Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/iEzzQ6s9o-dth3866vfVF1NclRs.roa
File: iEzzQ6s9o-dth3866vfVF1NclRs.roa (raw, json)
Hash identifier: zW1uJisvOdHjhRm5hO7G3R7RywrnJvoVVIq70C2Rt8E=
Subject key identifier: 88:4C:F3:43:AB:3D:A3:E7:6D:87:7F:3A:EA:F7:D5:17:53:5C:95:1B
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0194DBF41525DFDC445C9B6CA11198F96405
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/iEzzQ6s9o-dth3866vfVF1NclRs.roa
Signing time: Thu 06 Feb 2025 15:49:53 +0000
ROA not before: Thu 06 Feb 2025 15:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57877
IP address blocks: 37.139.120.0/21 maxlen: 21
185.76.216.0/22 maxlen: 22
2a05:5cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Feb 2025 17:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:f4:15:25:df:dc:44:5c:9b:6c:a1:11:98:f9:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Feb 6 15:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=884cf343ab3da3e76d877f3aeaf7d517535c951b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:7c:c5:b4:b8:52:22:9b:d1:45:90:7c:9e:
c9:91:50:da:7b:80:4d:48:09:c6:62:b5:ab:19:c1:
85:2c:68:ab:60:93:92:0e:53:ac:8b:4a:cc:14:40:
10:bd:70:8c:86:94:59:a3:0f:7b:c4:97:9d:5a:ef:
24:9f:7f:c2:71:78:b7:69:67:a5:0b:c4:66:c9:ff:
db:b8:94:af:c0:3f:0a:b1:6f:c1:3f:ac:32:97:76:
ce:6d:4e:33:ed:e1:ee:f0:9a:89:d1:30:45:2c:75:
c7:bc:16:d4:5f:d3:74:52:fd:e6:de:42:64:df:ef:
46:6c:67:e7:6a:90:63:be:be:f2:7d:23:25:ba:07:
cd:0f:03:7d:ce:69:27:a3:a1:80:bd:9c:09:0d:ad:
bf:28:a9:2c:29:9c:3e:d9:0c:bd:c0:6e:af:c0:d4:
f6:5f:62:e6:8a:57:ad:b0:73:38:6b:48:94:60:2f:
4d:b8:bc:eb:78:9e:0a:ac:14:f7:b3:cb:b7:f4:28:
66:1e:0e:d6:f8:75:06:02:61:72:fb:9b:a6:eb:7d:
1e:c5:ce:c9:13:ee:bc:b6:dd:02:11:2e:5e:3a:36:
12:2f:6d:1b:e4:5b:1f:3a:3c:4b:8f:a2:23:5b:4d:
15:fc:8d:8e:30:3e:5c:82:d8:b9:13:d8:6d:07:6e:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:F3:43:AB:3D:A3:E7:6D:87:7F:3A:EA:F7:D5:17:53:5C:95:1B
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/iEzzQ6s9o-dth3866vfVF1NclRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.120.0/21
185.76.216.0/22
IPv6:
2a05:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
76:1f:c8:67:de:db:05:0a:cf:1c:f9:40:d4:aa:36:0a:65:ae:
14:c5:eb:c0:19:03:80:ea:69:bd:fe:b9:b3:93:ab:f6:43:dd:
45:f6:4d:55:14:62:f1:53:ee:e9:b9:e1:cc:24:a9:0e:fa:c6:
01:43:58:2a:a6:eb:e3:c0:8c:79:bb:d2:a1:6f:de:7c:ff:fc:
3f:77:7d:55:e7:a1:42:7f:c2:c5:df:35:97:34:47:9f:1c:b5:
67:29:af:11:55:7c:2c:72:c2:4e:1e:2c:59:02:7a:4d:74:91:
8a:67:43:50:ab:c4:9c:ad:0d:55:19:40:93:9a:5e:ae:33:e6:
cf:52:f9:29:b6:2e:28:76:99:55:8d:cc:43:51:62:c6:41:36:
a9:94:b3:0c:b8:30:a6:f5:8b:26:f4:78:f6:bf:7a:96:39:5b:
c8:bb:dc:3f:f5:5c:03:37:22:28:46:42:f2:94:f4:40:d5:0c:
4a:1b:b7:f0:73:63:10:17:23:ce:37:88:26:cc:4e:4e:d2:32:
81:e4:93:63:d8:4a:1f:fa:88:76:64:14:d5:6a:32:69:70:1b:
ed:98:32:76:37:38:5c:00:ad:45:f3:3e:39:90:23:16:39:b8:
d8:cc:8c:94:af:16:2f:4e:ae:02:12:b5:fc:ef:9e:36:cd:c1:
61:a4:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:42 2025 by rpki-client