Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/s-IMbD2pjvKUhIZ68GrMTr1GFbo.roa
File: s-IMbD2pjvKUhIZ68GrMTr1GFbo.roa (raw, json)
Hash identifier: CTaqo3UNAHXpb5aCt7CEAfLGvEGGv/lEATq6Os7Ys70=
Subject key identifier: B3:E2:0C:6C:3D:A9:8E:F2:94:84:86:7A:F0:6A:CC:4E:BD:46:15:BA
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA05AE215C06400105913E7C5865BE
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/s-IMbD2pjvKUhIZ68GrMTr1GFbo.roa
Signing time: Thu 02 Jan 2025 11:50:10 +0000
ROA not before: Thu 02 Jan 2025 11:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202759
IP address blocks: 95.156.206.0/24 maxlen: 24
185.122.185.0/24 maxlen: 24
185.193.49.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
188.214.36.0/24 maxlen: 24
188.214.37.0/24 maxlen: 24
2a03:f80:372::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 14:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:05:ae:21:5c:06:40:01:05:91:3e:7c:58:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3e20c6c3da98ef29484867af06acc4ebd4615ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:92:4c:35:ae:e0:c1:93:6d:4c:58:42:8e:
b8:df:fa:8f:93:20:0c:9b:49:21:a9:e4:44:d7:9b:
34:03:4e:09:a2:1b:83:9f:3f:60:f4:b2:8f:10:89:
5e:d4:10:77:9e:c0:2a:95:ed:1e:52:ad:6e:85:d1:
e6:37:42:8d:23:08:32:00:ca:a3:ba:12:dc:d3:00:
05:9a:37:59:88:ea:81:3f:b6:cf:5f:e6:33:6a:bf:
94:6c:d2:47:18:34:d9:45:05:2f:33:bd:43:bf:34:
ca:74:28:f5:e8:23:c4:52:d4:6a:b2:c6:0d:2b:9a:
59:79:9c:ec:fd:04:cd:a3:4a:24:eb:1e:28:de:91:
da:cf:8e:07:15:41:7f:6a:b0:30:f2:3d:22:6d:e8:
bb:51:1b:bf:64:81:6f:6c:a8:9a:1f:2b:30:b3:7f:
b9:22:1f:6f:a9:2e:cf:6e:c4:7c:71:1b:b7:83:5f:
3d:f0:19:8e:f6:9d:0d:ea:4e:66:cc:28:c5:b2:1f:
7b:84:3a:d0:91:ee:13:e8:83:45:07:e8:7f:1c:8c:
d1:38:48:91:87:20:8f:65:3e:53:d6:af:6d:31:a4:
f5:bd:2e:b1:f6:2e:cd:c3:0a:1b:1b:ec:db:d9:67:
5a:23:74:e9:3c:97:15:79:6b:3c:62:e2:88:25:41:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:0C:6C:3D:A9:8E:F2:94:84:86:7A:F0:6A:CC:4E:BD:46:15:BA
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/s-IMbD2pjvKUhIZ68GrMTr1GFbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.206.0/24
185.122.185.0/24
185.193.49.0/24
188.214.32.0/24
188.214.36.0/23
IPv6:
2a03:f80:372::/48
Signature Algorithm: sha256WithRSAEncryption
8b:fe:de:e2:25:e9:77:99:4e:90:4e:2e:16:de:d3:3f:e4:56:
1e:92:90:21:c7:d5:74:0a:a6:66:81:89:8b:fe:c1:3c:65:c9:
94:6f:a5:5c:7d:00:6f:6f:f2:66:88:d1:7d:65:c5:37:24:96:
d3:8c:bd:6b:c3:14:34:20:2c:bc:88:06:e1:a8:da:dd:0a:61:
14:8e:69:2c:01:d6:ee:7c:6e:d1:fe:dd:c1:e6:0f:0b:94:ff:
b3:30:b2:4d:84:ec:9c:4a:c9:dc:7e:66:78:b8:26:9d:7a:e4:
e5:38:a0:46:c6:bd:dd:75:40:bb:2f:c9:a3:2d:0a:b2:cc:d5:
7a:26:1f:49:ab:16:ce:82:aa:2c:fa:d7:92:5b:c1:6c:9c:c3:
73:66:96:83:66:a9:a4:a8:21:9d:3e:bc:c5:f9:3a:92:54:96:
82:d6:c3:79:72:bd:ae:c2:d7:8f:22:ec:f8:0a:cc:69:21:28:
e4:f4:86:0a:a3:9a:44:36:32:a4:35:f2:13:cf:da:19:22:4f:
88:4c:4e:82:a0:fa:a3:6c:05:ee:9c:10:78:58:ea:ca:6f:1a:
0f:23:41:45:e1:0f:3d:b1:f9:e0:b6:1a:d0:04:e3:4d:9d:d3:
4e:a3:d4:44:a7:98:70:06:30:5b:70:dc:73:8f:1f:99:0d:d0:
0a:77:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:21 2025 by rpki-client