Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/3reO2cZ9UiMnAGmTCJb6puXyGeY.roa
File: 3reO2cZ9UiMnAGmTCJb6puXyGeY.roa (raw, json)
Hash identifier: vK98TzZo4qXKPGdqiGYh5DjgLZ9eOlvwL+sRXfabzYk=
Subject key identifier: DE:B7:8E:D9:C6:7D:52:23:27:00:69:93:08:96:FA:A6:E5:F2:19:E6
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 018CC94D6C3A552E50688E8DAF799B35F8F2
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/3reO2cZ9UiMnAGmTCJb6puXyGeY.roa
Signing time: Tue 02 Jan 2024 08:32:23 +0000
ROA not before: Tue 02 Jan 2024 08:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211566
IP address blocks: 193.3.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:6c:3a:55:2e:50:68:8e:8d:af:79:9b:35:f8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Jan 2 08:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=deb78ed9c67d5223270069930896faa6e5f219e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:75:c3:04:94:60:12:9b:ff:03:ee:47:f6:
fc:17:9e:e5:a0:a6:9b:4f:2a:d7:60:39:8d:df:9b:
22:b4:23:06:c9:25:fb:79:d9:a5:f1:aa:cc:b7:9b:
40:17:d7:5f:5a:91:d8:25:b2:2e:35:5e:bd:6c:c0:
16:35:30:98:45:d7:34:49:37:e1:fd:a0:37:fc:c7:
0e:54:49:0a:71:22:07:56:b5:b4:cf:0f:9e:b0:82:
81:b6:9b:c9:26:b2:d0:87:8d:e4:55:b4:f1:38:34:
7e:17:6d:2c:fc:ba:a5:08:bd:d5:70:97:bd:f7:4d:
cb:da:2c:58:a2:5c:fe:28:d1:77:ad:ac:0e:49:f2:
76:f4:5f:0e:af:75:3c:74:61:ff:f0:50:42:15:fb:
8b:bd:00:d6:2a:33:b6:15:7f:7c:62:8a:c1:8d:1b:
a6:77:d7:98:de:78:c1:75:4d:33:6b:be:c1:e9:a2:
f9:c2:50:90:36:52:61:46:15:c0:d0:8f:9f:a7:10:
de:bc:9a:55:4e:f3:49:ca:57:9c:e9:52:71:63:01:
9c:86:13:b0:61:09:22:93:8c:82:b3:41:18:c9:81:
f8:e5:af:be:20:2b:a2:60:7f:fc:62:8d:0c:6a:df:
5f:d9:81:42:e7:57:95:41:4e:50:87:82:e9:8f:1e:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:8E:D9:C6:7D:52:23:27:00:69:93:08:96:FA:A6:E5:F2:19:E6
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/3reO2cZ9UiMnAGmTCJb6puXyGeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d0:b2:1f:ee:9f:9b:e9:11:22:e5:56:c3:00:65:ba:18:7c:
85:e3:54:2f:ff:47:02:8c:da:cb:6e:1a:7b:27:f3:ee:0f:e2:
6d:73:85:24:1b:cf:54:11:ac:fd:7c:89:41:3f:7d:9a:5d:5b:
5e:0a:20:85:ad:5f:4b:ad:fb:7e:ef:52:a3:13:8c:77:1b:6d:
98:a7:3c:9f:cd:d1:c8:79:de:53:be:f5:6b:c3:ae:e7:a1:b9:
85:1b:c1:7b:c1:4a:ec:75:c0:ba:79:58:dc:40:49:ae:a4:cc:
ce:8d:4a:ca:82:a1:04:7a:61:1f:ac:00:a1:3c:9f:4e:c0:72:
36:8b:7a:83:b4:79:61:36:34:64:9b:28:55:a1:00:88:72:9f:
5b:02:9b:b0:68:42:13:9a:93:7b:7e:62:75:81:8c:e4:c6:83:
a9:a6:de:69:9b:be:ea:ba:46:68:3d:5e:64:f1:82:31:7c:fa:
9c:ee:e1:17:f1:12:68:ea:ff:2a:f4:e9:fc:5e:29:d0:19:d6:
fe:d7:6b:b8:a7:87:96:06:4c:6c:f6:fd:0d:53:5b:59:74:5d:
bc:89:ca:9a:81:ff:e5:df:10:4c:b9:26:42:56:35:ff:d6:69:
a8:39:31:8f:c3:88:d9:5a:c6:e3:98:93:86:e1:a7:c2:cd:79:
06:55:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:49 2025 by rpki-client