Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/u0OgeyG6IOQt4xXDxaHAUdSFZzg.roa
File: u0OgeyG6IOQt4xXDxaHAUdSFZzg.roa (raw, json)
Hash identifier: 9g4jfRl+DI9nWs4MRLmSOW1XsCOYuboqiK7DXmek6NQ=
Subject key identifier: BB:43:A0:7B:21:BA:20:E4:2D:E3:15:C3:C5:A1:C0:51:D4:85:67:38
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194075CF0ACBDF93514545927B0A1750748
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/u0OgeyG6IOQt4xXDxaHAUdSFZzg.roa
Signing time: Fri 27 Dec 2024 09:05:18 +0000
ROA not before: Fri 27 Dec 2024 09:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:5c:f0:ac:bd:f9:35:14:54:59:27:b0:a1:75:07:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Dec 27 09:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb43a07b21ba20e42de315c3c5a1c051d4856738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:c3:5d:26:3f:d8:17:d2:8e:84:7c:88:60:
e4:b9:ad:ce:14:fd:9a:07:d0:6b:58:4e:12:ba:b9:
51:81:34:7d:01:cc:a4:52:71:f5:46:bd:2a:1a:71:
e3:0a:d3:c2:5f:7c:8e:5a:05:3e:12:98:d9:29:38:
4a:9f:aa:d8:82:a7:11:bc:d5:5b:13:8a:f4:fa:0a:
ae:6c:58:e3:32:a4:34:08:d4:20:7f:3f:d1:a1:1b:
a5:40:f9:ef:68:4c:34:62:34:d3:36:4f:63:0b:82:
e6:68:df:ce:1d:c6:70:74:8d:4e:f5:6a:d5:87:93:
94:f1:da:6e:9f:55:8a:07:45:0f:2a:3e:17:c0:9d:
89:6e:09:26:9c:c9:55:ae:56:a0:2e:40:25:b6:da:
32:31:07:ab:2d:76:26:26:e0:f1:21:23:34:7f:1d:
aa:17:5b:e8:fe:c5:6b:f9:59:ff:45:8b:83:8e:72:
58:8e:dd:05:0e:5d:1a:2d:a5:67:0d:ee:30:ec:c3:
fd:69:de:a7:f5:1d:1a:c6:fc:be:39:a7:91:50:32:
e9:48:8c:e7:59:57:94:de:33:12:cb:ac:b2:34:61:
7e:dd:98:6a:78:d5:8e:38:8c:fc:e9:ef:fd:ce:3e:
e5:cd:5b:d8:4a:9c:4b:51:f3:23:92:cc:5a:cd:ee:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:A0:7B:21:BA:20:E4:2D:E3:15:C3:C5:A1:C0:51:D4:85:67:38
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/u0OgeyG6IOQt4xXDxaHAUdSFZzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
47:49:ab:37:9f:ca:0c:ab:e1:8f:7e:62:57:0b:39:6e:3a:e5:
93:90:c8:e5:e8:93:56:aa:1f:db:d9:83:9f:e6:55:e7:d9:79:
7c:a6:05:6a:fe:76:33:c7:38:c5:f7:5d:18:c1:c5:0a:26:aa:
a1:26:84:fc:09:1f:ef:80:9c:9d:b6:55:b3:17:87:ab:e2:fe:
cd:80:a0:8d:10:cf:82:8b:ed:3e:ee:c9:b2:f7:b4:08:be:6c:
f7:ab:13:79:fb:0c:a6:46:c1:b5:44:94:09:05:cb:8b:a8:ce:
8f:3a:dd:fd:8e:23:f6:72:b3:3f:6f:ae:23:54:78:bf:24:ce:
62:9a:68:66:ee:76:99:0e:5f:ab:f0:c6:42:88:50:b6:b8:f5:
03:63:81:54:68:7d:9a:24:bc:b4:42:b8:40:2b:26:df:0d:09:
ec:d2:1d:6f:5d:ea:5a:a7:a2:e8:24:84:c5:fc:24:65:70:0e:
79:be:24:2c:ba:f3:4b:85:27:9d:1d:fd:1e:d7:e8:57:bb:f2:
f5:d3:13:97:bc:93:6b:a2:0e:67:29:33:d9:e9:91:ee:be:9a:
cd:12:d3:7b:68:41:ff:74:57:8c:4e:3f:ee:c9:b4:af:bd:e5:
dc:a4:dc:2c:ad:1d:6f:31:74:b6:bf:38:d8:1c:d6:76:17:e6:
b3:5b:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:23 2025 by rpki-client