Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Jc9D6pL0tybtqLuuNbwlYUh4B68.roa
File: Jc9D6pL0tybtqLuuNbwlYUh4B68.roa (raw, json)
Hash identifier: qj9Ku8qt3QMrLU+senB/+rsFyVvP7pOUp5NAuPmXysg=
Subject key identifier: 25:CF:43:EA:92:F4:B7:26:ED:A8:BB:AE:35:BC:25:61:48:78:07:AF
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194274893E5DDB10280CEF262F52E85F0E9
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Jc9D6pL0tybtqLuuNbwlYUh4B68.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51561
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 11:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:93:e5:dd:b1:02:80:ce:f2:62:f5:2e:85:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25cf43ea92f4b726eda8bbae35bc2561487807af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:29:aa:71:f8:3b:eb:d9:58:9b:1f:46:d5:
9a:e8:94:4d:a5:6c:22:9d:9f:bc:b8:7a:72:25:47:
fd:6d:4f:77:99:99:f0:39:f0:52:5e:9c:fc:e5:b4:
70:9d:70:9c:10:a1:b9:81:19:ca:9b:e6:ab:7b:70:
e1:fb:d0:ea:31:e9:c7:81:04:69:13:fd:28:79:ab:
d6:08:a4:2c:69:a6:b7:dd:3f:6a:4c:ef:a9:43:aa:
0e:72:9b:a9:bd:e6:c1:cc:b9:fc:9a:c1:9b:ac:fd:
cf:72:85:cc:71:f6:ad:dd:5d:ec:d3:b3:f8:f4:2f:
f5:28:e6:85:21:bf:0a:d8:84:98:91:3d:57:fe:56:
23:b8:7a:08:91:bf:e3:f0:3a:1b:3c:84:19:64:d3:
54:18:7b:4c:e4:36:8a:ea:8a:50:97:f2:b0:c1:c1:
1a:53:00:fb:42:85:98:1f:a4:f0:90:70:45:4d:67:
02:60:a8:61:48:ac:66:2e:fe:13:ae:6c:e3:2c:1d:
f7:8f:35:dc:8f:30:43:e8:69:72:a9:37:9d:d7:b2:
cc:2b:c1:6a:66:8f:1c:d7:c9:2b:5c:6d:6c:ab:f5:
d8:88:51:95:f3:57:97:02:1d:ee:ce:f6:a8:de:59:
c4:50:a0:93:df:c8:2e:ab:2f:d1:67:8c:3a:37:d9:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:43:EA:92:F4:B7:26:ED:A8:BB:AE:35:BC:25:61:48:78:07:AF
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Jc9D6pL0tybtqLuuNbwlYUh4B68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f2:20:ba:7d:2d:12:c2:84:3b:17:89:f6:42:04:c1:9f:40:
89:e4:da:fd:15:2d:29:00:75:64:5a:b8:e2:8f:74:51:2b:73:
88:9f:0d:56:ac:61:58:d0:38:82:58:17:50:18:7b:30:e1:9c:
58:2d:90:bf:83:9d:dc:65:5a:13:34:53:a0:40:5e:45:c4:86:
9d:a8:c6:83:6a:fa:6c:a9:01:e1:a1:ba:e1:50:e1:b3:12:1e:
ae:a2:98:7b:3a:08:89:29:c8:50:70:1a:b5:40:33:2b:eb:82:
11:ff:5a:6c:1b:35:88:02:5b:a8:3d:15:2d:b9:c4:e0:74:9d:
2d:3a:a5:51:4e:ea:3c:55:9c:1e:5b:80:7b:12:1e:c0:6d:c5:
98:73:87:ba:c9:ef:f0:ab:1f:2e:5a:c2:ef:c5:8b:91:7d:a0:
79:69:c5:7f:d8:9b:e4:17:ed:1d:02:04:79:ba:21:a3:a1:2a:
da:d5:13:ef:55:66:06:15:38:fa:51:8b:62:85:2d:95:3b:ff:
cd:10:a2:63:fd:da:76:b8:4a:9c:e4:1d:76:79:98:01:61:54:
1d:52:19:29:46:b6:bd:74:f3:66:fa:da:98:50:14:a7:2d:ff:
b3:2c:84:0e:1a:72:ff:53:51:19:52:39:16:a8:85:a9:ba:1c:
00:f9:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 05:51:51 2025 by rpki-client