Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/36Vdt2GkIjQjF_SkTBotVRKuRhI.roa
File: 36Vdt2GkIjQjF_SkTBotVRKuRhI.roa (raw, json)
Hash identifier: ZvUq1i7Mz4LDpeSroQovUrsUh51FJWBO6lsDFX9mFqs=
Subject key identifier: DF:A5:5D:B7:61:A4:22:34:23:17:F4:A4:4C:1A:2D:55:12:AE:46:12
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01971127DEC2AFF52D5450610F54A00637EA
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/36Vdt2GkIjQjF_SkTBotVRKuRhI.roa
Signing time: Tue 27 May 2025 09:51:54 +0000
ROA not before: Tue 27 May 2025 09:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 12:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:27:de:c2:af:f5:2d:54:50:61:0f:54:a0:06:37:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 27 09:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa55db761a422342317f4a44c1a2d5512ae4612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:61:06:fa:fa:2a:a3:0e:30:9f:97:13:0b:
b4:8f:ce:0e:54:8e:50:3b:c2:9d:c2:bb:e6:9e:e5:
b7:be:1e:7b:4b:fc:f5:ae:3c:41:5e:34:3d:ec:0c:
93:76:3c:56:8b:86:09:eb:dd:4d:e9:bc:75:b8:a5:
8e:83:af:e7:a7:a7:15:4b:86:51:84:82:d5:ae:33:
cc:4e:9c:4d:5d:5a:13:b4:b8:f8:fb:d5:5b:22:47:
87:c0:11:fc:06:32:bb:8d:c0:7b:ed:76:c1:92:9c:
a3:e1:ea:d4:3f:4f:30:bc:d3:c3:d8:de:a8:22:17:
46:4a:ad:63:5c:28:9e:ae:a8:53:be:6e:37:07:fe:
d6:6b:fd:1d:c4:2d:09:e9:f6:49:12:3f:3c:d3:89:
71:93:91:94:89:eb:94:14:fe:c5:78:bf:ec:c5:bf:
c5:2e:12:a3:f1:1c:55:67:a0:ed:65:04:d3:5f:a9:
fa:cb:7b:69:ce:68:7a:d3:83:35:f1:82:fd:66:f1:
16:32:80:64:e5:6a:4e:a4:0d:16:56:13:aa:4f:fb:
f6:d7:74:88:50:85:80:c0:e9:7f:77:e9:4b:be:dd:
8c:8c:93:ce:69:2a:b1:41:f2:6f:74:a2:c7:7a:f3:
bf:39:52:42:94:ec:6b:ba:68:02:d2:82:7d:40:61:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:5D:B7:61:A4:22:34:23:17:F4:A4:4C:1A:2D:55:12:AE:46:12
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/36Vdt2GkIjQjF_SkTBotVRKuRhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.44.209.0/24
93.113.158.0/24
93.113.203.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
22:ab:51:0b:23:06:b2:b5:7b:4a:41:26:1c:25:7a:cb:8c:10:
63:17:31:44:05:2e:70:78:99:d8:a3:d5:8f:04:d5:f3:57:4e:
11:24:ce:40:59:00:44:91:5f:e4:c5:ef:26:7e:33:12:a6:42:
86:1f:f1:2e:11:08:f9:b8:04:a3:09:dd:2b:ac:38:62:6c:05:
e1:bb:b9:4d:74:fe:7e:34:22:5b:0d:75:d9:6d:bc:9e:de:64:
b3:bb:f8:fb:d2:09:28:2b:59:38:cb:b3:c9:66:05:c1:fc:ef:
ca:98:c1:21:e6:d5:1d:74:6a:fb:b3:43:19:8f:1d:fa:6d:81:
d0:fa:dc:01:f1:b1:e4:1c:bf:53:c1:b8:f0:12:c8:62:ba:f5:
b0:7c:5e:e9:d3:80:f1:b5:d3:7f:0d:4c:e5:44:dc:c5:ad:3b:
79:7d:fd:45:18:00:f9:05:e1:a2:85:5f:18:9b:3b:a1:b4:54:
72:b6:91:e3:07:8f:4f:81:b7:e2:94:85:36:f0:64:87:86:14:
11:bd:3f:b6:0f:1d:68:2c:4a:10:1b:7b:7f:99:ce:45:9c:9f:
00:37:43:0d:3f:c7:17:f8:d2:01:ad:0f:60:3f:8a:cb:c8:54:
8d:d5:fc:73:fc:93:d6:85:cc:97:a7:1c:03:c5:8a:7f:33:1e:
66:90:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:08 2025 by rpki-client