Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/Ait5HSg7P15stHz5XmQTaOKwefU.roa
File: Ait5HSg7P15stHz5XmQTaOKwefU.roa (raw, json)
Hash identifier: MSMrOofXj3VBfA68zBdEl2yvI0nAw02yJjkAH0DPhP0=
Subject key identifier: 02:2B:79:1D:28:3B:3F:5E:6C:B4:7C:F9:5E:64:13:68:E2:B0:79:F5
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 0194D5ECB33DB2D91FEADBC891E59AF690C9
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/Ait5HSg7P15stHz5XmQTaOKwefU.roa
Signing time: Wed 05 Feb 2025 11:44:06 +0000
ROA not before: Wed 05 Feb 2025 11:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208731
IP address blocks: 147.78.192.0/23 maxlen: 24
147.78.192.0/24 maxlen: 24
147.78.193.0/24 maxlen: 24
185.42.161.0/24 maxlen: 24
185.203.112.0/24 maxlen: 24
2a0f:98c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 14:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:ec:b3:3d:b2:d9:1f:ea:db:c8:91:e5:9a:f6:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Feb 5 11:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=022b791d283b3f5e6cb47cf95e641368e2b079f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:95:00:f7:fa:90:77:4e:ba:be:5e:d9:5a:
e6:09:23:d6:c2:e2:bc:7f:88:01:70:ec:85:1c:20:
a4:8c:fd:f4:8e:ad:9c:29:b6:5a:6b:bc:24:db:34:
00:53:e9:bd:1c:0f:7c:12:96:7c:aa:4c:0f:47:5c:
4c:8c:10:43:6c:9f:26:53:a1:cc:4e:3b:53:55:ff:
a8:c8:df:c3:77:31:97:e9:a6:00:f4:fd:9c:25:b1:
89:b3:a6:71:ae:6b:65:da:ee:94:a5:42:93:86:8e:
59:6c:15:fb:ea:f8:a9:cd:a5:9d:84:4f:80:a4:19:
cc:78:2b:f0:28:b9:52:63:7a:8d:dc:71:39:fc:82:
51:3c:a2:72:81:8e:72:1a:53:bc:33:8b:79:54:ff:
eb:e0:31:fc:d9:85:78:32:8d:ef:c4:23:09:c2:67:
bc:e4:7a:a2:c2:71:45:42:bb:b2:c6:7f:d2:0d:c6:
53:92:b2:6b:4f:d6:c6:50:49:a9:f7:0d:e8:0a:d8:
14:b3:2e:6a:6c:08:ec:5e:15:cb:d1:8e:0e:4c:61:
d4:0d:26:f6:10:ac:55:84:58:7c:5d:e3:45:d6:77:
e2:ff:8d:92:19:ee:91:60:4f:8a:94:45:35:28:b3:
dc:da:4a:e6:dc:67:8c:fe:94:4f:70:ea:fa:72:fc:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:79:1D:28:3B:3F:5E:6C:B4:7C:F9:5E:64:13:68:E2:B0:79:F5
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/Ait5HSg7P15stHz5XmQTaOKwefU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.192.0/23
185.42.161.0/24
185.203.112.0/24
IPv6:
2a0f:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:33:bb:33:ef:82:c8:52:d3:df:bf:dc:76:eb:ce:a1:46:ad:
af:1c:06:7d:94:d5:22:eb:2f:55:93:83:c9:f7:e1:53:ac:be:
7c:03:56:12:02:3e:76:08:3b:48:b0:b1:3b:ac:b7:a5:6d:6f:
c9:50:ba:49:ae:6d:97:d7:dd:21:d6:a0:80:be:1a:cb:c1:76:
d2:45:95:1a:32:a0:a2:21:73:ce:c5:17:86:77:29:b6:c6:d0:
d8:6b:10:e5:1c:78:28:e8:fd:cf:3d:9d:fd:6f:97:46:5d:67:
2e:b8:8f:4a:09:b6:71:2a:60:33:20:79:f2:7d:f7:98:dc:00:
12:34:b3:34:7b:88:87:49:3b:b1:f3:2e:59:53:96:25:c2:4c:
19:d3:42:ed:3d:f6:2c:ee:68:37:7e:3b:f3:55:0b:61:25:32:
9e:17:4d:07:5f:dc:ca:bd:84:50:91:78:be:c2:1d:a2:16:e8:
aa:76:32:c9:ad:21:f3:ec:6a:6d:3b:35:77:b6:19:67:4d:35:
16:b3:c4:8a:fd:0e:88:3c:c6:7e:1a:d2:00:d6:10:14:f0:dd:
3a:76:2b:56:12:27:b9:a5:29:d4:0e:76:50:41:72:fb:c8:dd:
4d:4b:29:dc:82:44:12:c6:c6:69:06:d3:cc:62:33:88:03:e8:
bf:52:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:15:31 2025 by rpki-client