Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/jsOoAR4LEBcATWhlLudlgx6Vs8A.roa
File: jsOoAR4LEBcATWhlLudlgx6Vs8A.roa (raw, json)
Hash identifier: cE333fEVqmbowmk6FrM4XeMrXrO5iG3+P0bdxykn/FU=
Subject key identifier: 8E:C3:A8:01:1E:0B:10:17:00:4D:68:65:2E:E7:65:83:1E:95:B3:C0
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 018CCA2B31E29A0F5A1D6D43F3461CD4604A
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/jsOoAR4LEBcATWhlLudlgx6Vs8A.roa
Signing time: Tue 02 Jan 2024 12:34:37 +0000
ROA not before: Tue 02 Jan 2024 12:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211709
IP address blocks: 193.3.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 00:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:31:e2:9a:0f:5a:1d:6d:43:f3:46:1c:d4:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jan 2 12:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ec3a8011e0b1017004d68652ee765831e95b3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:10:01:4b:a6:c6:6e:1b:27:97:3d:8b:0f:
81:1e:b9:eb:d6:1c:6a:d5:ef:f8:42:b6:a0:37:37:
35:ee:62:c5:14:67:5a:ed:0c:86:52:82:32:05:37:
06:b3:4c:5f:93:f2:b2:c3:f5:7a:e8:8c:30:a2:d7:
5f:d4:8a:e7:22:a7:7a:40:75:b5:e0:2c:e5:01:fb:
88:a7:56:6a:4f:4b:bb:63:12:71:37:2a:cd:1f:6f:
14:11:f1:06:62:37:b2:21:b2:87:7a:66:c8:0b:8d:
34:c8:97:5b:38:a4:f3:36:ca:72:d2:fa:6a:e9:ef:
07:89:8b:83:31:1f:a6:bb:ab:2c:98:4c:6b:7e:84:
6b:7d:a0:49:21:c6:71:50:d4:f9:54:1c:8f:29:02:
89:d5:7a:c2:02:19:b2:65:88:5f:ad:2c:48:1a:28:
da:c7:d4:01:93:68:10:cb:eb:e9:7f:a1:fc:e0:b5:
82:b7:45:09:47:31:35:d8:47:62:87:ad:5f:d7:6e:
cf:e7:fc:a4:66:e5:47:e0:8b:03:5d:e2:03:dd:8f:
0a:a9:9a:14:23:28:af:0b:a0:f9:df:39:a2:ad:e7:
d6:58:f1:c3:88:ef:58:9a:e4:7d:2f:2d:51:76:be:
e4:41:78:3d:5f:c9:d1:f7:e5:c1:8a:a0:14:cb:5f:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:A8:01:1E:0B:10:17:00:4D:68:65:2E:E7:65:83:1E:95:B3:C0
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/jsOoAR4LEBcATWhlLudlgx6Vs8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.41.0/24
Signature Algorithm: sha256WithRSAEncryption
78:75:14:94:f8:0d:e0:af:4d:e8:84:6a:7f:e6:8a:4e:fc:02:
df:45:69:8f:64:42:53:f4:7d:55:23:d6:34:72:04:a1:12:8b:
40:76:38:d4:9e:3a:0b:ee:9c:bf:43:ad:43:95:75:9f:b3:22:
9b:61:53:ef:a6:b9:0a:30:63:d7:63:51:a4:24:28:85:c8:af:
7c:66:08:70:48:4a:53:87:92:22:98:a9:bb:ef:21:3a:60:94:
3d:3f:40:b5:87:a0:4a:28:73:0f:31:56:4a:8d:39:5e:22:0a:
59:34:28:f1:36:b4:ef:d0:96:2d:36:78:f2:48:c1:28:98:22:
21:06:5b:d7:85:4a:a7:85:bc:e6:c4:38:b5:7a:07:19:78:b5:
1f:68:c2:b3:92:46:76:2f:99:a9:4d:44:11:75:c1:18:c6:cf:
d8:48:3d:45:a7:e8:62:fc:08:55:5d:18:16:96:69:7f:97:22:
3c:2b:a7:e0:15:0d:45:37:9b:63:c9:23:72:b2:aa:2f:70:da:
f5:6c:dc:71:2f:5e:31:dc:19:15:af:a4:1d:8f:e5:52:97:23:
04:15:1b:0c:be:93:5f:ef:dc:f2:d9:51:ce:b7:08:fa:b3:4b:
4a:d3:ea:7b:52:b3:1d:c0:2a:b5:27:f0:c0:ae:9e:38:52:71:
e6:6a:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:55:44 2025 by rpki-client