Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/g3UPS9h53DAhOZEPgyUA_njI3_Q.roa
File: g3UPS9h53DAhOZEPgyUA_njI3_Q.roa (raw, json)
Hash identifier: dmP2W37pSRTK4mQnWcPiSjxkO9aBNQ3YJ4eQ058dey0=
Subject key identifier: 83:75:0F:4B:D8:79:DC:30:21:39:91:0F:83:25:00:FE:78:C8:DF:F4
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 018CC348A424C160EB8F1375892ED66DF341
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/g3UPS9h53DAhOZEPgyUA_njI3_Q.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211462
IP address blocks: 193.32.87.0/24 maxlen: 24
2a0d:8141::/48 maxlen: 48
2a0d:8140::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Feb 2024 09:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a4:24:c1:60:eb:8f:13:75:89:2e:d6:6d:f3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83750f4bd879dc302139910f832500fe78c8dff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:6f:3b:f0:5e:12:a5:d7:bc:42:c0:fc:29:
ff:1e:6c:42:e9:34:8f:ca:03:50:75:5c:dd:90:75:
7b:a1:b5:9b:d9:ba:8f:b6:24:c9:b0:6c:f0:ff:5c:
da:a3:9f:b0:4e:5f:c6:8f:af:75:d2:8f:68:b7:32:
4c:7e:6f:e8:a3:92:aa:a7:7c:96:7d:ca:a6:06:8a:
2f:e9:99:aa:17:ab:cc:ad:b9:2e:b6:3c:e5:6e:6e:
20:8e:9d:7f:90:04:aa:f8:03:33:4b:82:60:43:7c:
46:69:4a:41:9c:65:ad:71:fb:58:c5:d2:56:88:c1:
14:3d:07:a9:6b:58:34:cb:64:7c:0f:24:2f:b5:30:
3f:ff:8c:f7:3d:94:84:04:8d:ea:f8:5b:04:17:2e:
9d:fa:38:f8:9c:3a:f8:5e:23:02:c5:62:97:b9:c6:
77:90:2c:92:59:42:77:cd:36:30:08:55:94:a0:da:
53:ca:97:e9:19:bb:6d:d6:75:a1:fb:03:cf:ef:5b:
e4:ef:5a:2a:29:6b:8f:2e:6f:0b:ef:75:a6:d5:7c:
2c:b6:33:e9:5f:55:ee:a1:ec:59:a5:5f:47:23:32:
04:15:2a:13:06:32:77:da:65:9f:e2:d6:e2:98:65:
ae:98:53:9e:90:e0:f5:05:ab:42:7c:0a:02:ae:20:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:0F:4B:D8:79:DC:30:21:39:91:0F:83:25:00:FE:78:C8:DF:F4
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/g3UPS9h53DAhOZEPgyUA_njI3_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.87.0/24
IPv6:
2a0d:8140::/48
2a0d:8141::/48
Signature Algorithm: sha256WithRSAEncryption
77:ff:c6:3a:19:a4:bd:17:89:ec:d6:88:d8:5d:17:d4:22:96:
fd:4f:91:7c:f9:af:40:0a:c9:56:14:47:f7:5d:c7:3a:c5:d5:
a9:95:a9:67:74:40:6f:56:d5:7e:0e:f3:58:07:b1:c8:43:1e:
ef:5f:b0:fd:56:8a:4d:38:89:0b:22:7d:59:92:53:39:96:5d:
92:3d:51:9d:7c:32:35:38:a1:29:3a:ee:d5:8b:21:a1:5f:9d:
8c:94:aa:33:75:6b:be:a3:10:a1:42:99:02:5c:19:c8:89:6f:
95:67:c7:15:df:62:2a:03:a0:5e:b7:70:9a:5f:74:f0:69:0a:
d8:85:35:62:fb:38:bf:d3:53:b0:a8:3f:77:72:90:33:b5:27:
9f:19:4a:72:4f:bf:e1:16:e2:8b:42:35:6d:aa:28:be:f9:88:
83:1c:cf:e1:53:b2:67:1d:d5:04:7f:7a:bc:9d:05:0e:92:26:
62:97:63:42:07:63:5f:68:da:4f:51:98:50:b8:cb:67:fb:63:
c3:33:29:43:a7:93:58:43:62:fd:86:8d:e7:20:6e:92:72:25:
17:c6:37:1a:35:3b:13:c9:16:d6:44:66:93:ce:15:cb:85:3a:
8e:e3:4d:2f:83:1e:e2:97:58:dd:d1:01:03:8b:0f:71:7c:30:
64:f0:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:01 2025 by rpki-client