Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B18JwS0MdA1Oi9rkzAxqKylchI8.roa
File: B18JwS0MdA1Oi9rkzAxqKylchI8.roa (raw, json)
Hash identifier: jjGMFs06c4dNIbHbBHuqmyEG5pb5vRYlPA+2c1jUV5c=
Subject key identifier: 07:5F:09:C1:2D:0C:74:0D:4E:8B:DA:E4:CC:0C:6A:2B:29:5C:84:8F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EAC27B207FA84D00FE8F2BBD2AE6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B18JwS0MdA1Oi9rkzAxqKylchI8.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39871
IP address blocks: 192.36.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ea:c2:7b:20:7f:a8:4d:00:fe:8f:2b:bd:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075f09c12d0c740d4e8bdae4cc0c6a2b295c848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:c4:a3:32:5a:03:dd:09:d1:e8:e8:9e:dc:
8f:e7:dc:41:42:fd:fd:b2:69:11:ad:36:55:3a:e8:
26:23:88:17:d7:5c:6e:21:92:0c:75:97:ff:cd:f6:
11:dd:94:76:3e:03:ae:a9:7a:fc:87:06:58:41:f5:
2a:65:1b:9f:2a:06:a9:e5:f5:81:81:7a:4e:c0:b2:
d1:4b:8a:a1:99:70:7d:30:b4:ba:35:ca:e2:c1:30:
4b:0d:d1:3d:43:1a:d0:b1:6b:75:aa:e6:c4:76:04:
69:ab:1b:f1:1d:8c:8a:5d:63:61:fc:f7:ee:42:cb:
25:b7:26:d7:fd:ac:91:d2:69:36:85:73:16:30:07:
d9:5c:0b:22:5f:0e:14:b3:06:21:66:dc:79:57:c4:
3c:d1:ec:bc:6a:66:bb:cf:bf:fc:8f:7e:d8:58:ea:
51:32:55:5f:1a:a7:d9:ce:04:3d:5e:82:d9:50:a5:
27:91:b0:29:e6:36:69:c4:5f:01:5e:fb:0c:a5:90:
73:53:22:b8:58:60:45:87:18:19:ab:9d:8c:d5:a8:
65:fb:a9:c5:20:d2:7e:89:68:b7:4b:75:9a:3d:2c:
be:01:95:7f:40:a3:c8:8c:d5:d9:94:af:db:8f:54:
b8:88:87:3d:08:d8:14:99:e3:8f:83:b5:23:49:e7:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:09:C1:2D:0C:74:0D:4E:8B:DA:E4:CC:0C:6A:2B:29:5C:84:8F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B18JwS0MdA1Oi9rkzAxqKylchI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:39:c7:1e:44:e4:02:8d:f7:90:f6:23:af:c1:cf:70:8a:40:
6c:bf:12:d9:1f:d2:79:a9:c0:b8:1f:6a:3a:3b:04:73:e3:70:
d7:2d:d6:f3:68:87:55:60:fa:e5:25:07:f8:38:01:3d:97:45:
ab:ba:c4:a1:9b:eb:06:53:0b:b0:36:91:fc:71:a4:4b:19:f2:
81:01:3d:70:b5:69:61:c0:90:a2:76:9b:2e:83:e9:35:09:07:
08:12:30:58:8f:df:0f:06:62:8e:52:cb:d5:6c:5f:34:dc:0e:
48:17:42:18:91:31:36:23:24:70:59:70:f4:51:34:07:6b:16:
5f:ef:e9:d0:c2:f7:4f:79:15:fd:ac:7f:17:6c:6a:5c:fa:e8:
31:78:f4:eb:59:d6:04:6b:cb:a6:4e:97:07:f7:21:be:54:d2:
07:91:55:b3:93:bd:c9:cb:f9:e6:11:2a:ad:00:9d:1b:5e:4c:
e3:b7:96:de:9c:0d:cc:bf:79:3f:c6:0d:04:a2:db:66:3c:34:
56:cd:85:84:a8:62:ff:a3:a9:2c:66:bc:64:e9:f1:57:ea:19:
91:94:bb:bd:76:cd:2e:88:54:12:92:73:81:2f:00:9d:7d:4d:
3b:74:c0:3c:0a:cd:c3:03:d8:11:09:1a:34:8b:f9:5f:4c:58:
52:27:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:11 2025 by rpki-client