Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-8pzP6m6CKFzZf4GA5KdxBZxBOM.roa
File: 1-8pzP6m6CKFzZf4GA5KdxBZxBOM.roa (raw, json)
Hash identifier: adVOYlfYsXdRx7DAlb5hzy1+C1bfr0m/Pz+2N3L0Vs4=
Subject key identifier: FB:CA:73:3F:A9:BA:08:A1:73:65:FE:06:03:92:9D:C4:16:71:04:E3
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194ABE56AFE1004A13C795FEFB574A05E93
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-8pzP6m6CKFzZf4GA5KdxBZxBOM.roa
Signing time: Tue 28 Jan 2025 07:52:06 +0000
ROA not before: Tue 28 Jan 2025 07:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 217.177.0.0/21 maxlen: 24
217.180.22.0/23 maxlen: 24
217.181.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 00:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:e5:6a:fe:10:04:a1:3c:79:5f:ef:b5:74:a0:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 28 07:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbca733fa9ba08a17365fe0603929dc4167104e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:e2:cc:52:a3:04:57:0b:9f:30:b9:45:94:
ad:07:7e:58:60:30:50:e8:9f:b2:ca:3c:60:23:29:
68:ce:bd:8f:6b:b0:bd:b8:d5:dc:5d:9b:1e:49:44:
b2:4e:4e:6b:a4:db:15:26:89:75:d3:75:6a:dc:dd:
41:f2:1c:e5:be:9c:bd:99:24:0c:b4:b1:75:9b:59:
ee:04:22:fc:63:92:2b:f6:11:de:38:a9:8b:ad:ab:
fe:01:80:f7:15:bb:2b:8a:51:50:31:4b:69:78:a5:
e7:d5:eb:11:20:5b:a1:77:d9:d9:74:d4:ae:c6:f4:
57:8b:7d:24:60:8d:2d:e9:10:07:46:c4:f2:80:73:
9c:5f:70:6a:89:63:14:f1:31:d7:9c:80:8f:99:a9:
5e:46:ff:02:b6:3f:a8:75:7f:1c:48:17:d5:5a:c9:
27:4f:56:8b:d5:ed:7b:82:a6:77:6d:1e:2e:73:1e:
e9:45:4d:3c:91:51:b8:18:4a:ed:34:80:6d:4a:2f:
64:14:e9:85:80:de:d1:e8:ad:52:d4:45:5f:7d:4e:
1c:ae:be:b9:0a:15:f9:a2:d9:c8:35:c8:47:77:40:
ea:24:cd:69:11:3d:6b:b3:46:9c:06:54:79:fb:5c:
ab:85:03:cc:6f:18:42:f9:72:de:14:d0:ef:b0:0d:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:73:3F:A9:BA:08:A1:73:65:FE:06:03:92:9D:C4:16:71:04:E3
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-8pzP6m6CKFzZf4GA5KdxBZxBOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.0.0/21
217.180.22.0/23
217.181.64.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ad:e1:73:b3:06:f6:9f:2e:8e:8b:24:5b:e4:6c:34:0d:bc:
44:f1:ec:e9:22:9b:26:03:8b:3a:67:dd:3b:b7:f3:a8:0c:c5:
33:48:6a:55:a7:62:e1:11:d3:50:53:29:31:c0:10:3a:8d:9a:
1a:39:f1:4a:35:7e:fb:2d:ae:37:d1:c0:88:6d:3d:9c:ee:f3:
fe:19:22:76:11:fb:64:a4:31:d2:a4:cc:4e:bc:9f:16:2e:e4:
e2:21:e9:ba:d5:e8:0d:1f:58:ef:26:ae:a8:1d:5f:94:82:d7:
bb:16:3d:22:df:c6:87:4c:f3:00:8e:da:b9:5e:2a:23:06:51:
df:ad:26:56:02:71:85:0b:0a:bd:94:04:5b:18:aa:b0:80:ec:
9e:a3:b7:b4:e7:83:a6:19:26:cf:95:fe:9c:8d:5d:48:77:46:
91:0f:f1:b0:56:9a:a1:73:e2:85:b5:a9:8e:91:11:d1:fe:31:
18:12:26:cd:89:91:ef:81:74:46:0d:15:c8:1d:12:e2:e4:67:
c4:64:13:e6:11:f8:a3:0d:66:0c:03:8b:c5:1f:43:8d:e6:f4:
d8:f7:b6:61:3e:f5:50:5b:ce:45:33:ac:dc:49:1f:f2:ac:1b:
a9:71:52:cf:39:a4:9f:80:cc:e1:ab:15:68:c2:fe:97:94:81:
c5:a9:d7:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:18 2025 by rpki-client