Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/0Ih-cUQ-UAzVzsIoqU1XfnWJFkU.roa
File: 0Ih-cUQ-UAzVzsIoqU1XfnWJFkU.roa (raw, json)
Hash identifier: lCFLve7IzhUQkPaFw49bGO2/lI+OyYh+wC/WHoo+8jg=
Subject key identifier: D0:88:7E:71:44:3E:50:0C:D5:CE:C2:28:A9:4D:57:7E:75:89:16:45
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 018CC86F36280295DEE77EAF8D1AF63A54DB
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/0Ih-cUQ-UAzVzsIoqU1XfnWJFkU.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21269
IP address blocks: 195.95.132.0/24 maxlen: 24
92.118.240.0/22 maxlen: 24
2a09:b240::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:36:28:02:95:de:e7:7e:af:8d:1a:f6:3a:54:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0887e71443e500cd5cec228a94d577e75891645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:47:d4:e2:ca:05:ef:ad:15:21:90:c3:7f:
3a:ab:fa:fa:0b:30:dc:35:e7:50:5f:d9:b3:c8:b3:
22:89:3c:68:9f:35:c6:f7:9c:7b:bf:84:b2:11:85:
ed:6d:6a:cd:13:94:52:57:b9:e5:d8:47:33:ad:0c:
96:55:da:c5:32:03:db:71:d0:88:21:6c:06:89:fa:
f9:ac:5c:18:23:d1:a0:ec:83:23:ba:f8:70:38:f4:
63:d5:57:9f:a6:65:ac:32:4b:09:c3:77:58:42:fa:
72:bf:e6:cc:3e:9d:cc:4c:df:d9:51:01:91:b7:ef:
a9:4f:77:20:cd:38:9d:a3:ec:48:17:68:32:35:72:
f3:df:4c:08:df:3f:47:7f:7f:86:bb:97:ea:9c:2d:
aa:ef:5e:0d:5f:1f:2a:7a:75:e0:7b:6c:80:72:3b:
39:32:fd:bf:f3:c8:17:30:65:b9:1d:77:da:99:c4:
87:7c:23:50:6e:c4:e7:dc:22:44:f4:f9:d4:39:d2:
4d:48:98:83:3d:b0:df:27:26:19:7a:97:5c:12:96:
d9:3d:1b:eb:99:4e:82:ac:27:6f:3c:5a:85:49:65:
a3:f4:4e:c1:00:14:93:5c:48:fc:eb:64:b5:5f:99:
88:4d:2d:38:3a:2d:4d:d5:de:41:06:48:a7:47:70:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:7E:71:44:3E:50:0C:D5:CE:C2:28:A9:4D:57:7E:75:89:16:45
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/0Ih-cUQ-UAzVzsIoqU1XfnWJFkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.240.0/22
195.95.132.0/24
IPv6:
2a09:b240::/29
Signature Algorithm: sha256WithRSAEncryption
3b:8a:2b:ce:ab:0f:8e:62:44:a3:de:8a:33:e2:df:d9:e7:42:
3b:a6:94:53:dd:90:4b:4c:fc:ff:1d:b1:71:02:35:a9:96:d1:
ba:ab:eb:39:31:c9:94:6c:03:61:6f:d6:96:05:39:cf:f4:ff:
38:a5:ae:a5:ab:60:ba:94:b6:05:5b:03:cf:5d:de:c5:42:22:
ac:c4:3a:7b:ea:2d:97:4d:e3:9c:56:d3:f2:f5:ca:49:59:9f:
37:3f:8a:52:0f:4b:58:83:6b:68:2f:16:ab:6f:e8:c7:7d:5e:
ff:0a:eb:34:6f:f6:f1:9a:40:12:c2:8f:a3:e0:7b:5e:c5:19:
3f:2f:c8:57:db:d6:f7:aa:d9:c9:81:4f:cc:99:3a:75:10:3e:
23:99:8d:26:47:fd:88:f6:8e:24:e6:2d:a9:ff:28:3f:ed:3d:
26:dd:d6:92:5a:c2:86:b4:85:43:d5:cb:16:d4:8d:63:43:f9:
dd:cb:4a:c8:c7:8c:c2:1f:97:92:3e:ba:1d:ba:de:de:74:bc:
b8:e8:d2:9f:14:e5:14:8c:9f:05:bd:5b:db:cb:d7:7d:34:34:
ee:78:4c:65:c4:c8:bd:8b:a3:7e:65:a8:ed:f7:0d:41:c5:5f:
27:9c:78:ca:e8:42:d5:cb:5f:68:93:7d:a8:c7:53:de:b5:95:
30:48:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:20 2025 by rpki-client