Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/BzIml5uL34NjBbaduDUqXAgkUbs.roa
File: BzIml5uL34NjBbaduDUqXAgkUbs.roa (raw, json)
Hash identifier: DAa/1ugn6HaQSu33dsEPbg+x25791IP0A67i750a668=
Subject key identifier: 07:32:26:97:9B:8B:DF:83:63:05:B6:9D:B8:35:2A:5C:08:24:51:BB
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 0194FAE730066F7E5C63910505D6FB69FED7
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/BzIml5uL34NjBbaduDUqXAgkUbs.roa
Signing time: Wed 12 Feb 2025 16:04:02 +0000
ROA not before: Wed 12 Feb 2025 16:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21215
IP address blocks: 176.109.136.0/21 maxlen: 21
185.13.8.0/22 maxlen: 22
185.18.12.0/22 maxlen: 22
185.81.60.0/22 maxlen: 22
213.244.208.0/20 maxlen: 20
2a03:dd80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Feb 2025 14:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:e7:30:06:6f:7e:5c:63:91:05:05:d6:fb:69:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Feb 12 16:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=073226979b8bdf836305b69db8352a5c082451bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:bf:56:82:49:22:f6:f4:4b:0b:a1:3c:b8:
02:11:ce:5e:bd:28:0d:85:9e:3b:7e:02:b2:27:ec:
2f:81:bc:58:87:65:4f:46:11:a3:e4:78:32:a3:7c:
c4:7e:e7:da:d9:1f:98:b9:83:09:90:6c:f1:e3:23:
2d:7b:c9:90:57:8e:0e:6d:9c:0e:a4:e7:a2:75:f6:
99:00:b1:09:f7:75:f3:17:76:f6:16:2c:16:c4:0d:
15:c7:64:18:b3:06:86:b4:cc:6c:0e:ac:4a:73:a1:
8d:8e:16:b8:4c:ac:63:9e:f1:57:83:20:0a:31:71:
30:3b:e9:43:b0:0c:68:67:70:c9:87:c0:71:77:3a:
97:8f:76:55:ba:5d:43:56:1e:31:01:cc:81:57:16:
00:65:5e:96:1b:a9:b4:78:6c:92:77:a2:50:8f:ce:
1c:90:d4:d3:6a:2a:2b:e2:b3:38:47:d1:09:bc:07:
cd:69:3b:01:61:fc:d7:2d:78:ab:82:59:08:54:38:
b8:92:33:c5:0f:28:01:1c:58:16:a3:28:83:27:b6:
2c:ec:37:ff:8b:24:d2:80:80:d8:88:d7:81:d3:3c:
47:e7:3a:09:e1:89:74:07:97:e4:9b:ba:b9:bb:61:
b1:d2:0c:c6:ca:57:40:dd:85:f4:e3:f8:6f:e7:5e:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:26:97:9B:8B:DF:83:63:05:B6:9D:B8:35:2A:5C:08:24:51:BB
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/BzIml5uL34NjBbaduDUqXAgkUbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.109.136.0/21
185.13.8.0/22
185.18.12.0/22
185.81.60.0/22
213.244.208.0/20
IPv6:
2a03:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:2a:6b:38:90:77:f7:a5:42:3d:90:ae:af:a9:9e:0e:df:7b:
b1:02:c2:cf:13:c6:fb:ff:fe:72:d9:1b:25:1c:5a:a8:84:b0:
ca:77:a4:cd:97:9f:3c:01:1d:85:ae:19:84:87:fc:4e:50:55:
5a:3e:32:2d:a8:b0:5f:a7:6e:6b:0b:62:40:65:3a:d9:7e:bb:
03:5f:2f:e2:35:a6:3f:4b:31:7d:31:3f:80:ce:23:a4:f3:dd:
7f:28:09:38:b4:bf:d3:b8:2f:e6:3c:45:eb:17:56:61:15:7d:
41:69:55:82:9b:41:7c:ba:6a:1d:57:cc:ca:b7:8b:1b:51:21:
93:4d:fd:5a:1d:9f:10:06:d7:44:0e:2a:f6:3b:e3:2f:50:a8:
9c:13:71:c0:72:f6:bc:48:b1:d7:3c:56:a9:62:e5:cd:b2:02:
af:35:cc:5f:23:68:25:84:9a:5c:24:bf:f8:2c:04:e4:b4:7c:
77:fd:d8:17:3d:22:4d:fb:31:8d:2b:60:12:9c:0c:55:0e:b1:
93:f8:46:6b:1c:f5:1b:96:6e:a1:4c:a1:73:c8:a2:92:16:01:
31:92:5b:34:6c:e1:f8:fd:3c:8d:0d:3f:b4:27:53:1c:d4:59:
34:6c:b6:18:03:9f:78:ce:ab:c2:5d:6d:18:a5:a2:db:14:50:
f5:83:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:12 2025 by rpki-client