Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/kDd78q7cl-iUqCr9yifRPNj__fo.roa
File: kDd78q7cl-iUqCr9yifRPNj__fo.roa (raw, json)
Hash identifier: cj05nRSo1y8HK9ep+1xS6nigPJ4s4UjSiZjzog22q+I=
Subject key identifier: 90:37:7B:F2:AE:DC:97:E8:94:A8:2A:FD:CA:27:D1:3C:D8:FF:FD:FA
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0194DA7FA715D5026F5F5030427F14BAF35E
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/kDd78q7cl-iUqCr9yifRPNj__fo.roa
Signing time: Thu 06 Feb 2025 09:03:06 +0000
ROA not before: Thu 06 Feb 2025 09:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57877
IP address blocks: 37.139.120.0/21 maxlen: 21
185.76.216.0/22 maxlen: 22
195.135.12.0/23 maxlen: 23
195.135.48.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
2a05:5cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Feb 2025 15:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:7f:a7:15:d5:02:6f:5f:50:30:42:7f:14:ba:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Feb 6 09:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90377bf2aedc97e894a82afdca27d13cd8fffdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:c9:19:31:eb:2c:21:aa:60:72:a7:dc:e8:
df:60:3d:1d:c1:56:73:f1:ef:93:0e:ae:74:19:cb:
53:ff:67:3d:78:c3:dd:57:46:e6:11:af:14:1c:84:
d9:8b:79:92:f4:f1:d8:48:3c:a7:8e:d5:b7:13:a3:
bd:f2:45:56:ed:3d:69:6e:b3:d6:38:2c:14:2f:0a:
b7:e5:42:4f:6f:e8:fb:fa:b1:f8:be:2f:8c:b3:5f:
98:08:df:ff:a5:06:8b:04:72:77:31:45:2c:15:43:
c1:7b:55:52:8a:8c:b7:3c:f8:9d:60:a3:db:45:c2:
6a:66:c0:27:31:d3:e0:ca:4d:9c:1f:ec:0a:04:69:
81:29:51:6a:87:b9:d5:12:c6:45:e7:cb:cc:09:d4:
2e:d8:50:65:7b:a4:66:a4:ee:8b:76:42:55:cd:6b:
d2:05:c5:fb:7e:41:bc:6e:1f:a1:a8:3a:22:79:9d:
73:17:cc:72:45:89:d1:2f:69:c7:63:48:af:63:0e:
4a:59:6e:61:3d:ab:19:d4:49:7b:95:76:c5:35:11:
f6:e9:a9:e8:7e:45:a1:42:ee:f8:7b:79:78:31:41:
8d:69:77:53:6b:02:5e:91:06:c4:0c:f9:e2:c1:50:
40:3e:94:9c:c8:bc:08:9b:b6:97:92:09:03:fc:a5:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:7B:F2:AE:DC:97:E8:94:A8:2A:FD:CA:27:D1:3C:D8:FF:FD:FA
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/kDd78q7cl-iUqCr9yifRPNj__fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.120.0/21
185.76.216.0/22
195.135.12.0/23
195.135.48.0/20
IPv6:
2a05:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
93:56:d3:a1:2f:ee:0f:97:7e:b0:26:71:a0:3f:1c:0d:7a:4a:
59:28:6c:6f:99:4e:e0:07:1f:55:8c:b1:65:de:e6:05:09:12:
d8:b7:8b:e1:a3:bf:26:7c:11:58:3d:13:54:cc:47:49:7e:e6:
a1:bf:9a:2b:a3:f1:45:25:c0:04:e3:85:11:c4:6f:da:79:f4:
a4:2b:68:d3:cf:b0:85:78:45:ec:8e:90:0f:51:b9:1f:df:3c:
65:a9:fb:04:e4:50:e3:54:9a:b4:0d:0f:be:1a:17:a9:f0:85:
44:09:96:eb:1d:96:be:a8:cf:11:5d:14:8a:36:94:d3:49:95:
3f:54:04:d0:44:e1:54:6e:a7:22:31:a4:ed:b2:0d:74:3c:1a:
2d:fd:a8:4c:1a:20:be:e5:70:3d:00:71:24:3b:1b:87:5c:9e:
bd:29:6c:5f:37:39:c7:bb:79:09:4e:d8:49:3a:24:54:ef:9b:
e9:7e:13:67:55:e5:ef:c7:bc:57:18:e9:f7:65:eb:9b:c7:57:
f3:4d:53:55:bc:47:30:a0:8b:8c:b6:9c:33:ec:ad:e9:15:e4:
ac:58:a7:a1:62:c4:9b:3a:df:20:b1:af:84:65:2a:9d:6a:c8:
37:40:cc:ce:72:e5:fd:94:d4:dc:d1:7e:58:1e:da:d8:bd:9c:
39:6d:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:32 2025 by rpki-client