Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/bAbqYLCf7zt6RRPgUKHHuk43vxI.roa
File: bAbqYLCf7zt6RRPgUKHHuk43vxI.roa (raw, json)
Hash identifier: RmisdiRr00ZHD0yLIwSxtiv1Wmi8ovv4v08g64Jo1GU=
Subject key identifier: 6C:06:EA:60:B0:9F:EF:3B:7A:45:13:E0:50:A1:C7:BA:4E:37:BF:12
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 01950F3CE04D884070A9C3A6D1E1C14E1FDB
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/bAbqYLCf7zt6RRPgUKHHuk43vxI.roa
Signing time: Sun 16 Feb 2025 14:50:02 +0000
ROA not before: Sun 16 Feb 2025 14:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 20:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:3c:e0:4d:88:40:70:a9:c3:a6:d1:e1:c1:4e:1f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Feb 16 14:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c06ea60b09fef3b7a4513e050a1c7ba4e37bf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:76:7a:60:55:ab:bd:c1:7d:c1:b5:3d:7a:
a5:3c:fb:58:19:cd:83:98:65:5f:00:97:47:22:7d:
6e:54:af:88:ff:e3:95:e2:98:b2:6e:3c:87:2f:6f:
48:cd:64:62:68:72:36:40:eb:16:ac:59:a4:24:96:
ff:57:96:e9:04:45:7e:41:ea:6d:23:97:7a:28:75:
7c:e9:a0:9b:ed:76:92:b2:1d:7b:53:19:a5:3f:55:
08:44:9f:a5:4d:a2:35:cf:34:65:df:9b:0b:b0:21:
d3:9b:08:ab:e4:0a:69:47:f6:f8:e7:00:8b:b7:5f:
57:97:bf:b7:ea:33:b4:29:b2:e1:60:d6:17:4e:87:
e1:8a:a5:6f:8b:79:5a:83:a0:b3:16:bb:5e:5d:ba:
6b:f0:71:f9:2e:e8:61:68:c8:96:b4:cf:c3:a3:3d:
9c:b9:2b:0c:19:3a:53:67:34:33:42:32:00:36:26:
63:01:4b:e9:c7:cc:fb:2b:91:fc:7b:d4:c8:e6:bb:
87:5d:fc:4c:28:1c:c5:24:f4:f1:11:7a:e4:62:32:
22:f0:96:81:de:1e:73:a8:2c:ed:51:bb:16:62:11:
17:1d:62:63:9b:6e:24:88:cd:c9:3f:1b:d8:22:03:
15:a1:ef:36:29:7a:01:d7:9a:dc:dc:4d:a0:30:62:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:06:EA:60:B0:9F:EF:3B:7A:45:13:E0:50:A1:C7:BA:4E:37:BF:12
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/bAbqYLCf7zt6RRPgUKHHuk43vxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
58:76:8b:f3:89:86:72:35:9d:61:b4:6c:c3:ff:55:38:7b:f9:
a2:8d:fd:c6:f3:1e:44:19:89:1c:47:4d:e6:a1:7d:f4:fa:e0:
81:d9:47:ea:8a:a4:c9:4d:7d:a6:7e:76:4d:3f:97:ee:bb:79:
8b:93:d9:88:2e:db:22:cf:d7:dd:d2:77:5d:9d:d2:60:a5:7b:
3d:10:13:51:51:42:5b:ed:d1:3c:f6:ad:68:bd:69:54:37:f4:
9a:3e:fa:8c:56:29:e4:b4:a0:1e:de:82:7b:39:55:31:d4:42:
cf:ed:13:53:e7:8f:b7:cf:fc:74:47:e1:bd:0e:f3:1c:16:d6:
9a:7b:35:20:8e:05:9e:16:12:18:96:a3:92:e1:b8:38:b9:3c:
d2:d2:c3:2e:a9:22:e5:77:bb:24:69:7c:9f:40:15:3d:44:72:
d1:a8:39:a9:53:87:66:66:d9:41:d3:5a:89:7b:9b:eb:cf:a4:
31:1c:6c:46:86:b1:71:71:8f:78:d8:a4:07:29:61:bd:44:66:
79:30:fb:ef:fa:1a:08:ac:8e:2e:09:32:66:1f:ac:dc:83:dc:
13:46:e9:26:93:f5:28:ca:a2:0e:f8:8b:1c:e4:a6:04:52:22:
22:ea:4e:a3:5e:9c:fc:9f:79:27:68:5d:e1:82:91:3c:0a:b1:
d7:7c:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:31:27 2025 by rpki-client