Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/h00ZdUMO-iUqtul6oskV8viBVLc.roa
File: h00ZdUMO-iUqtul6oskV8viBVLc.roa (raw, json)
Hash identifier: rEiVM6XS//Cih7m/fMGK4we8Hq1y9ANgelUEQakgxe0=
Subject key identifier: 87:4D:19:75:43:0E:FA:25:2A:B6:E9:7A:A2:C9:15:F2:F8:81:54:B7
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 018CC801AFBEB70A40776CA7C5FDBF65DF16
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/h00ZdUMO-iUqtul6oskV8viBVLc.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207035
IP address blocks: 193.161.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:af:be:b7:0a:40:77:6c:a7:c5:fd:bf:65:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=874d1975430efa252ab6e97aa2c915f2f88154b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:92:a7:22:3a:66:55:26:40:c1:f2:6a:71:
57:65:f4:3b:c2:06:15:09:4e:4d:43:ff:0b:4a:e0:
5f:0b:89:1e:54:37:57:ca:f1:66:b0:d1:62:cb:4e:
55:96:3f:f7:a4:2c:42:a6:24:f1:bd:d6:5c:d0:47:
8f:9a:bf:7e:23:aa:a9:bc:dd:02:27:40:05:b6:8a:
3c:30:bc:26:24:1b:53:af:a6:3f:1f:2f:0f:aa:3d:
1d:0b:1f:17:42:33:3d:15:47:ba:44:2a:df:9a:b1:
76:a7:c1:85:ce:a1:1f:26:e0:48:cd:f7:c5:0f:51:
70:c8:c4:a5:a1:91:74:e2:1f:3e:57:52:b6:2f:39:
92:b1:05:e1:e9:cd:45:a9:09:78:91:5e:6e:0c:77:
b0:8f:9a:be:39:80:80:82:dc:d8:ea:41:0d:32:18:
68:57:de:7c:ed:64:0a:e9:df:07:74:6e:09:44:6b:
55:32:2c:51:54:0c:1e:a2:d3:43:7a:92:ae:05:13:
c4:80:1c:14:d7:46:16:65:2d:7c:67:ff:30:63:f3:
f2:57:34:ac:83:88:fa:b6:e5:d7:7d:eb:f5:d7:bf:
ef:a9:5d:aa:47:78:53:83:bf:3b:ec:06:75:fa:f4:
56:c5:2e:0a:fd:35:c3:b4:94:96:db:17:f8:57:a9:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4D:19:75:43:0E:FA:25:2A:B6:E9:7A:A2:C9:15:F2:F8:81:54:B7
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/h00ZdUMO-iUqtul6oskV8viBVLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.30.0/23
Signature Algorithm: sha256WithRSAEncryption
60:4a:0f:f5:4e:da:1d:82:3c:48:77:0f:96:a1:ac:c7:59:db:
f4:be:e9:ba:d0:66:21:bd:d0:b5:05:96:eb:8a:23:00:0b:2e:
57:ab:d2:1a:81:da:ee:8c:83:1d:4c:41:ab:4f:c3:bf:91:3b:
5e:43:78:5e:15:9f:96:b5:b8:96:75:e6:2f:c5:ec:12:48:05:
26:2d:39:fc:6f:f3:41:9d:58:29:5b:a7:bc:7e:4b:3d:a1:60:
43:ee:7b:ac:a4:d2:66:d7:97:95:b8:1e:6f:9c:6f:7c:9f:fc:
fa:59:7e:32:91:71:88:9d:e8:bf:c5:cd:bb:ae:f1:ad:37:1c:
d1:70:a2:9d:5d:a0:2e:5e:95:30:cc:18:db:96:61:8f:28:8a:
91:6d:22:b7:95:cb:30:23:95:f6:ce:ac:d7:a2:3f:76:01:de:
ec:be:74:16:af:7b:24:49:70:cc:f4:8e:7e:68:1d:9d:28:a5:
b3:bf:a9:3b:af:28:63:9d:11:11:b7:5f:ea:a1:a9:8b:1d:5d:
23:c2:6c:51:98:f0:f2:0b:ab:67:da:6a:dc:a3:ba:a7:6f:1a:
e7:61:ab:61:e2:57:05:c5:25:60:7f:b4:a9:ab:58:fd:f7:82:
f3:c3:f4:aa:dd:de:e9:39:fc:58:12:b7:f0:0a:ed:a0:c6:34:
c0:bd:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:16 2025 by rpki-client