Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/26jALg60faurUiXqE6Ug2bOZJ0A.roa
File: 26jALg60faurUiXqE6Ug2bOZJ0A.roa (raw, json)
Hash identifier: 08JotqPGruUZtnQTgBXgEFt9g5nqpm3j7MFeaSj7Rf8=
Subject key identifier: DB:A8:C0:2E:0E:B4:7D:AB:AB:52:25:EA:13:A5:20:D9:B3:99:27:40
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 018CC6B8382F263FEC0973682B50D022D3DC
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/26jALg60faurUiXqE6Ug2bOZJ0A.roa
Signing time: Mon 01 Jan 2024 20:30:10 +0000
ROA not before: Mon 01 Jan 2024 20:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207349
IP address blocks: 193.188.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:38:2f:26:3f:ec:09:73:68:2b:50:d0:22:d3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 20:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dba8c02e0eb47dabab5225ea13a520d9b3992740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:b2:48:f5:34:02:b2:ed:22:25:65:10:00:
15:e9:d5:57:f2:71:ba:14:72:68:84:9d:ff:4c:4f:
93:c8:95:fc:a7:b0:96:20:ba:62:6d:b0:d3:14:3a:
e1:74:cd:c5:03:3e:35:64:38:c0:b1:dd:29:8a:8f:
b0:98:86:5d:93:d3:db:55:8d:63:e0:84:18:1f:b9:
d4:9c:cf:e2:c7:08:4a:63:75:04:e7:a4:25:1a:e2:
ab:9e:c1:13:c4:e5:db:e8:fb:ca:1c:72:f1:98:25:
23:c7:af:e5:9e:bf:65:33:3b:4c:69:e1:ba:dd:62:
d0:f1:4d:9f:f9:7f:41:9e:6f:16:33:b1:ae:22:24:
cd:6a:d9:e4:16:af:10:23:af:78:c8:cd:de:0e:d0:
a9:ca:f5:0e:fe:95:5c:57:89:74:de:f1:0c:a0:8f:
3a:1f:23:26:1a:03:f0:61:73:dc:09:2c:a7:fa:09:
82:d3:06:73:71:db:83:df:f4:b2:60:a3:a3:9f:43:
0b:a7:8f:b1:61:b5:ae:22:45:0a:ff:80:6c:04:7e:
9a:be:cd:14:c6:30:25:7d:6f:9e:1a:ce:9a:d2:d6:
6d:f8:70:a5:11:47:20:85:45:fb:9f:47:a2:e6:c5:
c1:59:c5:81:22:89:98:91:92:19:de:78:8d:eb:5d:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:C0:2E:0E:B4:7D:AB:AB:52:25:EA:13:A5:20:D9:B3:99:27:40
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/26jALg60faurUiXqE6Ug2bOZJ0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.193.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1b:5f:50:c9:0e:79:a1:80:65:c9:bd:f9:aa:71:fc:52:a3:
f7:91:c5:86:a2:b5:f0:81:3a:bb:c7:15:b9:69:70:0f:71:67:
a8:39:e6:c5:e6:5c:87:8f:68:95:79:d9:6f:06:01:d9:f9:e6:
f9:2c:1f:1c:c1:99:eb:a3:77:d7:98:ec:cf:55:84:af:b2:2a:
d9:c9:30:70:0c:79:92:7c:1d:dc:18:0f:80:53:f6:4d:f6:bc:
e2:3f:6b:ca:d6:58:78:9d:1a:05:e4:ef:57:ab:b5:ec:4b:e5:
94:c3:2b:53:3e:3b:ad:46:5c:c2:83:32:0e:49:57:89:bf:63:
5b:83:0d:d6:26:a2:26:03:bb:05:81:a9:ee:00:12:f8:9d:76:
c8:33:d8:f6:fe:c5:6d:3e:10:c0:b8:05:a2:90:96:a6:0c:9a:
a7:45:5e:06:f0:91:13:82:97:6a:e8:81:56:bd:30:8c:d9:e6:
6c:14:11:c0:2b:f1:05:ce:88:72:09:34:27:18:6f:ef:7b:ec:
e8:ac:74:37:f0:5b:f4:db:d7:48:fd:39:e1:8c:b0:1d:19:08:
08:7d:48:19:1c:73:52:29:45:eb:fc:4a:09:9f:3d:dc:bd:54:
ab:4c:70:33:8b:d1:fe:57:36:17:42:5d:c3:fb:d1:a9:7e:fe:
3f:23:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:13:56 2025 by rpki-client