Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/dMv8miOKcEjsid6hUx_UYUnUDJ8.roa
File: dMv8miOKcEjsid6hUx_UYUnUDJ8.roa (raw, json)
Hash identifier: HgTmVaJj3md3leLKovZY8/sYj1Bu++QVtD4lDj8rZhw=
Subject key identifier: 74:CB:FC:9A:23:8A:70:48:EC:89:DE:A1:53:1F:D4:61:49:D4:0C:9F
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 01926215308EAB86A61D3933323235E1E09C
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/dMv8miOKcEjsid6hUx_UYUnUDJ8.roa
Signing time: Sun 06 Oct 2024 13:46:48 +0000
ROA not before: Sun 06 Oct 2024 13:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47283
IP address blocks: 194.12.64.0/19 maxlen: 19
194.12.64.0/20 maxlen: 20
194.12.80.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:62:15:30:8e:ab:86:a6:1d:39:33:32:32:35:e1:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Oct 6 13:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74cbfc9a238a7048ec89dea1531fd46149d40c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:1c:c1:f0:6b:a0:ed:cb:d0:75:17:cf:58:
6d:3d:bc:35:c1:a2:b8:60:35:24:9f:5c:e7:73:4c:
e5:81:a6:56:f4:02:3a:e8:20:37:48:27:1d:0f:e2:
c2:35:27:f3:ae:9b:a6:8a:d0:b5:e4:5d:79:23:32:
3b:cf:69:5b:72:83:aa:d6:7b:1f:a1:e5:eb:97:04:
8c:84:96:97:ed:a5:18:6b:34:b7:f7:9b:c3:73:22:
f3:ea:24:f7:d1:8a:dc:0c:cc:6d:f2:eb:da:ab:c2:
c0:90:a2:9e:c7:b7:13:62:c5:5a:0b:70:a0:94:84:
79:6b:56:e7:49:2a:11:81:a3:08:cf:23:ca:0e:a3:
08:c3:73:f4:a4:39:3d:1b:62:c2:9f:65:54:d2:fb:
dc:da:15:ab:3a:53:34:89:7b:1c:c2:e9:9b:8c:f6:
bf:2c:1f:a9:dd:e5:54:9f:11:fa:ad:6f:ba:cf:04:
83:0c:43:d1:1e:42:bc:b8:b3:16:10:a9:25:a9:eb:
6e:c6:40:cb:35:e9:35:6c:25:f0:37:45:d7:6a:b7:
78:c2:7f:d7:f3:b4:d7:08:15:54:10:96:db:c5:af:
05:ac:b9:bd:f4:bf:e5:84:f4:b3:9d:2b:ec:f0:f4:
6b:0a:44:96:0e:a7:02:25:b2:fa:06:1d:a6:bc:08:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:FC:9A:23:8A:70:48:EC:89:DE:A1:53:1F:D4:61:49:D4:0C:9F
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/dMv8miOKcEjsid6hUx_UYUnUDJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.64.0/19
Signature Algorithm: sha256WithRSAEncryption
16:28:8a:5f:b2:6a:cf:6d:70:41:3e:28:90:ff:fd:b7:fb:36:
80:9e:30:d0:e7:d1:ec:56:83:0e:79:80:6c:b7:55:ae:b0:54:
69:48:05:d7:9d:51:c1:af:a4:5e:c5:43:9e:ed:7d:82:e4:34:
d5:cc:67:ea:60:0d:2b:99:1b:0c:2b:0e:65:0f:fb:15:43:0a:
4f:bc:13:7d:35:93:3f:9f:6c:ea:43:1c:8e:e2:cf:46:9a:04:
9a:20:d5:e2:af:2a:c2:00:63:90:1c:77:8b:6a:8c:9c:72:cb:
f3:48:79:02:f8:42:5e:af:9d:70:f0:69:64:ca:52:d2:23:43:
20:fa:1e:65:b6:96:0a:c9:5b:32:2c:04:b6:e4:44:c1:d0:1a:
3b:0b:01:24:b2:67:1c:86:27:fa:2c:05:ca:99:f0:f2:c9:fd:
47:a4:a0:38:a1:f9:00:ba:02:bc:09:6d:2a:b4:f8:39:15:d9:
e6:f7:7f:74:46:b0:0b:86:c4:95:56:59:ee:82:7a:1d:59:f7:
d4:23:26:5c:ce:05:2e:e5:c1:80:8c:45:81:fb:12:48:98:ea:
3d:b0:7a:20:8a:b7:d7:25:9a:a0:0e:fe:0a:d3:e6:6e:88:47:
9f:28:df:96:e8:87:8d:f2:88:b4:7f:83:9b:70:01:96:fb:9b:
75:d1:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:40 2025 by rpki-client