Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/8UpMixWrF4KZxATwaYXu73Tl6J8.roa
File: 8UpMixWrF4KZxATwaYXu73Tl6J8.roa (raw, json)
Hash identifier: Y8luonwBpec3sNaM3psXiCVoIk0+spympNdZePAZnw0=
Subject key identifier: F1:4A:4C:8B:15:AB:17:82:99:C4:04:F0:69:85:EE:EF:74:E5:E8:9F
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 018F592DFC1461C303E3D70AA34F970DC21B
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/8UpMixWrF4KZxATwaYXu73Tl6J8.roa
Signing time: Wed 08 May 2024 17:08:56 +0000
ROA not before: Wed 08 May 2024 17:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211148
IP address blocks: 193.242.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:2d:fc:14:61:c3:03:e3:d7:0a:a3:4f:97:0d:c2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: May 8 17:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f14a4c8b15ab178299c404f06985eeef74e5e89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:9a:3f:cf:a5:75:5c:de:89:7e:63:3c:1c:
dc:f5:83:52:8d:5e:79:a5:ef:0a:4c:cb:2f:bb:2c:
7e:31:dd:bb:56:dd:81:67:c7:3c:de:15:4f:d7:6a:
d5:ad:a2:e8:41:1a:67:12:a9:04:f6:f5:e2:eb:d1:
e6:a3:a3:d8:5a:e3:6e:10:58:50:ce:5c:2a:09:7b:
92:86:c6:d5:2e:94:ab:b0:93:58:06:80:33:9f:e8:
d0:e6:29:a2:b4:f7:00:c2:c4:d1:a9:70:6e:e6:b1:
56:e9:2c:90:f4:5f:5a:dc:97:de:12:a8:4f:b0:4c:
a7:a5:bd:ac:04:35:2c:08:70:d8:60:ad:11:5c:ce:
f7:9a:12:5d:4f:b7:30:4a:1e:48:9c:da:3c:6e:a7:
b1:a9:88:52:24:12:cf:37:52:f5:08:16:2d:0e:c6:
e2:c9:c4:c6:8b:fb:74:de:1c:6a:3c:cd:0a:d6:c7:
2d:ed:68:8d:33:b1:ee:67:30:4d:96:0c:b6:08:ac:
d5:7b:ae:e2:04:96:5b:d2:01:e8:ff:5a:7a:41:8f:
d5:e3:5a:be:b3:2f:d2:49:7e:b0:03:38:de:bc:fc:
f2:d7:0e:b7:fa:eb:a2:9a:f1:1e:5d:d6:fa:59:d6:
7b:39:35:d8:c3:1d:c4:9e:e3:5c:1f:69:da:c3:54:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:4C:8B:15:AB:17:82:99:C4:04:F0:69:85:EE:EF:74:E5:E8:9F
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/8UpMixWrF4KZxATwaYXu73Tl6J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
12:59:4c:bc:c4:e0:71:fa:1f:46:f9:d5:58:b0:03:9e:a9:f9:
b0:57:36:14:3d:c9:d5:23:3d:50:04:d1:f0:ef:f0:59:d4:4e:
be:67:d6:63:14:9c:b3:a7:7b:dd:32:4e:c5:41:39:c5:bd:8c:
b8:41:4b:66:de:31:ef:79:42:8e:df:de:1d:00:21:c4:70:1b:
50:5f:da:94:77:48:7d:a2:4a:71:77:0a:14:5b:0d:e3:fe:f1:
0a:e0:73:70:38:c1:34:15:2e:4f:6c:b3:bc:9a:b5:e4:b9:ee:
01:e9:cb:d1:35:2b:82:c1:d9:42:55:20:5a:1f:11:60:e8:6b:
2b:62:f9:f4:f0:ba:b3:9d:94:58:e5:dd:e5:ee:f0:b3:14:ce:
9b:df:b3:24:bd:4d:b9:a0:d7:b0:11:91:b9:ea:2b:ab:96:bd:
be:63:09:41:96:d5:e0:44:1a:e9:3a:30:42:85:b4:be:84:ca:
cd:a4:8f:d6:06:c6:67:64:77:65:2d:7e:73:1c:e1:89:ef:b6:
cb:b0:59:f0:11:bb:ce:ff:9a:a9:57:78:8f:e4:9e:27:63:1c:
e9:e5:14:e5:d9:0e:31:18:8a:e5:1f:27:a3:ad:2a:13:52:93:
c4:a2:94:bb:9e:43:fc:2d:68:37:dd:bf:6f:82:4c:c7:5c:2e:
4d:79:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:54 2025 by rpki-client