Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/geIe4x2135gcmcpIsf4y8fY6bUQ.roa
File: geIe4x2135gcmcpIsf4y8fY6bUQ.roa (raw, json)
Hash identifier: zuSzYF331r9mr+6m17QDjpmvO2aUPTpk3bxOXQbxibI=
Subject key identifier: 81:E2:1E:E3:1D:B5:DF:98:1C:99:CA:48:B1:FE:32:F1:F6:3A:6D:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195CDB86A7D7E187260026E89BAEA9B3C72
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/geIe4x2135gcmcpIsf4y8fY6bUQ.roa
Signing time: Tue 25 Mar 2025 14:32:49 +0000
ROA not before: Tue 25 Mar 2025 14:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.238.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Mar 2025 13:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:b8:6a:7d:7e:18:72:60:02:6e:89:ba:ea:9b:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 25 14:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81e21ee31db5df981c99ca48b1fe32f1f63a6d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:cb:71:57:de:93:0e:ea:04:f9:ac:91:a9:
9e:eb:92:e0:4c:8f:c4:6a:ea:72:e3:76:e9:b9:38:
d8:45:12:07:84:b0:2d:d0:69:f6:d5:ac:65:f6:13:
44:d6:a6:6f:dc:b3:d5:4e:58:fd:04:1f:aa:4a:15:
60:1e:41:81:fb:f0:a7:32:0e:1d:3f:60:ce:2c:15:
1a:78:48:03:c9:6f:a9:29:39:bf:83:02:6c:f5:3e:
01:f0:d0:49:95:df:53:e5:26:57:3e:5a:c2:e1:d8:
71:78:75:5d:e2:6c:b2:d4:82:2c:86:17:eb:fa:dc:
b2:61:d2:42:81:f2:e8:f9:8b:04:cb:bc:28:af:cd:
19:b1:f5:a2:d1:37:27:68:65:f4:8a:6f:9f:fa:3f:
00:84:5f:a4:8c:1b:88:63:51:f4:f3:87:bf:79:97:
a7:86:1f:af:0e:fb:bc:7b:81:2d:91:41:75:ee:c4:
3c:53:84:94:7a:0b:4c:e4:7e:9f:94:b7:f8:b1:32:
76:ad:1d:7d:ce:b5:76:00:c7:c5:8c:d2:66:b7:38:
51:36:da:98:65:f9:39:a7:c0:52:81:89:34:0b:59:
a8:a3:89:49:d1:28:04:58:fc:16:ab:66:a1:15:5e:
d8:92:de:e3:c5:45:b9:d3:b9:bd:42:6b:ea:ce:d7:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:1E:E3:1D:B5:DF:98:1C:99:CA:48:B1:FE:32:F1:F6:3A:6D:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/geIe4x2135gcmcpIsf4y8fY6bUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.238.0/24
193.124.7.0/24
193.124.44.0/24
194.58.36.0/24
194.58.155.0/24
194.58.223.0/24
194.87.53.0/24
194.87.169.0/24
194.87.179.0/24
194.87.228.0/24
195.133.9.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
01:d6:6e:e0:27:38:cf:9f:32:7a:61:b1:21:21:96:20:89:cc:
a5:18:29:ca:24:9e:8b:43:ca:b1:4a:20:79:fd:73:31:96:17:
64:86:e5:84:12:ea:6a:b3:91:8e:66:50:a3:4e:5c:c7:8d:61:
cc:58:b0:e8:a4:93:ee:8d:90:0f:61:ab:90:0d:e1:e8:7a:34:
a1:9c:65:cd:58:9d:c7:94:e6:9b:ad:5d:27:fb:72:b2:e2:e9:
49:d8:43:78:db:b0:79:37:3e:18:65:99:ad:1e:a6:64:1a:5f:
e4:ff:3d:de:91:bb:35:4e:79:5e:c9:05:74:9a:8a:c0:6b:a6:
34:d4:33:fa:57:07:8d:57:81:6c:68:87:3f:d9:6b:6f:d6:02:
d1:1e:80:74:57:16:6d:fb:38:4f:51:17:e9:21:9d:ed:ba:fa:
11:a2:c6:64:3d:2c:a2:04:65:7f:f5:a9:0a:29:f5:c0:0f:21:
2f:62:46:49:1b:4c:ed:87:b8:a3:08:02:62:33:84:9f:97:c4:
0d:ca:4a:5b:d6:16:27:5e:43:5b:01:c3:5f:6b:a8:25:17:18:
2c:95:70:7f:41:c5:2b:d0:fe:2b:74:3f:ad:4e:ca:fb:dc:1f:
81:ad:02:34:70:0a:fe:46:8b:c9:1f:f2:9f:d6:40:8d:17:ab:
9d:78:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:05 2025 by rpki-client