Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/AOOf1RRSi-9spleHibMT9bIgy9w.roa
File: AOOf1RRSi-9spleHibMT9bIgy9w.roa (raw, json)
Hash identifier: k8CGqZ+/tvwWZOrq/H8atyImj3JsqmNjrI+BctE/b2U=
Subject key identifier: 00:E3:9F:D5:14:52:8B:EF:6C:A6:57:87:89:B3:13:F5:B2:20:CB:DC
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019362CE10A59C69517B9DE148DCCBD9A0B5
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/AOOf1RRSi-9spleHibMT9bIgy9w.roa
Signing time: Mon 25 Nov 2024 10:11:32 +0000
ROA not before: Mon 25 Nov 2024 10:11:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57370
IP address blocks: 193.247.166.0/23 maxlen: 25
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:ce:10:a5:9c:69:51:7b:9d:e1:48:dc:cb:d9:a0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Nov 25 10:11:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00e39fd514528bef6ca6578789b313f5b220cbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:b0:77:8b:12:09:36:2c:b3:dc:23:ae:66:
2a:0e:a7:4f:ed:c0:80:c1:29:f3:40:4d:f6:a3:80:
37:ca:fa:42:af:2b:af:a8:b3:ab:c9:53:c7:4e:be:
b0:2d:ff:bf:b7:a5:91:27:de:70:f3:4a:af:55:92:
c3:9a:6e:44:b1:3f:4f:8d:e2:cf:46:1c:a0:78:5d:
44:7f:f4:22:ce:0a:58:7a:8b:83:b7:83:91:67:c7:
ed:72:28:5b:e0:85:f3:0a:a4:0c:6d:68:3a:e1:b6:
46:c1:72:d8:d6:38:e8:16:d9:28:72:c5:65:7d:a1:
dd:79:a1:2b:d5:bb:4e:9b:72:10:b3:48:a3:80:ac:
fe:09:f6:12:ff:96:c0:c6:4f:fa:0a:77:be:35:cd:
f8:e2:c8:46:61:6e:b5:fd:36:b1:46:97:5d:b6:e1:
31:22:55:3d:71:18:fe:cd:44:50:96:d2:90:f4:c1:
c0:5a:97:a0:5e:87:c7:41:35:25:32:1a:18:ed:60:
08:0d:31:5b:5f:b2:8a:06:8a:4f:b3:5d:4c:c8:fb:
3c:29:af:c4:b7:71:72:26:4b:34:22:ba:5a:a9:d4:
99:1e:78:77:5d:34:63:67:79:14:7b:9b:e1:2e:7c:
1e:ed:97:10:b3:5d:d4:ea:05:56:75:82:55:00:4b:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:9F:D5:14:52:8B:EF:6C:A6:57:87:89:B3:13:F5:B2:20:CB:DC
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/AOOf1RRSi-9spleHibMT9bIgy9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.166.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:c9:25:62:e1:05:41:da:a5:8e:d8:a1:2c:ce:72:9d:b4:07:
6b:ca:c8:19:2f:7d:c2:87:a6:09:dd:4c:e4:6e:95:d6:d0:c2:
ca:69:cb:a0:e5:21:c3:ca:40:a8:1a:c5:bb:fc:f6:d9:bc:25:
ef:ee:0c:68:a1:30:57:52:83:24:a9:6e:7d:dd:32:13:9c:7a:
ab:d8:9d:b2:01:6f:75:db:87:00:a5:58:cf:52:3c:6d:eb:be:
3f:7d:1c:82:0b:41:9c:2f:f9:7d:65:21:63:ca:7a:43:81:75:
b2:9a:15:fa:95:3b:eb:a7:0b:99:62:92:12:1a:7c:23:be:a7:
2b:fa:80:73:42:a4:a8:0a:77:9b:4a:ea:2f:e2:24:ac:8f:21:
36:3f:e0:f2:29:a8:0a:54:08:ef:69:9a:9c:6b:86:72:70:18:
24:67:b7:be:52:18:06:f0:98:93:55:3b:f1:25:08:fa:f0:a0:
bc:b1:ef:41:95:88:fa:49:5e:12:47:ad:b3:d5:ad:8b:b3:e3:
b1:f7:6d:e6:d9:11:21:60:67:54:1d:0a:f4:54:3b:04:16:7d:
1c:81:72:39:4a:71:13:00:3c:02:49:1b:19:71:5b:98:6c:bc:
17:02:c1:1e:7b:77:76:18:42:47:fd:d3:18:7b:18:b2:9e:a5:
8f:c3:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:46 2025 by rpki-client