Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/h3o_mnE3G_4rYQVE3rEztRuOEz4.roa
File: h3o_mnE3G_4rYQVE3rEztRuOEz4.roa (raw, json)
Hash identifier: I2pb1pEOGgHB4zb5PMuL6kEPdDzXIItGphp4WqB6PFY=
Subject key identifier: 87:7A:3F:9A:71:37:1B:FE:2B:61:05:44:DE:B1:33:B5:1B:8E:13:3E
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 018F1287EB75A39D31F47D3D0F9F65ABEDF4
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/h3o_mnE3G_4rYQVE3rEztRuOEz4.roa
Signing time: Wed 24 Apr 2024 23:54:08 +0000
ROA not before: Wed 24 Apr 2024 23:54:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200260
IP address blocks: 193.242.222.0/24 maxlen: 24
2a13:75c1:100::/40 maxlen: 48
2a13:75c1:100::/44 maxlen: 48
2a13:75c1:110::/44 maxlen: 48
2a13:75c1:300::/40 maxlen: 48
2a13:75c1:2000::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jul 2024 19:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:12:87:eb:75:a3:9d:31:f4:7d:3d:0f:9f:65:ab:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Apr 24 23:54:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=877a3f9a71371bfe2b610544deb133b51b8e133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e4:f1:3b:60:b4:3f:f9:96:3d:49:70:20:11:
6a:96:eb:62:c2:9e:5f:32:80:f5:fd:61:b9:20:bf:
5e:83:d8:94:39:6f:66:ae:91:9b:5b:96:0e:6d:98:
e1:9e:23:54:8e:4e:62:4d:62:9f:78:35:76:e4:b4:
d1:06:8a:1d:0f:ca:46:30:c4:3c:44:90:db:93:b4:
ee:7f:4c:47:07:26:54:93:6e:44:59:a0:1b:f0:9a:
40:6a:84:a0:54:f8:0d:36:d8:6c:32:23:27:62:25:
4d:2a:a7:bc:28:42:c4:44:56:25:9e:ec:4d:f9:db:
f3:71:d4:6c:6d:64:14:8a:13:51:3e:de:cf:81:8c:
86:dc:f3:6f:e9:e1:67:6d:fe:99:9f:60:5b:7b:f2:
c7:1a:43:00:cc:1d:2b:37:8a:79:17:05:72:92:f3:
c3:3b:f0:2b:21:06:c7:fc:94:2c:97:92:a1:81:2a:
04:32:b2:77:ba:2b:66:fa:ea:9d:00:c2:90:27:f0:
f9:75:69:c5:b7:c3:77:3a:16:b9:63:da:25:c6:49:
8f:d3:86:f5:65:4d:00:c3:6c:56:5f:8c:ea:3f:77:
1e:40:5a:46:98:b7:42:33:c3:cd:bb:e2:0e:71:da:
96:f0:2b:31:0f:24:f6:33:8a:ff:90:34:27:00:72:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7A:3F:9A:71:37:1B:FE:2B:61:05:44:DE:B1:33:B5:1B:8E:13:3E
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/h3o_mnE3G_4rYQVE3rEztRuOEz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.222.0/24
IPv6:
2a13:75c1:100::/40
2a13:75c1:300::/40
2a13:75c1:2000::/36
Signature Algorithm: sha256WithRSAEncryption
20:39:2f:a0:c5:a1:d6:3d:31:32:4c:55:99:5b:5c:0d:5f:9e:
89:ae:f1:a9:c1:7e:3a:1b:fe:9b:e9:ec:4b:4f:b4:78:c4:b3:
ef:4c:c5:ba:0a:9b:1d:53:8d:51:b0:32:26:ff:a5:2c:e0:31:
3b:7b:89:08:73:16:6e:b3:ba:16:99:e5:10:a4:dc:bc:33:63:
76:14:31:f6:88:69:da:56:49:aa:34:9c:8a:54:f6:b0:fa:5c:
e7:bb:00:76:5f:e5:eb:2c:df:a2:30:3d:41:ce:70:d8:be:8a:
90:bd:36:42:ef:7a:df:56:6e:ce:f8:db:15:ac:d0:32:6f:72:
c7:ae:10:a2:98:62:4c:be:c4:1f:27:b1:e9:fa:d1:f3:9c:8d:
47:bc:39:fc:e9:22:ce:4b:47:be:82:f9:33:75:ea:ba:94:39:
26:ed:03:dc:8a:36:cc:d8:c0:45:ab:fe:6f:cb:78:94:55:3c:
80:a6:b2:22:00:c6:60:c3:65:d7:bc:1c:2b:bd:b4:68:89:b0:
ed:9f:16:c5:84:66:ad:f3:cc:78:05:23:f4:d6:66:1d:82:76:
f8:b3:29:d6:00:7c:d0:e5:e5:ff:6f:7d:a1:03:e8:34:ff:03:
0a:7b:14:b7:80:8c:2c:43:32:b6:55:dd:5f:06:2f:a9:5c:e9:
7e:ae:5d:53
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 8 20:32:53 2024 by rpki-client on console-fra.rpki-client.org