Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DIAQul0vr4nC9gnfgvZH7ZMuo8c.roa
File: DIAQul0vr4nC9gnfgvZH7ZMuo8c.roa (raw, json)
Hash identifier: Thu7exUh2aKizfZGXWewMfLzSq72Ejb5T17eOl+I+6E=
Subject key identifier: 0C:80:10:BA:5D:2F:AF:89:C2:F6:09:DF:82:F6:47:ED:93:2E:A3:C7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80300B10127CF44E09006C142598FB8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DIAQul0vr4nC9gnfgvZH7ZMuo8c.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203052
IP address blocks: 193.234.128.0/21 maxlen: 21
192.176.224.0/22 maxlen: 22
194.132.72.0/22 maxlen: 22
193.180.76.0/22 maxlen: 22
192.121.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:00:b1:01:27:cf:44:e0:90:06:c1:42:59:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c8010ba5d2faf89c2f609df82f647ed932ea3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:f3:d9:ef:0c:6b:22:1f:21:2d:b1:b8:53:
90:66:f8:bc:00:7f:98:94:e7:40:0a:1c:bb:a6:95:
f7:b0:d5:0c:b4:00:55:2e:f6:5f:cd:29:42:fe:2e:
14:d6:35:18:2c:8b:c5:4d:86:db:e6:c9:2d:22:26:
e9:c9:e4:47:97:b0:3f:7a:25:e8:ab:d5:f5:79:0f:
c2:99:bb:e8:7d:99:4c:43:2c:b1:57:98:bd:da:d6:
d8:0c:17:c2:06:cb:91:c9:96:39:6d:c0:26:3c:46:
6d:5e:53:51:b5:ad:c3:f1:26:56:b2:71:e7:1e:e6:
c5:b0:87:f5:c3:88:7a:87:a0:42:db:9a:1b:ce:3a:
1a:09:4c:6f:cb:03:7d:39:b1:70:70:5b:24:47:30:
2e:3e:9d:a3:c4:c3:5e:5b:d0:2b:b0:02:02:cd:c1:
02:85:aa:be:e5:8c:ba:bc:b5:49:70:cf:73:b0:d1:
47:d6:8e:5b:85:8c:ed:a5:01:39:5a:82:05:8e:0d:
ad:9b:a2:45:f0:07:c6:96:a3:af:38:45:fa:b8:6e:
61:f4:93:77:62:eb:99:17:e8:a0:cb:b4:a4:5a:e6:
25:41:4a:c9:1f:5f:89:f1:f9:09:47:3f:49:39:36:
a4:46:1f:75:59:b6:be:85:ec:9a:87:ec:e8:d8:e7:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:10:BA:5D:2F:AF:89:C2:F6:09:DF:82:F6:47:ED:93:2E:A3:C7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DIAQul0vr4nC9gnfgvZH7ZMuo8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.204.0/22
192.176.224.0/22
193.180.76.0/22
193.234.128.0/21
194.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
71:39:b8:6b:ba:da:94:62:21:d6:28:f4:b6:dc:0a:30:11:e0:
ea:87:fc:8d:dc:a6:5c:ae:37:ab:b3:3c:77:d1:3e:8e:37:be:
ed:26:de:a4:3e:65:4a:6e:34:36:39:42:e2:5d:bd:97:2e:f8:
6b:6f:e5:83:ab:9b:d6:d7:ec:31:0b:bc:b4:cb:ac:4d:2f:79:
df:2f:d5:eb:83:39:ad:d2:49:b5:84:c9:ec:bc:05:c9:7c:df:
9f:42:fd:25:ce:d6:3a:be:ce:54:8d:5c:7c:50:71:2d:f6:56:
ee:de:10:75:b3:61:69:1f:32:6e:4f:3d:7e:4f:92:23:67:cb:
30:52:75:6a:4f:8a:ab:80:91:17:c1:ee:bd:b9:70:03:7f:e6:
7d:2a:6d:3c:82:58:78:eb:ae:c4:dd:60:7c:f8:e2:b5:b0:dd:
3b:cc:53:9c:49:a7:58:c3:3f:73:fa:3a:cf:7a:64:e5:20:11:
7b:33:8a:31:49:53:23:0a:47:83:df:f8:f3:b5:94:dc:89:44:
39:d4:6c:1b:a2:cd:18:3b:c7:ac:07:9a:9c:1f:6a:5c:94:b8:
ad:57:49:79:19:14:dd:b7:73:47:f8:ef:66:4c:a0:ca:4d:fd:
17:72:2e:47:9f:bc:12:71:11:03:a0:49:e1:b7:29:6c:6b:a3:
0c:b5:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:37 2025 by rpki-client