Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/14zsSqrMn1o9SZLGTT5EUe6CnU0.roa
File: 14zsSqrMn1o9SZLGTT5EUe6CnU0.roa (raw, json)
Hash identifier: f77RFCMiJtI4/MLCffqtmj8Xo40GcHETo8TzKrmaK7U=
Subject key identifier: D7:8C:EC:4A:AA:CC:9F:5A:3D:49:92:C6:4D:3E:44:51:EE:82:9D:4D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FADE4AADC76881484B7728D2884D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/14zsSqrMn1o9SZLGTT5EUe6CnU0.roa
Signing time: Tue 02 Jan 2024 02:31:27 +0000
ROA not before: Tue 02 Jan 2024 02:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198463
IP address blocks: 194.132.214.0/24 maxlen: 24
194.14.33.0/24 maxlen: 24
194.68.125.0/24 maxlen: 24
193.182.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 13:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fa:de:4a:ad:c7:68:81:48:4b:77:28:d2:88:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d78cec4aaacc9f5a3d4992c64d3e4451ee829d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:3f:fc:fe:09:64:a2:ee:f9:ed:21:57:cd:
b1:45:69:c7:cb:27:27:81:a8:37:06:ad:52:75:65:
72:ba:35:3e:cf:60:d7:b1:8d:d6:12:80:68:34:b5:
14:45:47:7c:6b:2b:3b:f6:06:b3:5e:e8:82:01:e3:
cd:b9:90:6c:04:b0:b9:67:ed:71:28:5d:a1:42:00:
24:ed:fb:f2:a2:ce:4f:b8:2e:87:43:04:0e:94:66:
b3:76:14:48:de:62:93:a9:17:7a:d2:e1:99:0d:f5:
60:04:38:07:93:03:fa:2b:1e:49:dc:7e:f6:41:a6:
d5:91:dd:5c:5b:27:98:d4:4e:6f:f6:81:a5:8b:b8:
79:62:16:1c:30:2e:7f:e3:bd:eb:f2:25:bf:c3:88:
1a:03:c5:fd:71:e6:70:c8:93:97:0c:42:91:79:35:
48:6f:ed:75:85:5f:7a:c6:19:07:98:80:1a:2f:0e:
f3:2e:45:bc:35:11:51:a1:a4:56:7b:0f:78:44:36:
f5:cc:5a:59:69:cf:fd:5d:15:de:78:99:4a:28:cd:
01:ad:c6:cd:46:36:d5:47:ff:57:d3:63:84:ba:43:
b1:35:eb:5b:7d:73:3c:fc:c5:3e:a3:32:97:87:65:
81:43:47:3f:8b:ec:33:99:a4:9a:f7:a2:13:11:89:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:EC:4A:AA:CC:9F:5A:3D:49:92:C6:4D:3E:44:51:EE:82:9D:4D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/14zsSqrMn1o9SZLGTT5EUe6CnU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.180.0/24
194.14.33.0/24
194.68.125.0/24
194.132.214.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0c:86:0e:08:0d:30:00:b8:26:38:9a:14:8c:41:52:2b:61:
8d:eb:e4:ed:be:2b:dc:11:91:30:f0:0c:91:0f:27:12:73:26:
c8:c2:47:41:a2:06:45:a7:a3:84:a0:c4:5b:f4:56:d9:9d:57:
79:69:7c:cd:b2:fc:b8:c6:85:c4:7e:51:ae:7b:af:52:e6:ff:
90:6f:67:9a:1e:e8:d8:c5:1a:cb:24:8c:35:e9:48:f9:e9:4e:
19:51:c9:57:20:bd:a0:9f:25:f4:1c:b1:1b:83:7b:78:4b:7c:
f1:9e:4f:8e:69:ae:55:5c:62:04:e4:62:6e:e3:b0:ca:5c:0d:
5d:b1:1d:5c:c7:27:1e:d4:35:d0:ee:7a:b4:73:0d:e1:bb:6e:
4b:1a:4d:55:43:bf:29:d8:30:8f:45:8d:d5:58:88:e4:ed:cc:
60:6b:1c:59:51:27:af:07:5b:a5:14:c0:ed:40:4a:8e:1d:00:
15:2b:cd:86:67:b1:49:9f:48:ec:ea:59:78:7d:ac:cf:b6:60:
5e:f7:59:da:c7:03:76:0d:9b:65:91:4a:2d:2b:94:e0:25:6b:
cc:c0:3f:52:f6:5d:aa:a1:62:89:db:b3:fe:96:f1:ee:57:9f:
46:a5:15:a9:9a:bf:cd:49:8e:e2:d1:ed:5d:b5:a4:cc:9a:28:
09:2d:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:42 2025 by rpki-client