Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7kQ9YOGipKH8dJc0doDvnqVaxJE.roa
File: 7kQ9YOGipKH8dJc0doDvnqVaxJE.roa (raw, json)
Hash identifier: //j7PwLZXMl8A2H0y9LC6PyKaNn37D8Umcgh0Ae5ocY=
Subject key identifier: EE:44:3D:60:E1:A2:A4:A1:FC:74:97:34:76:80:EF:9E:A5:5A:C4:91
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195156F7CDFE66A556F4A592B2A57609EF3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7kQ9YOGipKH8dJc0doDvnqVaxJE.roa
Signing time: Mon 17 Feb 2025 19:43:02 +0000
ROA not before: Mon 17 Feb 2025 19:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 80.244.15.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
194.69.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 07:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:6f:7c:df:e6:6a:55:6f:4a:59:2b:2a:57:60:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 17 19:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee443d60e1a2a4a1fc7497347680ef9ea55ac491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:78:ed:1e:69:35:c3:3d:bc:d9:b3:92:41:
ce:6b:58:8e:78:43:52:4a:04:6d:fc:70:44:88:2e:
ae:77:83:44:61:c1:d4:e5:c3:8e:38:ac:f5:5c:31:
9e:6a:99:33:66:bc:c8:e7:92:e2:9b:9a:c1:70:37:
d6:a4:d5:a5:f2:df:e3:dc:73:33:ae:f0:76:d2:15:
cb:de:03:5f:79:0a:0e:13:6d:bc:c0:38:60:f5:94:
b6:c8:ae:7c:78:a4:cd:63:ef:8a:ee:20:69:da:4b:
26:28:35:3f:55:2d:b2:bf:6f:84:29:d6:06:0c:f9:
0c:07:b2:cb:47:9e:63:5a:c7:e3:a9:5e:b3:74:49:
c6:b2:0e:02:9c:81:16:84:26:94:f0:a4:e2:0c:4a:
08:d2:35:fd:87:07:31:38:13:2e:ff:b1:42:cc:94:
d7:9f:f0:6b:52:2b:c9:c0:21:05:e8:10:0d:50:37:
4c:65:4e:b3:13:f6:17:07:a2:7c:4b:97:f7:f9:6a:
5a:2e:d1:4f:36:c6:ef:ea:af:2d:ae:90:d1:70:a4:
0e:1d:78:a4:84:e3:60:88:28:30:4c:1a:29:b8:06:
16:30:9d:1c:51:5e:d9:4b:75:41:54:39:18:73:8f:
cd:62:ed:a5:24:bb:b2:cc:cb:80:48:dd:8e:c3:be:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:44:3D:60:E1:A2:A4:A1:FC:74:97:34:76:80:EF:9E:A5:5A:C4:91
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7kQ9YOGipKH8dJc0doDvnqVaxJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.15.0/24
185.244.106.0/24
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b1:1a:07:a3:98:49:1f:08:b9:bb:12:af:f2:22:a5:17:09:
2b:7a:9e:71:ac:42:b6:af:5e:e6:ec:3f:6f:b5:f3:a9:d6:0e:
c5:99:e3:22:7b:38:82:b1:f3:99:00:a8:8d:56:24:3d:aa:98:
5e:0f:8f:03:93:3a:05:23:2a:22:58:46:f9:18:6e:55:32:db:
5e:27:2e:95:0f:70:c7:6c:4c:bb:18:a8:1d:8e:83:d8:3c:9d:
ce:2c:3c:83:9e:1f:dc:c8:97:fe:f0:dd:55:05:c5:db:0d:ce:
8c:b7:95:b5:cc:04:78:88:fd:bd:1d:fa:2e:59:5d:84:c0:02:
44:fc:64:5e:e5:39:7c:ce:0d:08:65:a5:59:5f:77:19:55:4a:
95:ce:ee:71:f7:71:95:d0:59:a8:fc:8b:ae:84:35:5d:9b:2e:
91:76:74:d9:d7:de:52:36:bb:4f:0f:e6:06:e2:ac:63:94:ce:
0f:c3:f7:01:39:70:b0:a8:f6:d9:68:ec:62:3f:6b:b9:76:b2:
f5:a1:11:b8:43:73:7a:b0:58:80:00:dc:e7:e2:0a:4e:bc:52:
9f:e4:f1:95:7b:28:fd:2f:1f:91:12:d2:11:6a:79:37:54:b0:
a9:47:77:b0:14:b4:28:2c:52:be:b6:b4:01:52:cb:b3:c7:6a:
e6:35:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:40:40 2025 by rpki-client