Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/j3tMbTK2EsuLOyAV0r4MxTXMzrk.roa
File: j3tMbTK2EsuLOyAV0r4MxTXMzrk.roa (raw, json)
Hash identifier: RLTxvkeHN0KysQnwsYNot1eak1g/dYh28lQORayd0z0=
Subject key identifier: 8F:7B:4C:6D:32:B6:12:CB:8B:3B:20:15:D2:BE:0C:C5:35:CC:CE:B9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01938710430C4BF287207BE84E6B5D4C1AF8
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/j3tMbTK2EsuLOyAV0r4MxTXMzrk.roa
Signing time: Mon 02 Dec 2024 11:10:10 +0000
ROA not before: Mon 02 Dec 2024 11:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215113
IP address blocks: 193.68.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 11:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:10:43:0c:4b:f2:87:20:7b:e8:4e:6b:5d:4c:1a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 2 11:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f7b4c6d32b612cb8b3b2015d2be0cc535ccceb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:4c:cc:d2:81:c2:50:81:23:fd:01:df:3e:
68:58:d6:8a:eb:38:89:13:b1:8a:63:b8:be:32:be:
8e:0b:e9:88:c2:d6:a7:05:04:6f:13:42:58:69:1f:
7f:6e:0b:d5:39:9c:e9:5b:af:d5:bc:38:d5:59:6a:
8a:53:64:41:05:6b:07:29:34:d5:6c:9f:2b:f1:12:
af:93:7d:dd:23:ba:02:6e:a3:ec:92:7b:70:07:b5:
d5:34:67:41:20:75:3c:1b:79:77:8b:40:7d:a7:b9:
15:e0:18:2e:78:11:aa:24:df:60:ae:ba:0f:36:60:
46:ef:15:aa:6f:1b:9e:16:27:90:f1:8c:68:26:d5:
32:7d:55:6b:68:a6:41:de:28:0a:9b:24:e4:13:46:
92:ad:7f:ec:f2:a6:37:24:5e:c4:69:5b:5f:40:0f:
d9:c9:4d:de:8c:70:e6:25:5d:4a:4a:ff:04:20:64:
e2:67:89:33:9d:b9:d6:11:fb:df:13:76:a9:3e:ee:
5e:c8:8e:f4:b0:93:95:90:df:97:21:8f:98:52:ce:
f4:2f:53:bd:d7:39:2e:42:2f:67:17:c7:f5:09:1e:
6c:de:aa:67:7d:07:b7:59:61:a1:d5:9e:e8:2c:fd:
f1:b1:b5:37:69:21:3a:e5:8e:3f:c3:20:f0:95:73:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:4C:6D:32:B6:12:CB:8B:3B:20:15:D2:BE:0C:C5:35:CC:CE:B9
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/j3tMbTK2EsuLOyAV0r4MxTXMzrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.88.0/24
Signature Algorithm: sha256WithRSAEncryption
21:65:d1:75:46:29:57:31:62:87:2c:63:42:7c:0f:cf:08:b2:
77:96:ff:59:b6:4b:be:ec:86:33:6a:25:9b:7d:bf:8b:28:4c:
ad:f4:f5:41:d4:3e:5e:d8:f0:7f:ad:d3:fb:65:0a:23:51:af:
27:8e:21:ca:d3:fa:d1:f5:f7:ad:ce:f4:60:3e:5d:c1:bc:e8:
1a:5a:3e:32:01:45:c4:14:5a:ac:ba:67:48:02:36:a4:cf:ca:
6f:3e:3a:5d:20:20:11:68:bc:5d:ee:fc:a4:fd:5b:d2:ea:db:
3b:f5:be:c0:32:9c:64:6a:3e:24:94:a9:63:af:91:5a:86:b5:
a8:26:db:52:22:b0:03:bc:76:0a:b3:1d:19:22:11:01:c4:5c:
1a:db:bd:98:ca:16:84:41:ac:5f:5d:39:4f:8f:70:0f:6e:f2:
9f:17:2e:65:4c:e0:1f:da:7e:52:e5:8f:82:34:3c:91:a5:8e:
61:90:b6:d1:5d:00:07:11:69:56:d7:46:8e:ec:3c:75:50:bf:
9b:55:01:f8:e5:7e:da:bc:d0:8b:97:d6:05:95:7a:ce:38:6a:
3a:5c:fa:78:b3:e5:72:62:34:3a:60:21:98:c1:b7:f2:07:6a:
1e:d9:ed:ad:10:30:a4:92:8d:14:67:3d:2c:01:60:0b:06:eb:
c7:58:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:17:48 2025 by rpki-client