Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oH8bcftLLooGmIt0B9a73xnE3Zg.roa
File: oH8bcftLLooGmIt0B9a73xnE3Zg.roa (raw, json)
Hash identifier: Qi0dwcwKJHXs0PnPjPyYq6tMkAwYpI7cjAGnxR8HC1I=
Subject key identifier: A0:7F:1B:71:FB:4B:2E:8A:06:98:8B:74:07:D6:BB:DF:19:C4:DD:98
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018F9F3A8A0B02478CDE5758C73EC67C97AC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oH8bcftLLooGmIt0B9a73xnE3Zg.roa
Signing time: Wed 22 May 2024 07:36:04 +0000
ROA not before: Wed 22 May 2024 07:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34628
IP address blocks: 193.183.70.0/24 maxlen: 24
193.183.75.0/24 maxlen: 24
2a01:280:328::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 May 2024 12:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:3a:8a:0b:02:47:8c:de:57:58:c7:3e:c6:7c:97:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 22 07:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a07f1b71fb4b2e8a06988b7407d6bbdf19c4dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:37:19:bd:2c:6d:78:e0:01:a4:61:8c:0c:
89:f1:e9:13:07:f9:38:67:9b:f5:b0:d3:27:34:5d:
aa:65:39:9d:67:b2:5a:b8:1d:37:81:6f:7f:56:72:
6d:c2:d9:85:08:36:df:09:72:0a:23:dd:38:f4:39:
1e:92:a6:ad:56:a5:00:71:b3:ff:c5:d4:bc:e8:b6:
53:dc:6d:9d:09:56:cc:55:8a:01:2a:ca:dc:cc:f9:
b3:0e:32:85:a7:87:d0:1f:c5:a7:ee:43:9f:dc:af:
4b:eb:b7:66:85:c4:71:35:42:06:e7:f8:e2:18:47:
2d:a0:b4:53:07:6a:97:99:3d:1d:26:68:aa:72:c5:
6f:2b:52:14:94:7c:bc:8b:61:86:c5:3b:30:2d:96:
f8:0c:a4:9c:6b:e7:1a:28:86:bc:73:5f:33:1e:c0:
85:a8:c7:00:c7:b4:b7:26:78:07:82:6c:6f:6f:bd:
89:c8:37:2c:b8:de:4e:8a:44:32:4b:a2:9e:46:8c:
e2:62:16:d8:76:51:0c:21:0a:0c:c9:92:71:fb:dd:
2b:49:0c:d1:24:63:cd:c3:1f:d3:a3:68:65:ff:4e:
0f:4b:31:07:fb:ad:5a:ce:01:f1:71:bd:d9:4e:8f:
7b:90:89:4a:47:ab:23:9c:69:ab:95:f1:2a:03:4c:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7F:1B:71:FB:4B:2E:8A:06:98:8B:74:07:D6:BB:DF:19:C4:DD:98
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oH8bcftLLooGmIt0B9a73xnE3Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.70.0/24
193.183.75.0/24
IPv6:
2a01:280:328::/48
Signature Algorithm: sha256WithRSAEncryption
1e:1f:fe:91:1d:96:33:ae:9d:54:4d:40:82:78:da:dd:ab:90:
ad:8e:e4:95:38:38:78:3b:cb:3c:c6:20:0a:67:32:46:4e:01:
e0:28:ad:3e:15:7f:15:d2:bc:99:3c:ad:dd:84:c9:6f:e0:2e:
e3:06:8f:a3:55:ed:1c:48:bf:b1:48:d4:49:9a:9a:c6:a4:56:
ee:7b:33:eb:4d:65:bc:d1:d6:3e:36:94:e1:16:2c:7d:08:cc:
21:92:35:d6:d7:6c:ce:ac:44:f2:cb:42:6d:1a:2e:82:63:28:
4c:71:73:50:f1:cb:a8:55:0c:b9:7a:cd:ff:43:79:81:3d:41:
24:21:4e:56:4d:2c:95:86:fe:3f:14:7b:fe:ce:92:24:a1:2a:
84:fb:75:ba:6a:8a:a1:98:f3:cb:80:e6:be:0c:b9:6e:91:7a:
4f:47:33:15:7a:ca:52:30:c4:6f:41:af:4e:06:b8:17:bf:d3:
69:87:d7:05:8c:8a:34:2b:59:44:f8:9d:64:b5:3b:52:cb:80:
ec:90:45:52:6d:15:22:2d:99:e3:f0:9b:c9:3a:ce:44:b0:be:
b8:5b:a5:b1:d8:4e:64:84:ee:89:1e:a2:c7:ab:9e:89:03:1b:
11:96:8a:fb:9e:0e:03:b5:51:0e:fa:3d:40:44:16:62:57:81:
39:57:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:17 2025 by rpki-client