Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SYM8Fiq_RvweO3IQG0PIEsEA8bE.roa
File: SYM8Fiq_RvweO3IQG0PIEsEA8bE.roa (raw, json)
Hash identifier: oXjPTalX07c8LhDTtVGAyHCRVOY67Bb8DgRyL8Q3Uvg=
Subject key identifier: 49:83:3C:16:2A:BF:46:FC:1E:3B:72:10:1B:43:C8:12:C1:00:F1:B1
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955DB5B8A7124FF7B72F0ECD3AEDFE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SYM8Fiq_RvweO3IQG0PIEsEA8bE.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60033
IP address blocks: 188.213.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5d:b5:b8:a7:12:4f:f7:b7:2f:0e:cd:3a:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49833c162abf46fc1e3b72101b43c812c100f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:f6:e8:23:3d:bd:ca:f5:b9:50:9b:ce:4f:
25:9e:da:f3:59:69:b7:69:47:c0:db:df:12:bf:c4:
68:ca:be:62:71:9a:92:07:d8:2e:1f:17:8c:18:3d:
5a:c5:d6:8c:86:54:a7:89:a4:18:a2:6b:a1:44:43:
fe:37:ce:fb:27:e4:a2:f6:1b:2f:fe:43:fe:70:00:
c0:94:d5:bd:d8:bd:7d:5b:e9:0c:fb:af:4f:8a:f2:
89:08:cc:c0:31:35:87:a8:e8:6c:91:4e:b6:a6:05:
42:a3:a8:9a:95:f7:4f:75:f8:4c:04:8c:b8:ba:cf:
e1:23:97:6c:1f:e2:9a:94:d2:3a:d4:b1:6d:58:b2:
ba:85:be:0b:a0:e7:1b:d3:f1:05:26:b3:84:ac:6f:
ca:0d:6b:92:75:45:0c:d7:d1:0d:f6:c1:8d:2b:02:
12:4a:f7:74:7f:30:11:aa:01:ef:ee:0c:85:2c:24:
2b:7c:9f:d1:98:8a:3d:c9:54:7e:44:98:46:ce:97:
49:67:9f:37:be:b9:aa:52:10:93:cb:86:6c:54:ac:
dc:50:db:81:8a:af:9c:4d:b1:26:52:99:c0:d4:60:
41:7c:79:f8:5c:60:7d:63:04:fe:4a:67:f7:b9:19:
32:70:af:b3:e9:98:ec:25:09:81:21:5c:1f:81:d2:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:3C:16:2A:BF:46:FC:1E:3B:72:10:1B:43:C8:12:C1:00:F1:B1
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SYM8Fiq_RvweO3IQG0PIEsEA8bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fe:06:ee:92:f8:7f:59:5c:a0:73:ee:44:79:14:90:6b:a0:
5f:e8:75:25:0a:67:25:f6:7b:df:eb:d1:e8:37:c9:b7:2b:03:
20:ce:3a:8e:d9:94:7b:0a:36:a1:e7:9e:7f:a4:96:f7:15:5c:
30:d0:1e:3b:e7:92:cd:7e:36:d4:9c:d8:6c:49:28:61:59:e8:
86:6f:46:9a:46:a8:e4:71:ff:14:64:26:3b:c9:ae:1f:3e:84:
39:55:97:dc:a5:5f:93:19:53:31:db:18:e0:e6:51:36:a2:3a:
7a:81:e4:9f:37:09:f0:e6:32:37:87:cd:fd:34:cf:6e:a1:4d:
51:fe:8b:bc:6a:c7:8d:d1:5c:e0:7f:44:6f:b4:d7:19:2b:9e:
63:d9:0c:c3:ff:9e:11:68:a5:84:54:a2:15:5d:fe:96:80:b4:
c4:9f:9c:3f:10:f4:ea:df:c9:72:7d:a8:ea:ee:54:1d:8f:21:
a5:f8:cf:c8:da:90:f9:39:6d:a2:37:e2:9f:aa:e0:52:6e:fc:
46:62:ac:5d:3f:df:d1:c5:0e:ae:af:cc:ff:5c:8f:f4:28:8a:
5c:17:50:33:fa:ea:b8:4f:b2:4f:75:b1:b6:06:b2:18:eb:7b:
7c:41:3d:6d:f6:db:36:ed:bb:4f:03:7e:46:36:7c:1a:5b:ca:
ba:ca:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:49 2025 by rpki-client