Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/_oft00oDH8btu0kJpU3BuXLn0vE.roa
File: _oft00oDH8btu0kJpU3BuXLn0vE.roa (raw, json)
Hash identifier: +GEFMtnZCt4XRz61WH5nNsQ6lVaPupP2DNblCV7LJNE=
Subject key identifier: FE:87:ED:D3:4A:03:1F:C6:ED:BB:49:09:A5:4D:C1:B9:72:E7:D2:F1
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194DAF4D82B0F280D71DBB31A831638092F
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/_oft00oDH8btu0kJpU3BuXLn0vE.roa
Signing time: Thu 06 Feb 2025 11:11:06 +0000
ROA not before: Thu 06 Feb 2025 11:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 10:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f4:d8:2b:0f:28:0d:71:db:b3:1a:83:16:38:09:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Feb 6 11:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe87edd34a031fc6edbb4909a54dc1b972e7d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:64:bf:34:63:62:cd:e9:9b:47:63:c5:37:
b0:3e:dc:e7:43:15:2e:e0:e1:04:31:50:2e:f5:65:
bf:28:31:5e:fa:81:e8:df:dc:fe:4a:82:5e:b7:f5:
86:8a:62:bb:b2:51:c7:3a:e9:7f:3e:61:ad:f1:1c:
66:b8:99:52:79:f9:67:dc:b5:38:89:b2:6b:63:80:
c6:a7:19:2f:65:13:82:dc:1c:1e:0a:d1:53:ef:25:
78:e0:87:63:01:78:e1:47:7d:f2:88:a1:97:d6:ee:
0b:38:67:2f:00:be:93:4b:e2:9d:52:83:83:b5:6d:
e5:5c:d1:c6:bc:7b:29:81:71:4a:3a:f4:b4:94:bd:
65:ac:46:c0:c3:ed:3d:c9:1f:1a:1d:58:c2:d8:12:
ca:ef:7a:0c:f1:ca:40:65:93:64:54:fa:82:72:86:
74:d9:5c:e6:6b:b4:e7:7c:6d:c4:c1:c3:14:19:ba:
62:03:50:10:34:91:8c:73:0a:6d:36:20:14:92:0a:
2e:cb:c0:bd:75:77:d4:28:f3:1c:81:ef:64:d1:d7:
86:8f:e2:75:5d:fb:df:44:9e:ee:d5:ab:8a:d7:ff:
56:13:ec:9b:60:07:c2:35:0f:52:d8:ea:fc:fe:23:
78:b5:b3:09:6f:77:3f:b5:e2:b4:f1:3c:7e:1a:39:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:ED:D3:4A:03:1F:C6:ED:BB:49:09:A5:4D:C1:B9:72:E7:D2:F1
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/_oft00oDH8btu0kJpU3BuXLn0vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f2:12:9d:34:1b:29:02:04:b9:d3:d3:8b:f0:76:31:e6:3f:
78:e7:d5:fd:40:2b:2f:ca:af:dd:17:eb:bc:aa:bf:2a:d6:bb:
88:09:23:86:ba:6c:1c:4e:b3:8c:a6:b0:e5:e4:ec:a4:0c:7e:
39:91:33:54:06:06:8d:cb:41:3e:47:e2:b1:8a:57:d8:0d:f8:
e3:53:13:52:ee:8e:e2:71:cd:8d:aa:bd:18:b5:33:d2:1e:48:
ec:27:5e:4d:fe:7b:75:56:a4:25:0b:fb:bc:73:a7:0c:4a:07:
db:75:cc:1a:0a:ea:64:00:47:58:94:97:f3:90:d5:45:61:04:
8a:05:3e:69:d1:36:85:05:bb:ab:3b:dd:31:26:d4:de:d6:44:
54:95:68:6f:7e:91:3a:bc:36:ae:2f:39:a8:7e:1b:b7:99:da:
ed:50:13:8c:4f:0e:df:7a:7f:9e:2d:00:b8:55:5b:bf:c4:f0:
c4:e3:c2:2d:80:b5:14:40:67:fd:98:49:11:47:9e:a1:a4:65:
f1:05:b2:ff:c8:45:87:6a:63:4c:18:3e:c8:ee:f0:ed:78:55:
ae:6a:17:fa:d3:92:a9:62:4a:df:72:3e:cb:91:fa:9c:28:13:
57:73:0d:75:4e:65:91:74:13:ad:8a:43:e2:57:a8:2d:e0:6f:
a8:36:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:57 2025 by rpki-client