Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/DOM2Nbhh1e7_BJehCKvK264urY0.roa
File: DOM2Nbhh1e7_BJehCKvK264urY0.roa (raw, json)
Hash identifier: Jkk1Edl0lYxyNWMEECEjJTMla2LZPl0PshBouRWLTrs=
Subject key identifier: 0C:E3:36:35:B8:61:D5:EE:FF:04:97:A1:08:AB:CA:DB:AE:2E:AD:8D
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 018F53D9D8C788963A804CB89F0A1D2AC6DA
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/DOM2Nbhh1e7_BJehCKvK264urY0.roa
Signing time: Tue 07 May 2024 16:18:56 +0000
ROA not before: Tue 07 May 2024 16:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.39.100.0/24 maxlen: 24
193.39.101.0/24 maxlen: 24
193.39.102.0/24 maxlen: 24
193.39.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:d9:d8:c7:88:96:3a:80:4c:b8:9f:0a:1d:2a:c6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: May 7 16:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce33635b861d5eeff0497a108abcadbae2ead8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:08:3d:98:dc:23:ef:2c:00:ae:5f:8d:55:
b9:cc:98:c9:02:57:ae:97:43:8d:f0:9e:a8:0d:82:
ba:35:22:7d:46:e9:03:20:c8:f0:a3:e5:13:ae:a7:
7a:ea:6c:f4:09:e9:52:e2:bd:2d:8c:cd:e4:7d:d0:
f5:83:b6:7e:8d:5e:70:94:38:88:93:f1:4a:7c:66:
c9:fa:90:7f:66:4b:2e:a5:7d:41:36:4d:b8:9b:cc:
9d:66:d4:b4:3d:45:37:cd:b2:1d:4f:b5:7c:b1:85:
7d:e0:5d:0f:d5:de:f5:d1:d5:95:e6:f9:e9:d3:4b:
f1:d2:d5:68:50:58:49:7b:c8:7d:28:50:00:dc:47:
fb:97:2a:bd:08:cc:45:b9:4f:4e:f8:6e:9f:9b:a9:
72:e8:b5:5b:9f:ab:47:65:27:db:4e:05:96:1e:da:
67:53:3a:cb:a6:81:42:ae:bd:fe:93:ce:57:fe:79:
1e:c1:4e:fc:bf:c3:c3:6a:60:a9:eb:b9:3f:37:b6:
58:24:29:cc:73:05:d1:4e:84:d8:3b:e8:ad:2b:de:
4b:d5:04:06:e2:de:93:51:1b:07:cb:3e:3d:5a:f5:
9c:83:a3:10:f0:80:e6:3d:36:4f:57:92:ac:54:b8:
2d:b0:c4:fb:e7:91:00:c6:46:dc:75:df:75:eb:33:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:36:35:B8:61:D5:EE:FF:04:97:A1:08:AB:CA:DB:AE:2E:AD:8D
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/DOM2Nbhh1e7_BJehCKvK264urY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.100.0/22
Signature Algorithm: sha256WithRSAEncryption
68:37:4d:8a:a4:55:1f:cd:ca:69:fa:2c:e1:7a:f6:b4:98:f3:
9b:4f:80:1a:33:26:34:fa:ac:b0:0f:93:64:71:b4:fc:0a:48:
5a:0f:64:7b:55:70:92:1e:14:c2:a8:61:03:a7:a7:12:60:09:
33:cf:8b:e5:fa:e0:d6:67:50:e2:01:e1:31:3b:79:86:17:cd:
e1:27:9b:26:bb:b4:cb:19:4a:78:a3:69:4c:c8:e5:db:6b:9a:
5f:21:be:c5:ea:26:46:52:c7:7b:7d:3b:c2:c3:db:53:da:8c:
c8:da:15:8c:a8:eb:ab:b1:41:bc:f6:73:ba:8d:ef:cf:bd:5b:
ca:40:dc:81:6e:fa:9d:9b:0a:10:4d:3d:98:f7:3a:e1:53:bc:
b3:e9:d0:5a:83:9e:64:ce:1f:76:50:7d:dd:81:cf:67:cd:ba:
fb:d5:e9:e6:43:9e:5d:3a:c8:28:01:bf:4f:e2:7f:69:39:df:
67:1b:37:11:3b:d5:e7:ee:44:aa:4e:73:b6:89:93:32:4e:50:
66:05:9e:b7:17:e0:12:ac:09:37:a8:02:53:bb:a6:dd:8e:d6:
06:2a:20:44:72:29:4e:5a:07:11:78:18:21:62:e5:f9:b9:26:
ad:a7:73:c3:86:81:bb:61:c4:bf:b3:38:0a:31:05:7b:92:ce:
28:f7:1a:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9T2djHiJY6gEy4nwodKsbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzU5YzZhNjJlMjc4ZGE4MzExYWZlYzhmNzY3N2M0MTM2
M2QxZjgwHhcNMjQwNTA3MTYxODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2UzMzYzNWI4NjFkNWVlZmYwNDk3YTEwOGFiY2FkYmFlMmVhZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjoIPZjcI+8sAK5fjVW5zJjJAleu
l0ON8J6oDYK6NSJ9RukDIMjwo+UTrqd66mz0CelS4r0tjM3kfdD1g7Z+jV5wlDiI
k/FKfGbJ+pB/ZksupX1BNk24m8ydZtS0PUU3zbIdT7V8sYV94F0P1d710dWV5vnp
00vx0tVoUFhJe8h9KFAA3Ef7lyq9CMxFuU9O+G6fm6ly6LVbn6tHZSfbTgWWHtpn
UzrLpoFCrr3+k85X/nkewU78v8PDamCp67k/N7ZYJCnMcwXRToTYO+itK95L1QQG
4t6TURsHyz49WvWcg6MQ8IDmPTZPV5KsVLgtsMT755EAxkbcdd916zPLXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzjNjW4YdXu/wSXoQirytuuLq2NMB8GA1UdIwQY
MBaAFBB1nGpi4njagxGv7I92d8QTY9H4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4Nzkt
MmVlNGZmOGIwYTgwLzEvRE9NMk5iaGgxZTdfQkplaENLdksyNjR1clkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4NzktMmVlNGZmOGIwYTgw
LzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSdkMA0G
CSqGSIb3DQEBCwUAA4IBAQBoN02KpFUfzcpp+izheva0mPObT4AaMyY0+qywD5Nk
cbT8CkhaD2R7VXCSHhTCqGEDp6cSYAkzz4vl+uDWZ1DiAeExO3mGF83hJ5smu7TL
GUp4o2lMyOXba5pfIb7F6iZGUsd7fTvCw9tT2ozI2hWMqOursUG89nO6je/PvVvK
QNyBbvqdmwoQTT2Y9zrhU7yz6dBag55kzh92UH3dgc9nzbr71enmQ55dOsgoAb9P
4n9pOd9nGzcRO9Xn7kSqTnO2iZMyTlBmBZ63F+ASrAk3qAJTu6bdjtYGKiBEcilO
WgcReBghYuX5uSatp3PDhoG7YcS/szgKMQV7ks4o9xrE
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:51 2025 by rpki-client