Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/A5Xr0EBd56FAWtIgsZPWJIiXGZQ.roa
File: A5Xr0EBd56FAWtIgsZPWJIiXGZQ.roa (raw, json)
Hash identifier: hhoiYCl1ob52k/C0PnpvlkDaSbryCtaZjJNiQWnCNic=
Subject key identifier: 03:95:EB:D0:40:5D:E7:A1:40:5A:D2:20:B1:93:D6:24:88:97:19:94
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0195853D5E22A73E3AADED374411FB1AD715
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/A5Xr0EBd56FAWtIgsZPWJIiXGZQ.roa
Signing time: Tue 11 Mar 2025 12:45:46 +0000
ROA not before: Tue 11 Mar 2025 12:45:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 88.218.18.0/24 maxlen: 24
88.218.19.0/24 maxlen: 24
193.228.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 18:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:3d:5e:22:a7:3e:3a:ad:ed:37:44:11:fb:1a:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Mar 11 12:45:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0395ebd0405de7a1405ad220b193d62488971994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:07:f1:e7:a9:f3:b1:9e:45:19:0c:08:35:
97:80:b0:7f:3b:44:69:ee:e8:be:17:c1:8f:87:0d:
65:d4:bc:a3:6e:16:4b:40:ed:95:23:ae:7f:22:84:
fd:6b:20:b8:96:fc:31:27:80:1e:3e:76:e9:86:74:
b9:51:41:e9:1c:0d:de:8d:13:6e:92:f5:3a:1f:77:
cf:1d:fd:b0:bd:da:31:12:98:38:9f:a1:f2:9e:b1:
2c:f1:4a:28:78:bd:56:60:4f:93:1d:a3:47:f6:0e:
25:3b:cc:87:7d:f8:70:b3:e1:80:b5:fc:64:62:7b:
b0:af:15:21:f7:2e:f5:4f:cf:6d:f1:39:c7:cb:61:
c9:e8:ec:fe:90:5f:6d:8f:f4:3a:b9:69:b9:d0:70:
2c:0e:d8:36:f3:00:86:d0:46:34:b0:df:fd:d8:3c:
6c:6c:dd:20:ac:4d:8a:a0:cc:c0:a2:fe:45:5c:6f:
9e:8b:45:9c:a5:1e:65:c1:72:64:ea:46:61:29:24:
76:52:01:5e:fe:28:f6:cc:3a:ba:e7:85:6f:b1:c9:
fb:e5:77:82:23:75:27:fe:ec:c8:93:92:42:37:c6:
d6:e0:a9:62:c0:f7:69:3e:b9:98:e9:fc:a7:43:9f:
2e:8a:d3:fe:4b:8a:f5:ad:d0:54:31:24:30:d1:92:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:95:EB:D0:40:5D:E7:A1:40:5A:D2:20:B1:93:D6:24:88:97:19:94
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/A5Xr0EBd56FAWtIgsZPWJIiXGZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/23
193.228.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ac:86:d0:fe:46:af:0d:68:81:cb:ac:4e:d1:e1:41:29:66:
c1:96:f2:9d:86:8a:88:d2:24:cc:ed:0c:fe:65:b0:83:33:d1:
6c:f2:aa:0a:56:12:9c:64:81:68:f2:67:63:67:ab:9d:87:f6:
5d:0a:cf:32:d1:5a:2e:4d:11:66:05:4b:b7:77:df:86:24:0b:
31:35:b4:b2:e0:5c:61:a6:c3:95:65:c2:8e:16:ac:75:83:8b:
25:e9:2c:38:c6:ba:eb:42:8c:0c:29:87:78:9c:5d:bd:71:94:
36:57:0a:78:eb:c2:06:c9:e2:13:4e:e5:75:4a:b1:a3:25:55:
4c:57:af:c8:ee:a8:f4:fd:e3:e5:84:47:bd:58:6c:8b:ee:43:
56:6e:0b:cc:f0:13:62:84:37:d7:40:eb:0d:91:65:b4:00:fe:
01:e3:b4:e6:f9:48:70:ad:20:d5:1a:1a:98:74:bc:85:14:18:
5b:3c:44:98:cd:6d:f3:10:6b:02:fc:a5:39:a5:1f:a1:8b:c0:
9f:bd:4b:25:fe:98:93:66:98:74:de:9d:77:71:7f:b6:98:39:
09:58:c3:32:2b:c9:d9:a5:d4:d6:76:a8:19:65:e5:88:4c:a9:
60:1d:33:b4:c1:be:95:33:ef:70:d5:7b:d6:b1:da:a0:f6:d2:
a2:32:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:06:52 2025 by rpki-client