Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/9UR8Tmvy7uXmO_fnunOX1oT-Fu8.roa
File: 9UR8Tmvy7uXmO_fnunOX1oT-Fu8.roa (raw, json)
Hash identifier: gcpRaIV1kYcjULFzAqK6FJjkFcBpfdfcWiUWAkKwO28=
Subject key identifier: F5:44:7C:4E:6B:F2:EE:E5:E6:3B:F7:E7:BA:73:97:D6:84:FE:16:EF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0194178D889A04813EBC8127F06BED22C25F
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/9UR8Tmvy7uXmO_fnunOX1oT-Fu8.roa
Signing time: Mon 30 Dec 2024 12:32:19 +0000
ROA not before: Mon 30 Dec 2024 12:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213058
IP address blocks: 193.150.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 23:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:8d:88:9a:04:81:3e:bc:81:27:f0:6b:ed:22:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Dec 30 12:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5447c4e6bf2eee5e63bf7e7ba7397d684fe16ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:97:a3:68:72:5c:15:ae:77:73:b4:04:17:
76:41:a8:49:e5:90:0d:47:0f:31:94:d0:7e:b6:65:
d7:49:df:25:e4:0a:cd:14:fc:f8:5d:f3:33:31:07:
57:95:6a:61:bb:86:02:11:8b:eb:dc:f8:e8:43:2d:
30:4e:d0:81:6d:f6:2e:bb:7a:fd:c1:8a:14:1a:9e:
96:68:f3:70:87:18:98:79:88:0d:77:fb:7e:2f:6f:
1c:cb:26:4c:df:3c:fb:e1:ae:6f:0c:8e:7a:92:d9:
a3:70:a1:1a:e3:56:41:aa:db:51:d7:89:5b:47:91:
78:70:94:e0:61:d6:0a:7d:d0:7b:18:1d:97:3f:8c:
d1:30:da:5f:7e:ab:57:13:12:9e:0d:40:e8:1f:39:
ce:fb:3e:e1:44:2f:4d:9b:a8:e3:f1:40:dc:6f:2b:
eb:01:af:d3:25:88:59:c2:d3:5c:18:1e:f7:4a:a3:
da:55:e0:cc:62:7b:13:fb:bc:d0:e7:87:3b:cd:9b:
6b:f2:c5:22:b1:ff:dd:e5:69:d7:2e:03:05:8b:d1:
d6:ac:34:4f:ec:f2:64:ec:7a:12:07:0f:3f:8b:f0:
6e:22:92:07:7c:3e:fa:06:a6:6b:17:fc:cc:f7:14:
5d:23:5b:14:d3:97:b5:c3:8a:59:38:5a:14:9d:1d:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:7C:4E:6B:F2:EE:E5:E6:3B:F7:E7:BA:73:97:D6:84:FE:16:EF
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/9UR8Tmvy7uXmO_fnunOX1oT-Fu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5f:ec:fb:a5:11:73:31:a1:11:89:4c:0c:06:fb:8e:a7:f4:
83:f3:4c:d9:19:3b:30:cb:d6:90:57:33:d9:af:91:da:a7:47:
a9:52:6f:9a:f0:b0:04:eb:f2:a9:59:ce:23:2c:e7:10:79:47:
2b:b4:38:14:0f:4f:b9:bb:f5:0b:37:7e:dd:d0:fd:9a:7a:48:
79:03:f4:2f:a5:46:79:5a:de:b2:9d:80:84:be:44:56:21:23:
60:db:ed:8c:31:e1:25:48:f7:f3:9e:88:37:a7:17:15:0e:93:
52:4d:d0:b9:6c:29:d0:48:e7:e9:bf:6e:4e:13:fa:a1:56:6f:
6b:84:96:8e:92:cb:cb:df:d9:ac:04:5c:47:36:f0:b8:9d:e0:
0b:ef:ab:ef:c4:bf:db:75:48:97:d3:87:b9:0e:fb:95:5b:90:
3d:e1:56:ac:c6:c7:a5:bb:96:d1:7e:9c:9b:1b:c3:c5:1e:e4:
87:e8:20:9c:08:05:ad:9d:dc:ee:e6:dc:01:0d:e3:ae:08:e8:
55:87:6c:2e:f4:c9:e4:ce:0a:b3:62:1b:48:d8:2f:04:0a:c4:
ac:3b:eb:60:2b:e7:96:24:de:03:d2:de:fe:fb:00:ed:25:e4:
76:62:63:d5:66:fc:47:28:71:c0:2f:87:c0:1c:dc:47:3d:dd:
ec:e7:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:46 2025 by rpki-client