Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/z8CgTnizzz4o5ZtWmYIXXj4CiKU.roa
File: z8CgTnizzz4o5ZtWmYIXXj4CiKU.roa (raw, json)
Hash identifier: 3gQORxGuh3la1Odi5mgqIX+0hxUlQRIjTN5LKI/3nRs=
Subject key identifier: CF:C0:A0:4E:78:B3:CF:3E:28:E5:9B:56:99:82:17:5E:3E:02:88:A5
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0193BA5CC778413E1A72123A46CCDE4BBF51
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/z8CgTnizzz4o5ZtWmYIXXj4CiKU.roa
Signing time: Thu 12 Dec 2024 10:14:22 +0000
ROA not before: Thu 12 Dec 2024 10:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208189
IP address blocks: 31.22.12.0/22 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
2a04:c880::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Dec 2024 11:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:5c:c7:78:41:3e:1a:72:12:3a:46:cc:de:4b:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Dec 12 10:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfc0a04e78b3cf3e28e59b569982175e3e0288a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:84:93:0c:37:26:16:87:8e:0e:a1:d5:8b:
77:8f:30:c8:aa:53:65:8c:da:34:1b:74:c7:8e:84:
29:18:8f:56:a1:99:04:f3:57:44:bb:c7:45:8f:9a:
43:88:10:03:4a:7d:11:80:fd:06:79:65:96:92:b2:
6c:58:5f:5b:4c:e1:8b:bd:27:1d:df:b1:be:ef:fc:
67:cf:f5:cb:61:a7:ce:53:6a:58:c0:33:bb:6a:b3:
e3:96:00:20:4f:72:ca:f0:bb:30:02:89:26:b7:f5:
84:71:51:ce:e5:cc:d3:b9:06:89:fd:42:21:1f:a1:
d0:50:c3:2b:b8:31:bd:e6:67:3a:49:ff:29:9e:62:
52:35:c6:5e:ed:4b:6e:b8:0f:88:25:5c:c2:6b:95:
e1:f2:c2:70:ea:07:c7:77:54:96:6f:ff:24:80:e1:
9f:c6:cf:a3:19:53:2d:7d:b5:dc:9e:d8:05:6a:c0:
47:56:c0:e6:90:f5:4e:d7:37:1c:1a:27:05:9b:eb:
b4:77:bf:b8:57:f6:04:ac:97:36:7c:02:0a:2e:6d:
e5:1e:53:a2:a9:15:37:22:3d:d3:e7:ab:91:a3:05:
f8:28:50:7b:bc:83:d3:ad:54:41:e5:b8:50:b3:cf:
70:6b:a7:7a:6b:04:b2:f8:23:df:6f:4f:e5:e3:ba:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:A0:4E:78:B3:CF:3E:28:E5:9B:56:99:82:17:5E:3E:02:88:A5
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/z8CgTnizzz4o5ZtWmYIXXj4CiKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
IPv6:
2a04:c880::/32
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
3a:67:2e:2e:77:c7:f9:23:67:41:fd:21:5a:36:1d:c8:db:23:
9a:ab:a6:b4:44:50:d2:4f:1d:f8:4c:74:fe:4e:e8:a0:d7:ed:
7c:4b:72:27:98:fe:19:8e:c4:27:e2:a1:fd:35:28:f3:d7:de:
0c:79:ba:32:8f:66:17:4d:5c:6d:87:aa:22:9d:aa:db:c9:76:
20:fd:d2:d1:f6:4b:d9:89:4b:79:75:1e:60:88:7e:48:c7:8a:
86:a5:30:33:27:aa:57:a8:83:6c:68:14:4b:08:01:d1:5a:f6:
ca:77:1e:7f:54:6f:23:d7:c5:81:92:cc:2c:48:7e:10:d6:a9:
60:72:4d:4c:bf:48:bc:5b:fd:19:59:cc:a7:a8:b5:6c:81:4e:
b6:ca:f2:5e:5f:c8:50:8c:92:66:f8:3c:cd:3e:1e:92:e1:2c:
01:f2:16:ce:f0:36:47:68:2e:68:f5:c9:fd:f6:0d:ec:ec:06:
2b:e0:d3:0c:a1:39:78:c4:92:84:d4:89:cb:c5:84:7a:46:94:
fd:32:2f:bc:30:bc:f2:de:12:fa:13:94:45:33:23:ab:1b:73:
fe:44:aa:15:56:2d:fb:ae:11:27:b2:55:50:f0:91:dd:d1:6a:
46:d4:d1:f9:2c:40:fe:58:f5:b8:69:c6:e4:ab:a6:a9:36:81:
6e:d0:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:08:01 2025 by rpki-client