Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/xWf8T5INnb7wYUlAy3hA73gRCe8.roa
File: xWf8T5INnb7wYUlAy3hA73gRCe8.roa (raw, json)
Hash identifier: wT0OeHbxjegHO+J96lZUk0EXmhCgLUhmGm4eeRWOSAM=
Subject key identifier: C5:67:FC:4F:92:0D:9D:BE:F0:61:49:40:CB:78:40:EF:78:11:09:EF
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019396241FB00A1302EECF6269CC89CFCAC4
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/xWf8T5INnb7wYUlAy3hA73gRCe8.roa
Signing time: Thu 05 Dec 2024 09:26:10 +0000
ROA not before: Thu 05 Dec 2024 09:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25189
IP address blocks: 213.251.208.0/20 maxlen: 24
213.251.240.0/20 maxlen: 24
213.251.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 11:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:24:1f:b0:0a:13:02:ee:cf:62:69:cc:89:cf:ca:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Dec 5 09:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c567fc4f920d9dbef0614940cb7840ef781109ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0c:56:83:33:5f:4c:61:ae:96:59:cb:96:a2:
39:75:97:02:37:39:dd:8e:d2:65:52:e0:62:04:e2:
ad:75:e9:e1:df:7a:82:5c:ca:00:86:75:0a:66:a8:
64:c9:f8:a2:d8:98:f7:e0:c2:97:e8:47:7d:e8:78:
c2:b2:df:1b:45:60:00:b6:e8:01:91:ea:8c:ef:e4:
28:ec:16:a4:dc:1f:e9:9a:46:41:45:e9:79:b6:11:
69:a3:22:45:c4:64:dc:b3:e4:3d:ef:c9:e3:ae:fa:
b3:37:1e:e6:a8:d1:da:47:ed:d3:d4:d0:9f:53:5f:
f9:65:20:69:b7:83:a3:48:d6:f6:50:e5:ca:c9:12:
ed:6a:21:e2:2f:bb:01:6a:5e:71:28:83:97:f4:9e:
d3:d7:6f:dd:2a:b3:f3:c6:ec:5d:89:e3:e8:01:ab:
aa:88:46:93:60:61:cb:47:02:ca:17:43:d2:23:6d:
76:cd:fb:1f:c4:e9:84:78:04:be:80:ac:68:29:89:
8a:4e:be:48:2e:be:93:0e:cd:47:bf:de:3c:ea:d9:
23:31:92:81:eb:a5:46:de:dc:ec:b1:2c:75:b2:73:
49:cc:44:8b:4a:d8:d6:d9:71:c4:8e:5a:02:fd:83:
e7:04:75:ae:ab:8c:6e:8c:96:95:fe:96:e0:3f:b6:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:FC:4F:92:0D:9D:BE:F0:61:49:40:CB:78:40:EF:78:11:09:EF
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/xWf8T5INnb7wYUlAy3hA73gRCe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.251.208.0/20
213.251.240.0/20
Signature Algorithm: sha256WithRSAEncryption
02:8b:f7:70:03:67:a2:d1:d1:50:70:c4:ce:44:fc:74:ed:41:
57:3a:eb:47:a2:b4:b1:c7:bf:2f:30:d9:4b:f0:48:c8:17:66:
7f:c3:a4:4c:e4:d3:5b:22:a2:97:f1:52:2d:a6:cd:58:e5:59:
3c:e3:9a:6b:3e:2e:b5:2f:48:c6:37:ec:c2:37:fd:3a:7b:be:
ed:8f:15:01:01:ad:fc:21:16:db:cc:30:c8:79:ad:71:65:e3:
aa:a0:b6:ef:0a:70:82:89:cb:06:f9:d8:60:45:f0:3f:d1:b7:
27:0b:fd:a1:bf:c8:d8:e8:ff:56:79:36:38:4b:c0:5d:9d:0a:
97:31:ee:42:02:84:c5:21:b2:43:dc:ed:49:67:ea:0d:07:51:
81:fa:91:49:cf:76:e7:4e:7f:99:4b:38:13:b6:c3:f2:f7:7b:
04:42:b4:b3:f1:65:6b:92:99:93:f7:7b:66:d9:21:f8:ae:a6:
9e:d1:8e:8e:a6:9a:85:b5:e5:ca:37:75:8e:90:fe:cb:10:1a:
9a:88:0d:90:a6:ea:6a:29:93:e6:75:85:cc:d9:a7:87:94:ed:
49:86:c1:3a:0e:f1:27:65:a5:68:02:05:57:2a:28:3e:fc:54:
1c:88:bf:0f:1a:bc:9c:df:fd:23:24:3a:ed:3d:63:87:f8:92:
2a:fa:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:10:49 2025 by rpki-client