Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/hR38pOgeCdVvvOjaM0pmk9V_zio.roa
File: hR38pOgeCdVvvOjaM0pmk9V_zio.roa (raw, json)
Hash identifier: Gpb/BjFIx84QcKckNL0vU1R5X6qAGNKzhbVdk2AGxF4=
Subject key identifier: 85:1D:FC:A4:E8:1E:09:D5:6F:BC:E8:DA:33:4A:66:93:D5:7F:CE:2A
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 019391F40AB90011E71C1E7B10D1E528FB18
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/hR38pOgeCdVvvOjaM0pmk9V_zio.roa
Signing time: Wed 04 Dec 2024 13:55:09 +0000
ROA not before: Wed 04 Dec 2024 13:55:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59824
IP address blocks: 195.170.160.0/24 maxlen: 24
2001:67c:71c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:f4:0a:b9:00:11:e7:1c:1e:7b:10:d1:e5:28:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Dec 4 13:55:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=851dfca4e81e09d56fbce8da334a6693d57fce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:aa:a0:75:24:e3:9f:5f:d0:7a:09:0e:39:
d1:fe:0a:cf:ba:1f:f3:80:f2:04:13:1c:c7:3a:06:
61:fb:6e:e4:63:4d:f2:97:b7:eb:c6:d0:30:5b:2c:
53:5d:12:91:e8:ef:64:9e:fe:6e:8f:f2:3f:ed:b5:
99:7f:89:bb:f1:51:46:68:91:ae:3e:de:0e:b7:75:
df:e3:35:c6:01:1d:a4:c4:75:bc:83:72:de:43:88:
bb:e1:eb:7c:2a:d9:f0:a8:d5:ef:8d:4c:e4:07:3d:
70:d2:f0:98:46:78:e9:67:70:9b:fa:81:31:df:e1:
37:a1:e3:c8:bf:94:e0:44:9d:8e:07:9c:22:21:45:
38:7c:17:77:bd:33:7d:ff:a9:1d:69:24:66:a9:10:
54:74:84:cd:16:ff:b4:a6:06:ae:00:36:b9:1a:e6:
46:83:87:a8:bd:6c:1c:42:04:7a:0c:93:19:06:d0:
41:97:ab:d5:ff:d0:82:73:b8:b3:6d:1b:50:50:db:
a9:f5:50:50:2f:4c:47:f9:2e:49:7c:28:30:96:0b:
ec:99:29:e7:39:16:be:b1:d6:d4:b2:29:34:b4:c4:
5f:fc:31:98:bb:61:44:da:74:73:51:30:bb:43:99:
b9:78:e9:be:88:70:07:4b:f3:ff:d4:50:19:06:34:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:FC:A4:E8:1E:09:D5:6F:BC:E8:DA:33:4A:66:93:D5:7F:CE:2A
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/hR38pOgeCdVvvOjaM0pmk9V_zio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.160.0/24
IPv6:
2001:67c:71c::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ed:4d:b5:e3:3f:1d:95:a0:9c:f8:79:ca:86:f6:d6:11:32:
a6:a6:33:ca:0a:8a:6c:bf:5e:4d:5a:8e:d2:a7:d1:88:10:d0:
ae:63:d4:92:9c:4a:f1:ab:04:03:cb:da:7e:bc:a7:b0:af:45:
2f:b8:2e:9c:da:fc:3d:49:36:49:af:d6:28:97:d2:c1:81:d0:
86:7a:29:8c:c4:d6:46:fe:e2:de:fd:62:b0:8f:32:1b:3e:18:
ec:9c:38:c4:82:93:ee:d8:ca:e6:e6:64:29:62:ed:dd:12:6c:
a5:30:a6:3d:fa:1f:d6:6d:47:a6:6f:7d:63:d5:90:45:f7:6a:
53:8f:6f:1f:18:43:2a:37:ca:7f:20:64:86:ba:41:a6:a4:12:
6d:90:91:b6:ef:e4:29:a3:c8:5c:53:7d:c7:af:a2:b6:ea:5d:
c1:6a:0a:d5:5e:22:bc:92:49:ce:9e:95:e2:80:69:aa:bf:5e:
df:4d:51:3d:19:ba:88:88:d3:1b:39:3e:8d:fc:b4:3b:cd:15:
3c:c2:6c:a1:87:e9:1a:a9:87:a3:59:05:47:09:fe:07:8a:a7:
13:b5:3b:d4:ad:1e:51:c3:90:2b:85:0e:36:b4:8b:7e:b1:f5:
29:a8:8f:5f:5a:76:cc:6d:16:e3:7a:a5:d5:fc:f9:8d:04:b6:
2d:fc:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:25:50 2025 by rpki-client