Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/RBnzmqtvnJEvWnip9gqMi4VuOc0.roa
File: RBnzmqtvnJEvWnip9gqMi4VuOc0.roa (raw, json)
Hash identifier: px7pRHlstknT8ZxQgjfVMdwhfVSMHi6IM2uICWXpbH0=
Subject key identifier: 44:19:F3:9A:AB:6F:9C:91:2F:5A:78:A9:F6:0A:8C:8B:85:6E:39:CD
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0194639DC4E451A753D97D16D760EB357BC1
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/RBnzmqtvnJEvWnip9gqMi4VuOc0.roa
Signing time: Tue 14 Jan 2025 07:01:11 +0000
ROA not before: Tue 14 Jan 2025 07:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 93.93.54.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
109.71.163.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 06:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:9d:c4:e4:51:a7:53:d9:7d:16:d7:60:eb:35:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jan 14 07:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4419f39aab6f9c912f5a78a9f60a8c8b856e39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:3b:25:d3:4b:9a:8b:b8:05:1a:ed:8c:21:
b3:16:50:37:79:4a:60:b0:91:51:6f:53:18:2d:ac:
ac:14:9b:fc:2e:cf:07:bd:61:02:5a:c2:ea:21:31:
e2:6b:31:4c:37:b9:60:b8:f1:2e:f3:88:40:2c:63:
34:5e:f7:64:19:38:02:b6:68:ba:46:29:47:ba:46:
94:eb:cf:1c:13:52:e6:50:c7:88:37:7f:e1:e0:bd:
fd:7e:4a:41:15:63:15:10:f8:d8:be:a7:65:f7:f2:
3f:0b:10:ad:bc:b5:2d:44:58:ad:6d:75:0c:4f:2b:
7f:dc:de:78:08:40:8d:d7:9e:e4:c2:f6:53:d3:f5:
3c:46:28:89:83:13:f1:ce:d0:65:c3:ec:da:89:57:
dd:e5:c9:87:58:f6:ef:c2:78:69:a0:8e:61:ce:c5:
1a:6a:96:5d:3d:76:da:01:1a:15:b4:e8:0e:58:11:
f4:57:7c:53:3b:e1:6f:5c:9f:6c:d6:29:57:7d:10:
2c:dc:aa:8c:37:86:c7:83:12:87:d4:93:77:e7:ce:
19:c4:c1:3b:63:23:2e:10:00:6a:c5:92:35:6d:33:
1f:6e:cb:03:04:79:a8:3a:5b:79:4a:34:74:fb:72:
ad:7e:53:6f:f9:f8:06:d9:1c:b2:11:24:0b:96:f9:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:F3:9A:AB:6F:9C:91:2F:5A:78:A9:F6:0A:8C:8B:85:6E:39:CD
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/RBnzmqtvnJEvWnip9gqMi4VuOc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.54.0/24
95.128.124.0-95.128.126.255
109.71.163.0/24
109.71.165.0-109.71.167.255
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
2a03:9c40:1000::/48
Signature Algorithm: sha256WithRSAEncryption
02:25:cb:bc:5e:8d:05:9e:d3:02:99:6d:f8:a9:15:45:5e:96:
ed:10:1f:e3:79:cc:2a:6b:b3:f4:3c:61:1f:97:c7:d6:c8:5b:
72:29:30:bd:90:08:ac:21:32:ed:ee:b1:16:f2:57:85:82:a0:
dd:cc:f8:1e:9f:1b:47:b5:eb:04:73:22:e2:a5:8b:eb:65:5c:
6f:34:d9:bf:03:05:d9:7c:ac:7e:e8:9d:81:bb:da:61:7d:bc:
9b:a6:bb:64:df:27:8d:63:b2:5d:4d:ef:33:2e:97:6c:76:c8:
01:98:9a:2f:d7:ac:74:6a:25:e2:62:a0:f9:d5:4a:3e:00:f0:
26:db:ec:f5:10:0d:2e:86:c5:cc:43:b1:9b:a5:c2:5e:a5:26:
6d:23:62:e5:1f:a2:18:58:53:4e:57:ec:c6:54:6b:51:b1:c9:
1b:f8:ab:85:7b:ed:4d:f9:aa:78:92:57:5b:d5:d5:98:98:ab:
19:3c:37:70:85:82:99:b6:5b:74:e6:9e:57:08:ab:ff:d2:3e:
5a:fc:da:10:b1:52:91:42:85:24:40:85:10:9f:09:80:30:dc:
77:e4:b9:08:b4:d2:51:3c:97:fe:33:db:dc:95:67:3c:bd:bb:
6e:25:ea:0d:27:4a:25:b1:50:0c:15:1d:66:6d:16:f6:35:7c:
93:69:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:15:37 2025 by rpki-client