Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/oBFkQ7YzWt7LfDTLl0i229x_oBM.roa
File: oBFkQ7YzWt7LfDTLl0i229x_oBM.roa (raw, json)
Hash identifier: brv2+yjWRPbpiiU2Sqxwc+o9Cgh9RoqXEUY01yUui7Q=
Subject key identifier: A0:11:64:43:B6:33:5A:DE:CB:7C:34:CB:97:48:B6:DB:DC:7F:A0:13
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 0191C6375CE81AB2CFB0B13EE7D44248B007
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/oBFkQ7YzWt7LfDTLl0i229x_oBM.roa
Signing time: Fri 06 Sep 2024 07:23:22 +0000
ROA not before: Fri 06 Sep 2024 07:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31204
IP address blocks: 83.218.192.0/19 maxlen: 19
89.149.64.0/18 maxlen: 18
89.149.84.0/23 maxlen: 23
89.149.120.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 30 Sep 2024 07:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:37:5c:e8:1a:b2:cf:b0:b1:3e:e7:d4:42:48:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Sep 6 07:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0116443b6335adecb7c34cb9748b6dbdc7fa013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:ac:8c:13:43:e6:56:8d:0f:61:6b:45:be:
0a:66:09:45:27:8c:27:57:c5:fe:54:53:85:a4:ca:
d8:98:fc:6e:81:50:b6:0f:88:de:34:1a:45:8d:6e:
b7:6e:da:48:52:b7:ef:78:0b:af:18:a0:c4:85:9d:
af:f5:83:bf:ab:79:20:83:4d:d0:92:e0:56:a7:45:
3d:22:c9:d9:4b:73:2f:fd:05:eb:65:e2:01:c1:27:
22:65:b1:c9:f8:a4:59:dc:45:17:8c:08:03:41:a5:
70:9b:a8:88:2b:8e:f4:bf:9d:50:0e:3a:77:ac:8c:
6d:55:8e:67:44:eb:27:e0:cd:72:34:1c:6c:61:4d:
52:14:5e:ba:0d:27:0c:d3:5e:6b:36:82:59:4a:7c:
de:3f:a7:c8:02:68:01:98:91:cd:22:61:0e:3e:81:
d6:fe:84:7b:46:f5:0f:72:4b:22:38:eb:23:ea:cc:
b0:61:0d:ae:c9:51:83:56:fc:76:ca:85:bd:90:d9:
61:47:9c:40:97:61:13:8b:4b:a3:0e:5a:b4:c9:8b:
93:67:e3:c8:e4:14:2e:3e:e8:f9:a8:f0:90:a6:68:
12:4f:ca:83:26:79:16:c7:4b:92:4a:5f:c5:d7:49:
44:84:54:18:2f:f3:cc:ee:4b:26:3c:c4:e0:09:3b:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:64:43:B6:33:5A:DE:CB:7C:34:CB:97:48:B6:DB:DC:7F:A0:13
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/oBFkQ7YzWt7LfDTLl0i229x_oBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.218.192.0/19
89.149.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:13:19:68:e7:4e:e5:8c:bf:45:d7:1e:f3:7d:06:6c:60:09:
58:b7:f1:cd:8c:c0:5a:c8:5e:37:f0:4d:e5:68:b8:a0:d3:f0:
04:69:04:a3:a8:19:4a:71:c8:21:75:58:e8:68:42:06:97:6f:
f9:e1:f8:0d:d8:14:4b:2f:a8:d1:c3:b5:1a:be:f7:a9:d1:f9:
57:a5:2a:a5:1f:aa:75:3b:ae:5a:ab:fa:3e:83:03:90:19:80:
8a:13:98:3f:ec:a1:ee:f1:cf:8a:bc:77:0f:77:53:13:e4:ca:
25:0b:ea:c2:af:57:9f:51:0a:7a:bb:93:1a:5a:c3:1f:f6:8b:
50:b1:42:4f:1b:40:d2:7f:74:43:a8:37:98:d4:f6:05:af:26:
0d:f2:0e:e3:a0:9b:9e:10:dc:5b:90:b2:43:91:e6:f4:e5:85:
71:e7:cc:c2:d7:ac:e8:90:5c:b6:7c:c8:9c:99:b9:17:d4:5b:
40:64:0e:08:bc:5b:9f:7f:f0:cf:5b:e7:b6:5c:6a:92:e1:fa:
43:37:8a:6e:81:ce:fa:2f:bf:20:12:ae:2d:53:42:71:aa:96:
ae:c6:12:d7:e4:a0:0d:bb:6b:8f:3d:66:3f:81:f3:40:37:52:
5a:e0:61:4a:c0:95:6c:4c:0a:e6:95:5a:65:66:24:5f:b4:ac:
16:2e:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:55:13 2025 by rpki-client