Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/IIDNqzkXgGeVJjo-IgokD9DG31M.roa
File: IIDNqzkXgGeVJjo-IgokD9DG31M.roa (raw, json)
Hash identifier: HyRLYsDIf7pvN5aQg/z77iloi3pHiAzRb2+6fIuwCy8=
Subject key identifier: 20:80:CD:AB:39:17:80:67:95:26:3A:3E:22:0A:24:0F:D0:C6:DF:53
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0192768B466ECC69924ED707933FCD6C0DCB
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/IIDNqzkXgGeVJjo-IgokD9DG31M.roa
Signing time: Thu 10 Oct 2024 13:08:11 +0000
ROA not before: Thu 10 Oct 2024 13:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9141
IP address blocks: 195.34.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Dec 2024 13:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:8b:46:6e:cc:69:92:4e:d7:07:93:3f:cd:6c:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Oct 10 13:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2080cdab3917806795263a3e220a240fd0c6df53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:2b:39:4e:9e:44:c3:fa:5b:f4:ad:dc:b8:
dc:df:be:49:5e:56:ef:68:30:e6:13:8a:a9:f7:25:
a8:81:43:c4:cd:5e:39:59:a6:51:a7:6e:26:4f:40:
bb:97:f3:4a:e7:24:b0:aa:e1:af:d9:b4:47:08:4d:
7d:fa:ab:49:a7:54:a7:70:82:c7:31:2d:0a:a3:0e:
d0:00:8a:2c:4f:a0:b5:58:a0:94:b2:8f:2c:63:d8:
15:3c:f3:2c:4c:dc:c2:5c:4c:69:3a:a3:81:1f:2f:
91:0e:28:5b:a1:73:2a:d1:75:88:6d:6b:76:18:ea:
d9:9f:70:66:d3:28:e6:f5:2f:7d:f6:c5:5b:cd:87:
1a:04:49:a5:f9:32:40:d6:d4:8c:f9:f1:a9:9a:89:
7b:19:41:11:1e:8d:cd:5f:61:92:66:c2:78:25:bd:
0a:0d:72:ad:e7:98:1b:d2:9f:1d:af:99:17:88:82:
ce:51:46:2e:8e:be:16:f4:c0:67:1c:4d:1b:c8:bc:
c3:bd:08:6d:2f:94:98:13:47:c4:fc:07:07:7a:92:
92:69:24:73:b9:7f:68:b7:7c:e0:fd:a3:93:a7:c6:
db:01:8f:5a:ea:21:8b:f3:23:c3:95:e9:51:8d:e4:
a4:13:9b:af:5c:4e:54:c8:a5:0b:11:00:3a:34:f7:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:CD:AB:39:17:80:67:95:26:3A:3E:22:0A:24:0F:D0:C6:DF:53
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/IIDNqzkXgGeVJjo-IgokD9DG31M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.210.0/23
Signature Algorithm: sha256WithRSAEncryption
83:0d:f0:8f:48:0e:b2:67:b5:15:e2:ea:d8:f5:dd:fd:36:b7:
2e:8d:ea:dc:90:85:02:fb:77:a5:90:b4:a1:4f:d0:7a:42:78:
49:9a:cd:c3:29:97:d1:2f:e5:b8:76:14:dc:6d:81:ab:93:3a:
96:6b:f6:ce:9d:ce:35:16:95:6a:5c:f1:44:d1:ab:b8:9b:5b:
84:7b:60:36:76:60:39:09:f2:2f:0a:b4:62:c5:29:42:c1:2f:
ca:63:7b:fe:2f:96:aa:20:d0:57:6b:2c:0f:c2:1b:df:4f:c7:
82:e5:1f:d6:4d:98:42:92:07:4a:88:10:ff:1e:e0:10:bc:49:
41:2c:94:5c:55:4d:60:43:ef:bb:46:59:56:4a:c9:f3:4a:5a:
8e:89:87:bf:4a:75:b4:71:57:a8:e5:41:ad:9a:3c:e2:ea:78:
bf:56:a0:da:01:eb:26:13:aa:fe:07:7c:c1:12:21:4a:1d:93:
40:51:24:9f:aa:1b:48:aa:96:04:0a:22:8f:93:4a:f1:c5:15:
d5:e8:da:74:55:4d:6f:cc:78:fa:5b:01:2f:8b:f4:6b:1d:ac:
d9:2d:23:b1:a0:16:fb:d6:0e:41:14:e5:aa:4c:e3:c8:a7:0e:
6b:06:5c:58:58:83:de:dc:27:d5:12:0d:a5:b5:6d:14:80:c3:
88:70:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:41 2025 by rpki-client