Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/j5ujI_JHiuUiqEoaStLRczipne8.roa
File: j5ujI_JHiuUiqEoaStLRczipne8.roa (raw, json)
Hash identifier: VqFVbBV7mUWBI6xMI98np7VKusFmiNFyWMUhtZQXMxI=
Subject key identifier: 8F:9B:A3:23:F2:47:8A:E5:22:A8:4A:1A:4A:D2:D1:73:38:A9:9D:EF
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0191835098F4092ED1C6CE1BA6EC64E748C1
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/j5ujI_JHiuUiqEoaStLRczipne8.roa
Signing time: Sat 24 Aug 2024 07:36:22 +0000
ROA not before: Sat 24 Aug 2024 07:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
194.169.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 16:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:50:98:f4:09:2e:d1:c6:ce:1b:a6:ec:64:e7:48:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Aug 24 07:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f9ba323f2478ae522a84a1a4ad2d17338a99def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:e0:02:cc:d2:50:2b:13:d1:42:5d:5c:88:
f4:6e:e4:63:1f:7d:0c:46:c1:e9:07:6c:19:bf:eb:
e0:5e:7b:0b:5d:69:21:b3:95:02:ab:54:3c:f8:22:
ae:27:ee:a1:97:9b:eb:fa:29:46:9d:82:b9:21:99:
b9:12:bf:0c:0d:db:a5:66:bf:d2:4b:f1:3e:8c:aa:
32:90:22:cb:18:29:37:3e:24:b4:cb:94:84:26:d8:
66:3f:66:49:06:c4:07:d8:0d:48:11:03:74:a9:a6:
7a:20:95:8e:b7:78:5b:73:cf:c2:52:9a:f7:95:b1:
11:02:25:26:27:da:0b:b8:a3:73:2c:3b:9b:b3:f9:
a6:30:be:d3:65:ee:8d:57:cd:5f:10:71:27:a7:82:
39:53:e1:b8:c8:b1:93:83:fc:2f:94:4c:87:59:ac:
2b:f7:48:4c:e6:27:4a:5b:6a:77:6c:76:e7:0d:a8:
5c:94:15:e3:aa:ea:59:30:36:c4:53:2e:3f:f5:06:
06:6f:8d:25:ca:9c:6a:a6:4b:8c:13:b0:b0:f1:39:
8d:05:ea:a4:fb:9b:e2:34:e0:5f:06:19:f4:02:20:
40:14:4b:98:43:10:cf:d7:1b:e6:2b:1c:bd:9c:38:
f1:ea:aa:9b:f0:4d:bf:0f:d8:1a:23:4f:27:d1:19:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9B:A3:23:F2:47:8A:E5:22:A8:4A:1A:4A:D2:D1:73:38:A9:9D:EF
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/j5ujI_JHiuUiqEoaStLRczipne8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f5:e5:ac:c1:0b:4a:cb:90:03:a6:5b:5d:01:0e:20:b1:2c:
61:40:4a:a7:6b:b5:df:97:d3:a2:e3:00:a7:c3:36:b9:3e:93:
9d:68:3f:a8:7c:ce:39:bc:c0:97:a3:1a:88:38:08:7f:ec:10:
15:bd:90:c7:ef:43:32:83:9d:cf:48:63:32:ad:6b:39:5e:16:
25:b4:5e:88:fa:80:3f:1d:9d:af:f8:96:69:93:6f:ef:13:64:
e5:92:30:d1:47:0c:11:76:80:f5:44:3c:29:b6:fb:25:19:cd:
bc:9a:3d:71:22:13:78:44:ab:3e:f0:0b:62:01:12:4d:fc:1d:
2f:30:31:a3:39:76:e5:2d:1e:b5:e3:61:9d:a5:5a:e3:52:f3:
2c:85:8c:47:69:96:17:4c:e7:6f:da:1a:ab:26:29:dc:11:72:
0b:8d:1b:fe:ea:76:6b:be:86:e6:13:2c:56:26:9b:d7:e2:cf:
b7:7c:27:c1:ed:5b:06:55:ed:23:f9:6c:31:53:4f:e7:ff:82:
fd:17:ab:32:9c:ee:b7:61:41:e5:4e:d1:a9:c3:32:cc:c7:c7:
0f:d0:ce:cb:51:50:bb:d7:23:53:f5:3d:bf:50:c2:7b:d5:51:
0e:a2:95:67:0a:d5:ea:29:6c:dc:3e:aa:49:09:df:4c:cb:5d:
22:5c:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:52:36 2025 by rpki-client