Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uzjizYh2Y8ohoxQbZqk1JQj3hdc.roa
File: uzjizYh2Y8ohoxQbZqk1JQj3hdc.roa (raw, json)
Hash identifier: DNdh4gCZn6kHB5Yk86TA3cwjcrUqHnRkRc7jiNlA95g=
Subject key identifier: BB:38:E2:CD:88:76:63:CA:21:A3:14:1B:66:A9:35:25:08:F7:85:D7
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBA29AA57571DAD56864773DA83FE
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uzjizYh2Y8ohoxQbZqk1JQj3hdc.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35264
IP address blocks: 194.224.168.0/24 maxlen: 24
195.235.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ba:29:aa:57:57:1d:ad:56:86:47:73:da:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb38e2cd887663ca21a3141b66a9352508f785d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:d5:bf:34:0e:42:b1:1e:d3:72:7b:9e:89:
1d:bd:21:a1:2d:ea:a5:da:da:14:c7:a6:7f:3f:2d:
eb:90:cc:37:36:57:85:69:c5:63:58:0b:9d:f1:88:
5f:4d:8a:d4:56:7d:14:f7:0e:17:ab:46:82:65:1b:
74:44:eb:3f:ea:a8:53:6b:ab:d6:24:3b:60:b1:ba:
c4:9c:4d:ce:26:51:95:8f:2f:bc:10:f0:45:9f:96:
d8:5c:14:60:db:bf:58:65:62:45:51:a6:13:b7:35:
67:b1:52:5e:12:36:64:10:7f:25:ff:9e:8d:64:6b:
3b:5c:f6:93:b5:36:9e:20:70:73:ae:5d:97:10:cc:
43:8c:03:25:62:45:f5:9b:cd:35:4e:c2:36:9c:ca:
23:31:ff:c0:37:fd:cf:b9:3b:fd:48:27:d3:cb:04:
8f:f3:89:a9:05:8d:a6:95:52:de:50:b6:8a:c2:ca:
0f:ab:04:48:18:25:0f:32:be:08:19:35:38:85:fc:
6f:4d:a4:e3:6b:26:41:db:09:51:a6:cc:49:c3:7a:
e9:cf:19:46:e5:54:70:4d:71:aa:f8:60:9f:de:31:
71:22:3f:27:66:ff:81:98:26:21:0e:5c:aa:52:5f:
94:a8:d3:ad:71:34:17:c5:ed:cf:07:8d:51:a5:b4:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:E2:CD:88:76:63:CA:21:A3:14:1B:66:A9:35:25:08:F7:85:D7
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uzjizYh2Y8ohoxQbZqk1JQj3hdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.224.168.0/24
195.235.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2e:1d:6c:ce:e8:d7:51:3d:c2:bb:2e:c4:4e:e9:db:86:d3:
26:b4:d6:b4:70:7b:85:0b:c9:2b:af:92:09:f1:1d:d6:5b:34:
18:a0:75:f2:26:33:b0:49:cf:52:e9:ee:0d:7d:1e:50:5c:c4:
8f:d8:15:be:4f:51:0f:bb:c6:ad:16:d1:a6:de:38:42:95:c3:
09:12:c3:6b:6b:3b:d4:bd:bd:ae:a6:45:26:9a:b3:3c:bc:5a:
f6:75:d8:dc:ec:9e:f2:7e:13:1c:24:df:d9:a9:b1:25:06:84:
bc:99:89:66:f3:aa:c0:3f:ae:88:38:2c:a2:65:c0:f7:13:38:
f8:1c:01:8a:63:81:b5:75:a2:ba:1c:71:97:97:52:92:c3:3b:
62:a8:bc:39:e4:03:7a:7b:d8:38:8b:46:6d:5a:a1:fe:07:de:
15:bd:5b:12:37:e8:20:aa:5b:88:3d:f8:13:80:36:94:4d:c4:
02:d6:0d:18:2c:50:7e:c6:dd:68:62:52:52:50:d4:0b:4f:1e:
19:2b:bb:94:65:83:67:62:3c:d1:bd:df:26:64:16:b3:e6:3b:
d8:be:39:87:da:d9:2f:91:35:85:5c:bc:85:28:4e:2e:a8:8f:
3a:57:45:6c:6d:db:78:10:7d:70:d9:c6:d3:26:f5:96:30:f3:
1f:f5:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:28 2025 by rpki-client