Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/vCKOJrvSpYHMJEtkMK_6j8KhDxQ.roa
File: vCKOJrvSpYHMJEtkMK_6j8KhDxQ.roa (raw, json)
Hash identifier: 3hZATAwEVpM2T6cJceWeEhrynPGwy5WvZ59kbboL/Kw=
Subject key identifier: BC:22:8E:26:BB:D2:A5:81:CC:24:4B:64:30:AF:FA:8F:C2:A1:0F:14
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 018CC6B91E06E2EC26693DD1F5B8266BF213
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/vCKOJrvSpYHMJEtkMK_6j8KhDxQ.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1e:06:e2:ec:26:69:3d:d1:f5:b8:26:6b:f2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc228e26bbd2a581cc244b6430affa8fc2a10f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e0:54:20:22:80:cb:6d:d4:f4:e9:f3:1f:64:
f1:2c:bb:01:87:42:69:c6:d2:dd:dc:d4:8c:71:94:
3a:f6:2a:0c:25:d2:b0:64:cb:2c:01:03:b9:06:01:
b9:e1:3c:f0:ab:a5:1d:9b:ec:0e:85:3c:9a:be:7a:
1f:88:fb:c9:ef:21:03:93:8e:10:c1:d2:b5:2c:7c:
7b:fa:8a:0c:e0:93:54:a7:9b:1b:e5:66:03:ea:47:
a0:df:55:d4:dc:8c:7a:5a:21:87:8b:ea:81:c9:63:
31:e4:08:7d:88:28:ee:9d:b1:51:aa:5a:51:e9:88:
24:96:b0:68:94:bf:b2:bf:dc:31:c2:05:2e:19:0f:
c2:5c:7d:ac:13:3a:18:d6:cc:7c:9c:87:ef:d0:db:
f2:61:0e:d1:2b:84:8c:a4:da:f8:a2:ee:e4:86:36:
24:6f:a1:19:cd:7b:fa:e7:e6:2e:8e:a0:e6:dc:44:
78:60:52:aa:3c:04:25:da:25:b2:8d:d1:7f:1f:99:
34:70:62:8f:65:a5:65:b3:a2:57:f4:a9:c4:0c:07:
00:b9:5d:07:4d:94:e6:ab:81:3d:ee:58:34:1e:f0:
e2:aa:d3:40:86:d5:fc:51:2c:54:9a:e0:06:86:da:
1f:f8:51:f4:44:54:e3:2a:da:20:fa:0e:11:7a:ee:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:8E:26:BB:D2:A5:81:CC:24:4B:64:30:AF:FA:8F:C2:A1:0F:14
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/vCKOJrvSpYHMJEtkMK_6j8KhDxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.102.0/23
Signature Algorithm: sha256WithRSAEncryption
27:0d:05:ec:03:2b:40:18:78:f3:7a:d2:d9:f3:63:75:1d:32:
c8:93:5f:99:b5:83:2b:4a:3b:e0:20:cb:26:b9:34:e1:31:40:
a7:c6:2d:48:4c:1e:fb:6f:3b:19:a0:aa:fb:e8:38:3a:ce:6f:
f8:66:0a:dc:f0:0f:d1:e9:71:13:99:77:68:37:06:2b:2f:00:
30:9d:cf:2b:1c:d4:94:41:30:0b:ec:d9:d6:03:ca:b3:83:10:
01:38:99:b1:fe:f8:1e:38:23:73:32:74:44:02:66:2c:75:a1:
88:08:fa:c4:7d:aa:88:2c:35:24:3a:b7:b2:f7:8a:73:07:0c:
5a:08:ee:68:e6:d2:37:9a:32:7f:22:f8:41:88:70:50:0d:1d:
7f:49:95:02:57:a9:2d:51:8d:75:af:33:a3:53:10:37:e4:16:
ae:62:67:26:45:b7:1f:30:c9:64:3f:d9:78:ba:96:54:93:18:
ea:61:59:19:22:3c:b1:35:53:3d:83:46:24:4e:e6:f2:d0:fe:
ba:15:7a:2c:8e:a4:10:4c:23:9a:93:6d:b0:a1:33:2f:9b:7d:
30:ed:1f:fb:23:e4:59:89:94:5c:af:39:33:db:c2:53:b9:f1:
44:f7:d8:c5:46:e3:bc:4f:bd:f7:07:2f:f6:2d:89:4d:57:2d:
34:2c:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:13 2025 by rpki-client