Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8ua9rBVbmvoF_cVYF6ftR9ggtHQ.roa
File: 8ua9rBVbmvoF_cVYF6ftR9ggtHQ.roa (raw, json)
Hash identifier: a2u4DwGzz6QL7sF1E+vpxEpa1nYwWQ8SbfpkOuDRlsg=
Subject key identifier: F2:E6:BD:AC:15:5B:9A:FA:05:FD:C5:58:17:A7:ED:47:D8:20:B4:74
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019715E6C76464007F08AA2FCC687080EBDB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8ua9rBVbmvoF_cVYF6ftR9ggtHQ.roa
Signing time: Wed 28 May 2025 07:58:55 +0000
ROA not before: Wed 28 May 2025 07:58:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213701
IP address blocks: 192.121.255.0/24 maxlen: 24
193.234.16.0/24 maxlen: 24
194.68.238.0/24 maxlen: 24
2a01:280:310::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 12:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:e6:c7:64:64:00:7f:08:aa:2f:cc:68:70:80:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 28 07:58:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e6bdac155b9afa05fdc55817a7ed47d820b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:e6:a1:b3:18:09:b0:52:36:22:5a:ab:52:
55:ae:e0:a8:e3:6f:b1:a6:42:f3:0c:50:48:2f:23:
25:bf:54:83:58:50:1a:95:d5:17:8a:af:08:bb:b3:
b9:4e:e0:b0:56:52:3d:4f:0f:ce:83:ab:b5:da:77:
b9:e9:b8:5f:fd:0f:dd:79:9e:48:4c:4a:91:91:b8:
1a:b6:f7:45:95:55:60:fd:7b:c1:2c:fc:78:dd:c3:
ec:fb:3c:e1:aa:1e:a2:f8:d8:b9:a6:55:75:85:c5:
48:dc:c1:1a:c2:75:74:71:af:83:da:9d:d1:68:e5:
c1:f0:34:f6:aa:80:4b:84:63:bf:28:51:2a:26:46:
a0:63:52:c0:c2:fe:3d:be:90:5f:2c:42:8c:6e:55:
2a:f5:f0:f3:99:5a:10:28:57:a3:aa:01:d9:0d:bc:
11:9e:16:90:96:d3:13:18:19:94:f2:a6:20:22:df:
ad:d6:7a:4e:ff:ac:99:b3:ba:e7:25:07:dc:bf:d4:
05:80:6f:1c:3a:17:52:cf:94:f2:42:80:97:1f:a2:
cb:08:1f:06:06:51:c1:52:54:79:a1:d9:3e:f1:65:
9a:ac:24:bf:6f:77:0a:73:09:36:5d:9c:e8:99:c6:
f6:68:b2:a6:8f:3b:06:6b:20:52:91:39:a1:40:95:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:BD:AC:15:5B:9A:FA:05:FD:C5:58:17:A7:ED:47:D8:20:B4:74
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8ua9rBVbmvoF_cVYF6ftR9ggtHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.255.0/24
193.234.16.0/24
194.68.238.0/24
IPv6:
2a01:280:310::/48
Signature Algorithm: sha256WithRSAEncryption
73:71:ba:c4:3a:98:44:73:cd:ea:67:93:90:b8:ed:9b:76:3e:
83:53:d9:a2:9b:de:9c:86:32:1c:7e:e8:6f:84:94:d9:78:af:
9e:c1:68:05:a0:8a:4e:95:95:76:99:b9:41:83:03:64:4d:9e:
7f:63:4d:5f:8b:2c:03:c3:39:52:c2:a4:c5:3e:52:69:ce:b4:
02:e8:d2:26:cd:61:7f:fe:ef:b7:f0:88:48:9d:57:c0:dd:a6:
ba:59:c5:bf:b4:5a:e2:e5:ff:80:a5:37:60:97:c0:dd:df:97:
f5:09:fe:13:e3:38:6a:1b:3d:7f:c0:3f:7d:96:3a:c9:75:2a:
48:4d:5d:1e:ba:8a:f8:71:3b:50:01:93:5a:6b:12:01:3d:68:
bd:98:4a:c0:e6:0d:4d:b6:99:61:35:c6:5d:ff:ed:11:bb:96:
bd:51:82:8f:56:8b:2d:37:80:62:52:6c:a8:94:13:cd:c1:69:
fb:a9:16:72:8d:da:10:0a:c1:8d:df:aa:f0:4f:a1:2b:69:aa:
97:e8:7e:74:7f:f0:00:3b:dc:26:65:ba:3e:f6:3c:f6:61:ab:
6e:97:db:17:41:f3:4f:9e:84:1c:52:ec:b9:c6:f4:63:31:7b:
5f:4c:01:7d:0c:56:58:66:34:a7:66:12:d1:5d:14:c4:cb:b8:
8b:00:e2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:07:38 2025 by rpki-client