Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3XFfwx-T5WtqEglqwoETUM8CDrQ.roa
File: 3XFfwx-T5WtqEglqwoETUM8CDrQ.roa (raw, json)
Hash identifier: 1MAmthAMQ7GYjbvKaKOckANSkVCQax2XIqRGdFUzM5w=
Subject key identifier: DD:71:5F:C3:1F:93:E5:6B:6A:12:09:6A:C2:81:13:50:CF:02:0E:B4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC8030003A0DAAE28DAEBED99CADFC152
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3XFfwx-T5WtqEglqwoETUM8CDrQ.roa
Signing time: Tue 02 Jan 2024 02:31:28 +0000
ROA not before: Tue 02 Jan 2024 02:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201604
IP address blocks: 193.183.114.0/24 maxlen: 24
193.183.113.0/24 maxlen: 24
194.71.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:00:03:a0:da:ae:28:da:eb:ed:99:ca:df:c1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd715fc31f93e56b6a12096ac2811350cf020eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:71:ae:db:a3:86:f5:9b:eb:73:92:f6:d7:
4e:33:d4:aa:0e:a4:0a:74:d4:9a:2c:49:e5:06:af:
d4:27:5f:75:1a:2a:52:90:f0:3e:04:23:d9:71:64:
24:dd:9f:ae:f4:d6:91:bd:68:8b:92:7a:ae:dd:38:
b7:9e:e9:99:76:11:3c:71:55:47:9d:19:b4:55:ff:
c2:f9:e4:da:9a:1e:60:ae:6a:03:50:a2:81:13:fb:
ee:f9:cc:0f:e0:dc:5c:8b:f3:47:65:cc:86:07:00:
40:64:9e:74:ff:9e:56:73:a3:df:86:3b:10:43:36:
38:78:2d:15:f1:80:c6:57:81:a2:60:29:7c:8e:ba:
00:4d:2d:eb:2b:fc:0c:5f:5c:81:53:d0:89:87:30:
cf:9a:34:b3:fd:c8:24:a0:08:61:cc:84:c8:66:bc:
82:f7:e5:e6:02:eb:c6:87:b6:73:f0:7b:2d:cf:91:
6e:f1:04:89:7a:fb:09:71:74:9c:7e:1c:da:27:ff:
71:42:c5:ee:13:9c:e4:fc:b8:56:41:d1:ef:7a:b2:
9a:f7:71:f1:fd:04:cf:5e:62:38:ca:03:1c:54:b7:
40:bb:ff:84:14:b5:2e:65:8b:95:cf:96:81:b8:b5:
f1:32:d5:c5:16:09:df:3d:ae:45:0c:13:ed:ae:b4:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:5F:C3:1F:93:E5:6B:6A:12:09:6A:C2:81:13:50:CF:02:0E:B4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3XFfwx-T5WtqEglqwoETUM8CDrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.113.0-193.183.114.255
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:e3:55:97:c7:8d:89:d1:33:7c:9f:a0:ee:a0:ca:cb:f8:9d:
c2:74:24:a4:70:4c:ed:15:f2:e8:92:c7:51:0f:ea:45:00:dd:
b5:b6:2c:8d:aa:43:6e:cc:cd:2d:49:99:13:31:c2:39:27:f9:
22:bf:46:de:50:b9:5f:8e:cc:19:3f:63:cb:64:d1:45:69:75:
63:f5:34:10:27:4b:11:7c:cb:20:72:56:fa:1f:89:10:bc:f8:
3d:ca:a8:0f:63:a9:da:7b:f4:f4:7e:6c:b9:5d:23:cf:fd:92:
63:5e:5f:16:3f:30:04:4c:8c:2d:ad:bc:2a:b8:5c:e0:ca:00:
f6:90:8a:ab:f6:1a:fa:d6:b1:4d:1b:57:ef:f0:92:25:4b:e6:
5d:6c:48:70:76:08:e0:72:6d:99:9b:a6:81:8f:37:eb:10:56:
4f:30:e6:90:5d:97:9e:06:fb:33:b7:d2:1a:a4:87:1a:88:74:
5d:30:5f:71:76:39:88:6d:2d:35:50:ee:a6:4a:75:eb:8b:2a:
0e:89:9e:36:8d:35:c1:b8:13:0d:b1:de:9a:66:53:de:90:00:
db:5f:a5:5a:df:7f:42:14:f3:3e:17:93:ef:07:1b:e7:b1:00:
88:08:12:7b:80:9c:cf:71:3f:c9:2d:d3:d9:a4:ba:1b:67:2d:
7e:08:21:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:55 2025 by rpki-client