF:22:A9:55:AB:AC:D5:E1
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/02DN_gznIfsZZeYb_yKpVaus1eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:21:3e:1f:44:9c:d6:cd:65:0d:d2:10:aa:b7:27:04:a1:92:
3d:fc:8b:e1:11:c9:4b:44:6b:45:60:bd:0c:44:e8:30:ca:bd:
6a:d5:ca:dd:43:92:eb:92:a3:fd:f7:c9:2c:d1:44:b2:49:4d:
fd:8b:77:37:a2:06:8c:cc:7e:9e:14:a5:6c:2b:73:33:f3:f3:
7e:1b:bd:a5:b0:95:34:6f:96:db:24:8b:4d:fa:43:79:e2:73:
89:2d:ca:c9:69:ca:2c:08:1b:80:3d:64:98:ad:b5:12:09:d9:
12:93:06:49:4d:0e:0c:88:17:fe:6a:6b:56:95:57:11:50:9e:
c5:13:41:d7:01:ad:8c:5a:19:04:03:2c:af:c6:06:41:1f:90:
8b:75:3c:59:e9:21:24:4a:1e:9a:13:d2:85:ff:18:c2:87:af:
65:5e:e7:b9:36:22:99:19:c4:54:a0:7f:8e:c4:4f:6c:63:a8:
19:c3:e5:ea:62:eb:4a:ba:bf:ce:7f:73:70:bd:82:52:db:67:
77:44:9c:ce:6a:38:4f:ca:2f:f5:54:b7:e8:9a:6c:fa:df:31:
c2:e0:a7:3b:7b:d3:96:b6:0e:9a:5c:79:c4:e5:9b:9d:a7:a6:
2d:37:a7:5a:45:d0:7b:fc:b8:06:18:08:0b:d0:46:a4:5f:f4:
56:a8:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:54 2025 by rpki-client