Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sRuaFeHYJFzWiofzCGF7H3EEghw.roa
File: sRuaFeHYJFzWiofzCGF7H3EEghw.roa (raw, json)
Hash identifier: 2GpSDJUTA3+2HmnfPEyiNmiuQrxYRvCs73tiAtdjbjw=
Subject key identifier: B1:1B:9A:15:E1:D8:24:5C:D6:8A:87:F3:08:61:7B:1F:71:04:82:1C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C0B4B4F5F6569486E56CF2DF15ECDBFC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sRuaFeHYJFzWiofzCGF7H3EEghw.roa
Signing time: Fri 13 Dec 2024 15:48:08 +0000
ROA not before: Fri 13 Dec 2024 15:48:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214238
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.227.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:b4:b4:f5:f6:56:94:86:e5:6c:f2:df:15:ec:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 15:48:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b11b9a15e1d8245cd68a87f308617b1f7104821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:19:4b:95:d2:6a:2d:85:98:22:e0:f3:2f:
b3:c3:e3:ec:2c:27:ec:f6:63:6f:61:6f:3a:05:ad:
9a:d7:09:a5:88:8a:a3:8c:1b:c0:f8:60:ee:cc:08:
e4:f3:36:01:a8:31:af:77:02:e1:e7:53:b8:5b:4f:
e2:be:f3:6f:64:15:70:fa:e6:af:26:ce:df:35:34:
e7:9d:74:72:7e:7e:29:b8:6e:aa:9d:cf:6c:a5:62:
5e:de:40:cb:d5:21:a4:53:74:f5:2c:2f:ec:17:b0:
e1:56:8f:09:44:ef:dc:c3:bc:61:3f:0b:ac:71:57:
d8:5c:7d:35:0b:c0:cf:b0:95:64:69:a1:46:14:8a:
27:0b:97:67:e2:6f:c2:a8:7b:a1:ae:68:e8:16:41:
0e:c5:8f:63:c8:40:34:3a:da:42:73:d3:eb:8a:37:
b4:83:30:16:b5:25:69:08:9c:59:9d:e8:6b:89:fd:
0b:13:bc:a0:1e:5c:d5:7e:cf:cc:22:15:33:1d:20:
a4:47:85:af:33:fc:71:7c:66:3b:8e:c9:d3:01:82:
45:48:d3:da:9e:d0:d5:21:bc:c9:d3:98:ba:7e:d9:
5b:32:3c:22:cb:c2:7e:de:75:d8:71:9c:f5:f2:1b:
04:93:4f:7a:c5:dc:da:3d:f6:ad:ff:82:f8:1a:ed:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:9A:15:E1:D8:24:5C:D6:8A:87:F3:08:61:7B:1F:71:04:82:1C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sRuaFeHYJFzWiofzCGF7H3EEghw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/23
185.72.10.0/24
192.124.181.0-192.124.182.255
192.124.188.0/24
192.124.190.0/24
193.124.4.0/24
194.87.3.0/24
194.87.24.0/24
194.87.33.0/24
194.87.36.0/24
194.87.90.0/24
194.87.165.0-194.87.166.255
194.87.229.0/24
194.87.231.0/24
195.133.35.0/24
212.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d5:65:f6:d0:9b:a7:b6:29:6a:dc:e3:a1:d3:6d:86:28:68:
89:ee:3b:b2:85:4b:f2:6f:ad:db:55:11:d5:cf:c7:60:06:c0:
dc:b8:97:9b:fe:c4:9a:ab:01:a9:8a:78:fb:15:0c:3f:7a:51:
bf:23:41:6c:c3:59:9d:5a:3f:8f:88:08:9d:4f:b5:0c:11:83:
84:bc:9a:09:63:b7:2d:86:24:88:bd:3c:09:17:13:94:b8:eb:
8a:b0:87:8c:6a:5b:12:37:4c:29:d5:2c:8d:a3:46:47:3e:ec:
0e:b7:1e:8f:04:51:87:83:12:0c:dd:19:17:4b:3e:4e:c4:0d:
05:27:d7:e5:7a:51:aa:20:aa:0b:51:54:ef:69:a9:4e:55:e6:
72:7a:59:c7:d3:25:2d:f3:e8:2e:ed:bf:c0:22:4b:a2:59:4e:
b8:dc:07:0c:af:ed:0c:79:90:1c:b0:6c:ba:0c:7b:ac:29:4e:
1d:f5:f5:72:f1:4d:04:51:54:f0:8c:fa:bc:d8:8a:14:c4:5e:
d0:43:84:8a:21:ac:a5:0e:d3:58:30:72:ed:39:65:dc:92:69:
39:ac:fe:1a:04:ff:46:c7:28:91:dc:cb:55:f0:4a:63:51:06:
e2:82:c8:09:e3:87:9c:36:06:4f:5c:dd:7b:94:cd:8a:90:12:
b7:8f:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:28:12 2025 by rpki-client