Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TwuqC1WW5OnELQK_02aDLeO2Xuw.roa
File: TwuqC1WW5OnELQK_02aDLeO2Xuw.roa (raw, json)
Hash identifier: YOpooxFqfQrrsZrHBLKXIcIbvFbsMCvFesILiZIMAWo=
Subject key identifier: 4F:0B:AA:0B:55:96:E4:E9:C4:2D:02:BF:D3:66:83:2D:E3:B6:5E:EC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01954C376855CCF519F1993A5E59A67AB06B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TwuqC1WW5OnELQK_02aDLeO2Xuw.roa
Signing time: Fri 28 Feb 2025 11:00:54 +0000
ROA not before: Fri 28 Feb 2025 11:00:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.114.0/23 maxlen: 23
194.87.134.0/23 maxlen: 23
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 09:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:37:68:55:cc:f5:19:f1:99:3a:5e:59:a6:7a:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 28 11:00:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f0baa0b5596e4e9c42d02bfd366832de3b65eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:41:21:99:e5:e2:76:23:d0:a0:7d:8e:87:
31:26:c2:fd:e8:ea:02:58:b7:36:f5:59:9e:77:32:
74:52:6a:76:c0:4c:8f:ba:35:f4:17:b1:e8:c8:15:
7d:e9:97:40:22:77:d0:b1:90:d9:87:99:23:22:f7:
c1:6d:dd:3c:91:0b:79:f6:98:44:19:f7:31:63:f2:
07:f5:dd:dc:14:5e:4f:c3:18:37:fc:18:fe:28:17:
dd:8b:0e:cf:e6:0c:91:30:5e:95:5d:a4:39:bb:7e:
58:91:dc:0a:fd:35:ba:4a:2a:2c:06:bf:af:f7:24:
c2:f5:73:9c:c6:a6:e8:34:b3:54:18:17:a6:d6:87:
31:3c:50:73:d8:20:ea:55:89:ee:61:62:21:10:af:
0d:ef:03:94:4a:7c:ce:63:d1:94:43:a4:60:10:96:
fb:80:2c:ca:7a:d0:46:4e:59:fd:76:20:e8:6e:96:
4d:79:d2:6a:f6:96:3e:11:10:0d:6d:4e:68:b3:b4:
02:d7:ed:77:45:f5:bc:eb:be:80:40:12:ea:8a:b3:
a4:63:26:92:e0:d2:41:0e:2a:f3:c3:fc:87:82:5d:
66:c8:6c:b6:1d:65:21:00:71:0e:e1:a4:95:05:73:
5f:2f:77:cb:eb:ca:4e:81:21:8b:a8:44:20:4e:96:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:AA:0B:55:96:E4:E9:C4:2D:02:BF:D3:66:83:2D:E3:B6:5E:EC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TwuqC1WW5OnELQK_02aDLeO2Xuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.114.0/23
194.87.134.0/23
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.84.0/23
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a2:62:b2:a6:c7:6b:61:da:8d:57:35:68:c2:18:cf:20:79:
ea:a4:b3:c9:ad:1c:46:f0:12:af:c5:5c:15:93:00:e3:e4:77:
c8:7b:f4:f7:4f:93:30:dd:40:4c:10:0d:e5:44:b4:2a:a1:e9:
01:e2:b5:e3:df:5a:48:e9:85:d1:3d:0d:4f:cd:3d:93:a0:4f:
ad:92:e9:00:7f:5e:08:68:49:8b:19:c1:98:81:f8:2e:2e:84:
93:e1:11:19:84:07:bc:1e:42:41:36:5f:40:d1:8b:56:89:78:
14:ef:13:7c:fb:04:ac:8a:df:08:c4:ba:69:3f:89:6e:d8:0d:
11:82:b2:76:07:32:74:bb:9c:0b:0f:76:a3:2a:8e:d4:00:6b:
a3:21:4e:ea:a3:89:72:93:73:46:80:d9:6d:f3:dd:3a:28:70:
a0:e7:03:94:d7:f9:74:6f:cd:ff:64:ab:e0:da:6f:89:a0:e4:
d6:24:23:a0:91:e3:15:e7:cf:d3:34:29:1c:79:c9:0f:ab:46:
c7:10:06:7a:f8:60:16:c3:56:71:a6:86:16:0d:da:62:01:0e:
75:79:f9:31:3b:dc:bc:cc:a4:30:c9:e4:6f:b2:ba:3a:a7:9b:
5a:82:4b:01:cd:5f:7b:62:c7:ba:1a:19:43:23:dd:f5:9e:90:
50:76:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:53 2025 by rpki-client