Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ofccGEsA-SEdFvLGfPfjeIfP77Q.roa
File: ofccGEsA-SEdFvLGfPfjeIfP77Q.roa (raw, json)
Hash identifier: BGXKRA39vq6rFiW7IhKvitmTS0tEmkbu9EDcRH2rAnc=
Subject key identifier: A1:F7:1C:18:4B:00:F9:21:1D:16:F2:C6:7C:F7:E3:78:87:CF:EF:B4
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC79533FAB4F35EF1D0260B1C090F9D8C
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ofccGEsA-SEdFvLGfPfjeIfP77Q.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 176.113.99.0/24 maxlen: 24
178.212.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:33:fa:b4:f3:5e:f1:d0:26:0b:1c:09:0f:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f71c184b00f9211d16f2c67cf7e37887cfefb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:07:e5:b3:77:75:87:33:75:a1:a9:f2:41:
14:52:cd:0b:1e:96:72:c0:fa:4d:53:25:ff:46:c9:
bc:64:c8:b7:8e:de:e4:0e:02:d1:36:b4:75:6c:07:
ad:a6:80:7c:f9:53:d6:f4:54:bc:40:b9:16:92:bf:
82:8c:9b:85:f7:57:39:88:ba:98:31:5d:c7:70:e5:
ac:52:17:96:45:c2:3d:83:42:68:63:b8:0f:a2:d5:
0b:c4:20:14:4b:18:43:18:25:b2:37:a5:af:fe:37:
f8:84:9c:ea:f2:df:97:79:88:55:20:0d:4d:60:0b:
86:75:5a:44:fb:65:96:78:85:f1:7a:0f:a9:f1:ea:
5b:0f:df:a5:e7:9e:83:49:3f:a8:64:58:8c:c2:b1:
28:6e:be:91:ae:47:52:5c:af:66:07:d1:71:a1:eb:
ca:a5:5a:4c:a1:fe:71:fe:6c:9e:c3:8c:74:f7:b3:
4c:62:89:99:a6:dd:42:47:a6:cc:a2:1a:d0:40:1f:
90:8f:18:6e:62:92:94:46:ff:a5:5a:d8:87:6d:de:
1d:a9:c3:3d:02:8e:db:41:25:b2:92:0d:45:40:30:
2c:53:be:bc:c4:98:2b:a9:34:cd:18:89:12:94:9f:
b2:30:d5:cb:90:71:b1:56:e8:b9:ba:a7:cd:d5:b3:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:1C:18:4B:00:F9:21:1D:16:F2:C6:7C:F7:E3:78:87:CF:EF:B4
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ofccGEsA-SEdFvLGfPfjeIfP77Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.99.0/24
178.212.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:08:bf:5e:41:4e:7a:bc:c0:e9:ef:3d:84:26:53:17:9c:2f:
3b:f0:0b:bb:a7:4c:08:ab:fe:e9:b6:3a:e8:be:3d:cf:c9:f3:
05:20:38:8d:86:07:34:30:21:74:35:03:09:3f:6a:fd:9e:8d:
c0:6c:27:fe:5e:61:d5:71:b9:9b:9b:26:9b:1a:26:27:01:1e:
62:21:ad:be:c2:4e:8c:2b:f1:4d:5e:be:aa:71:42:69:dc:ec:
f9:6a:a6:a5:3c:3f:dc:60:ee:3b:28:1d:96:05:d0:b4:55:b2:
71:22:75:fe:4c:13:9c:6a:01:e5:97:f8:f0:5a:42:62:f8:95:
5c:80:dd:a1:9d:b4:7d:d8:5d:85:d9:f3:98:28:5f:49:77:86:
36:94:0f:c9:22:ad:46:de:e8:69:e8:22:de:9e:bd:33:18:76:
c9:0c:92:31:25:44:33:51:57:67:bd:b9:44:9c:43:cc:82:67:
62:51:fb:44:35:28:a1:64:e0:ff:5d:f8:4f:66:eb:5d:31:38:
39:38:c1:44:a4:18:b4:24:1f:1b:38:ad:c3:4e:be:1b:53:bb:
88:48:52:10:ac:7d:86:e5:0f:0a:c9:a4:c3:a6:dc:c4:ca:c6:
50:d3:52:69:5d:7a:e1:c1:07:f5:35:62:21:f2:ce:56:d6:61:
bf:c2:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:06 2025 by rpki-client