Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/i_XjTOYrMR1h3mWKx5J3QmFiSyk.roa
File: i_XjTOYrMR1h3mWKx5J3QmFiSyk.roa (raw, json)
Hash identifier: BPQ28CsKlEzIIf8n7iWu7fHEtQUblUPnm/fiyy7u1ek=
Subject key identifier: 8B:F5:E3:4C:E6:2B:31:1D:61:DE:65:8A:C7:92:77:42:61:62:4B:29
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01961B0E6B5C79F1BBC161584F4D19D36917
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/i_XjTOYrMR1h3mWKx5J3QmFiSyk.roa
Signing time: Wed 09 Apr 2025 14:57:31 +0000
ROA not before: Wed 09 Apr 2025 14:57:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31500
IP address blocks: 94.124.182.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
95.140.80.0/24 maxlen: 32
95.140.82.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.91.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
95.161.128.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.136.0/23 maxlen: 23
109.239.138.0/24 maxlen: 24
109.239.139.0/24 maxlen: 24
109.239.140.0/24 maxlen: 24
109.239.141.0/24 maxlen: 24
109.239.142.0/24 maxlen: 24
109.239.143.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
178.18.229.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.232.0/24 maxlen: 24
2001:b28::/32 maxlen: 32
2001:b28:4::/48 maxlen: 48
2001:b28:7b0c::/48 maxlen: 48
2001:b28:9999::/48 maxlen: 48
2001:b28:9a9c::/48 maxlen: 48
2001:b28:a451::/48 maxlen: 48
2001:b28:ffff::/48 maxlen: 48
2a03:5f80::/46 maxlen: 46
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 10 Apr 2025 06:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:0e:6b:5c:79:f1:bb:c1:61:58:4f:4d:19:d3:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Apr 9 14:57:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bf5e34ce62b311d61de658ac792774261624b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:d4:00:a4:03:8b:00:bc:d7:ba:56:c9:ec:
10:46:9c:c2:7f:4d:90:1c:ef:c6:e5:be:d4:94:dd:
01:e0:4e:02:7c:9c:ba:f8:4e:61:ec:a8:64:fd:41:
00:5a:69:68:d1:95:96:25:28:46:40:63:ef:c0:60:
4a:82:b9:89:6b:5c:c1:33:29:17:d2:9d:6b:62:3d:
4f:f7:55:89:9c:9a:84:ad:fe:15:7b:4c:ef:90:1c:
a2:03:14:3a:88:42:99:a3:55:c7:95:57:03:25:52:
ae:3e:00:75:fd:68:d2:be:01:1d:85:43:fa:28:94:
05:88:22:8e:64:a3:42:fe:11:7c:67:0f:39:16:97:
af:4a:3a:d2:06:a4:38:58:b4:36:22:5f:c2:38:da:
10:b3:cc:3a:d3:5d:cb:c3:d9:76:7f:c5:70:ed:c3:
f7:53:41:c0:18:d6:ff:c3:83:a9:24:e1:22:a1:23:
cd:97:d3:19:3f:d1:a4:c7:48:00:ba:17:93:d6:e6:
86:3c:ff:1a:ad:1b:b2:5a:d8:b5:ad:13:c0:87:5a:
bf:db:ee:de:64:24:86:3d:56:3f:30:89:ae:91:1d:
22:db:b9:cd:0d:03:cf:43:53:89:84:e8:62:90:31:
8a:bf:61:6f:52:39:dd:b9:ef:75:0f:31:be:7d:e3:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:E3:4C:E6:2B:31:1D:61:DE:65:8A:C7:92:77:42:61:62:4B:29
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/i_XjTOYrMR1h3mWKx5J3QmFiSyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.182.0/23
95.140.80.0/24
95.140.82.0/23
95.140.88.0/22
95.140.93.0/24
95.140.95.0/24
95.161.128.0/24
95.161.240.0/20
109.239.128.0/20
178.18.228.0/23
178.18.231.0-178.18.232.255
IPv6:
2001:b28::/32
2a03:5f80::/46
2a03:5f80:8::/46
Signature Algorithm: sha256WithRSAEncryption
54:19:de:71:8c:1e:d0:9c:eb:3c:8c:a4:a9:1c:04:e4:63:3d:
6a:f2:2f:2d:30:f6:41:dc:15:30:9c:81:e0:b4:81:bb:ed:70:
c8:c1:03:a3:31:73:c0:0c:73:bc:d4:64:02:03:e3:74:05:ea:
d4:8f:d8:b1:f3:e9:66:22:c0:26:95:a0:ef:d9:b7:08:eb:57:
3a:0a:03:ea:9d:e5:6e:a6:85:55:07:7b:bd:5e:76:b9:d2:4f:
2e:4d:0d:94:75:8a:4a:96:fa:df:85:02:8c:20:a9:97:d8:07:
5c:0a:9a:c5:e2:ac:1a:39:b6:f7:57:b2:9f:13:3c:e3:8c:7e:
d8:81:78:bd:85:19:be:92:d1:36:7d:3a:14:a9:79:80:fb:0a:
1c:69:1e:50:d4:72:b1:ba:6c:b9:6c:68:b7:92:e7:1a:c6:ae:
2a:9c:74:09:26:9f:b3:90:16:01:96:ff:4b:03:a9:d0:88:a1:
a6:6d:b0:ab:2a:72:bc:d9:ac:67:c7:c7:9a:db:7e:e7:02:40:
4e:60:d5:e5:d7:ae:c6:1b:2d:1c:02:46:b6:23:64:c6:ee:75:
b7:82:76:ac:ea:1a:38:4e:57:3a:89:cc:a2:51:c0:ec:da:0a:
8a:cf:73:2f:d5:8d:fe:3f:5e:c2:46:46:b7:67:de:14:3e:3b:
89:3f:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:57 2025 by rpki-client