Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/oHP7lnmtRYXgFbKZdnG_Pfi0NFg.roa
File: oHP7lnmtRYXgFbKZdnG_Pfi0NFg.roa (raw, json)
Hash identifier: IDV3Oe/J4S6M/cZlP0wOsDpIWMi0EMMPSt5IKHflFd0=
Subject key identifier: A0:73:FB:96:79:AD:45:85:E0:15:B2:99:76:71:BF:3D:F8:B4:34:58
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 018DB0BEAAD4BD1C13EF1B2E0D187EE445A2
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/oHP7lnmtRYXgFbKZdnG_Pfi0NFg.roa
Signing time: Fri 16 Feb 2024 07:08:21 +0000
ROA not before: Fri 16 Feb 2024 07:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39923
IP address blocks: 217.18.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 16:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b0:be:aa:d4:bd:1c:13:ef:1b:2e:0d:18:7e:e4:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Feb 16 07:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a073fb9679ad4585e015b2997671bf3df8b43458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:e5:ce:e3:50:2c:5f:d4:94:f0:4b:a9:3c:
ed:af:8f:85:c2:b8:01:a2:83:3f:8d:9b:ab:46:2a:
58:24:fb:c7:74:04:63:ef:28:5f:91:9c:c1:f4:53:
8a:85:f9:66:ab:a4:58:2d:a8:ae:61:f0:9d:98:a6:
ea:ea:7a:5e:7c:06:6d:38:a8:34:e8:58:05:c6:00:
8f:16:d8:36:45:ef:16:4f:5c:0a:59:78:c5:dd:2c:
c1:20:f1:ec:68:a9:f4:00:fb:a5:6e:a7:36:44:c3:
48:a8:e3:e0:27:b0:1d:84:45:da:6e:a2:47:b3:4b:
9d:0f:96:be:6c:ab:dc:df:e3:20:b3:04:14:a3:b5:
d2:87:d7:f1:e0:da:9e:a2:16:a6:3f:ac:99:08:43:
8c:b1:8b:48:9d:aa:fb:3a:38:70:ee:1c:8d:42:44:
a5:d5:e9:70:17:a5:0e:4a:17:fb:2a:eb:b9:c2:63:
27:1c:65:c5:c5:5b:50:1c:3c:d2:9b:62:92:f9:d3:
05:db:86:0b:bc:76:c2:30:dd:85:2d:a7:75:4d:4f:
4d:2a:38:07:f8:ff:cf:6f:82:0b:ad:93:aa:86:a4:
fb:a2:43:ad:00:0d:ba:cc:8d:35:28:48:cc:a0:da:
96:22:bd:79:d1:9d:ef:ee:ec:ae:e3:d6:60:e5:6f:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:FB:96:79:AD:45:85:E0:15:B2:99:76:71:BF:3D:F8:B4:34:58
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/oHP7lnmtRYXgFbKZdnG_Pfi0NFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5a:fc:4c:47:1c:b6:b3:1d:b5:b0:07:f2:a6:84:c3:1b:88:
66:92:21:60:02:1d:65:2a:ed:03:8b:87:dc:b4:9c:0a:6b:43:
b9:89:23:7b:37:be:c4:14:bf:9f:f8:51:2e:68:fd:fa:fc:53:
0a:fa:9d:39:bb:e5:73:0c:a9:c3:10:1e:50:b8:99:30:f3:38:
48:df:0b:67:42:15:58:da:93:cd:9a:d5:2f:e4:75:38:c7:85:
b4:2f:70:16:57:eb:09:3e:e0:8c:3d:f6:9e:e0:c3:fc:d8:7f:
96:32:a0:27:24:f5:15:c7:9c:6b:f5:5e:70:c6:ed:3d:95:24:
b0:c4:a8:46:c5:65:c5:13:cb:a4:ed:25:63:d4:88:39:21:72:
e0:9a:a1:6f:54:89:53:13:60:85:ee:9d:b2:18:e0:65:2c:97:
89:5f:ff:49:66:1a:12:03:49:be:59:09:ec:c7:8c:5c:bd:89:
a2:1f:9e:e9:e6:c0:38:13:dd:ff:af:37:08:c6:77:fb:06:a4:
f1:6d:d0:bb:77:89:b0:e0:56:41:6a:b3:50:33:47:51:bf:3b:
b7:3c:bc:cf:45:00:03:03:18:07:97:fa:56:10:11:28:f3:d7:
78:f5:f0:70:17:3b:66:c6:a5:f9:d2:23:03:ea:85:88:c3:a6:
c8:43:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:03:19 2025 by rpki-client