Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/tTRpHzzw9WYWYcD_FcoVjpiaqM0.roa
File: tTRpHzzw9WYWYcD_FcoVjpiaqM0.roa (raw, json)
Hash identifier: +7dRWp09BvH02hMV/F7QeqfR4JZwAYnNmcJlT9LvyHI=
Subject key identifier: B5:34:69:1F:3C:F0:F5:66:16:61:C0:FF:15:CA:15:8E:98:9A:A8:CD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01956A27AC8209BB22EA6F77E2F00A30BF68
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/tTRpHzzw9WYWYcD_FcoVjpiaqM0.roa
Signing time: Thu 06 Mar 2025 06:32:19 +0000
ROA not before: Thu 06 Mar 2025 06:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 85.239.146.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 16:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:27:ac:82:09:bb:22:ea:6f:77:e2:f0:0a:30:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 6 06:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b534691f3cf0f5661661c0ff15ca158e989aa8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:31:b6:c8:f6:c3:59:8d:0c:ae:99:8f:86:
45:4b:20:65:db:98:07:26:5d:00:8d:36:29:27:47:
d3:88:43:0e:f8:e8:6d:54:1f:45:e1:18:f4:f4:75:
10:22:7d:a6:57:52:11:91:20:2e:26:2b:58:ce:53:
95:86:4e:91:45:b3:3d:35:9b:09:84:44:05:32:cf:
ab:7f:90:89:8f:ad:d7:7a:31:ae:68:dd:0e:9e:a2:
99:92:53:22:7c:94:44:2b:78:96:a7:98:0e:8f:93:
cf:90:c0:3e:60:dd:de:fe:cc:e7:47:6f:2d:4c:43:
f9:16:d3:a0:78:2d:cd:37:58:d4:8a:e2:bc:b3:c9:
d5:f4:1e:06:f0:bb:b4:9a:69:d9:be:70:b4:50:b9:
9e:73:e3:d9:1a:cb:d2:60:f9:38:c2:ad:b3:0b:5c:
22:a4:9a:48:77:12:2e:71:e6:0b:1e:d2:e0:df:57:
b6:c0:eb:c4:79:fa:89:7b:b1:3c:a2:72:7b:c3:0c:
3a:52:c1:5f:41:eb:da:e0:a8:45:78:45:1c:3b:7f:
de:26:83:c4:ef:2e:c5:95:1c:0f:a1:76:11:d6:61:
75:6a:13:55:71:5f:46:27:e3:6c:2a:4e:c8:e8:ab:
43:9e:68:07:2e:23:0d:3e:b1:73:15:57:29:38:6e:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:69:1F:3C:F0:F5:66:16:61:C0:FF:15:CA:15:8E:98:9A:A8:CD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/tTRpHzzw9WYWYcD_FcoVjpiaqM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.146.0/23
85.239.149.0/24
185.95.156.0/24
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cc:de:17:6e:c9:43:e9:e6:78:8e:72:f3:d5:9e:b6:33:53:
cd:0f:9d:3a:f7:42:da:f7:54:6c:4e:4d:86:44:ff:85:57:ea:
3a:6c:7a:71:d5:05:22:22:9a:ab:92:23:66:06:ff:b5:9e:3d:
60:45:a0:d7:36:74:e2:4f:3c:ce:f6:fb:f3:59:0f:16:84:3c:
4d:c6:d0:d9:b6:7c:be:ce:4a:cf:65:dd:20:22:fd:8d:7c:ff:
79:81:4b:3c:cc:05:2d:73:3f:cd:07:cb:79:6d:49:cc:e9:29:
b0:d7:c1:4a:38:06:c2:a1:ca:27:e0:ae:40:66:23:8e:32:82:
df:e9:8c:ee:fc:28:f0:26:97:88:48:35:5d:24:45:2b:fe:ea:
89:d6:db:a0:6f:c8:dd:fd:46:9a:6e:c0:4c:bb:18:8d:82:f2:
73:14:b8:e3:b0:d0:e8:88:82:f5:5d:04:1d:03:b0:84:2d:29:
90:3d:e7:b2:7c:76:f1:d9:dc:eb:d7:b6:fe:01:f6:c4:f0:79:
93:b3:1e:78:35:2e:c5:f9:88:b1:6c:a4:3a:e3:46:b5:9c:b6:
61:9a:0c:f6:6c:61:8d:42:5f:a1:80:8e:1a:fb:86:77:d1:ee:
1d:20:91:c7:c0:23:9a:cf:69:36:e8:f7:c0:44:70:86:b9:fb:
02:81:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:46:30 2025 by rpki-client