Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G_ijy4b1wseprxjxk02pz087D30.roa
File: G_ijy4b1wseprxjxk02pz087D30.roa (raw, json)
Hash identifier: ecOiShZtpJFbuW/ZbU8ZnWUy//x38pF1dA8Y6Qjvd5w=
Subject key identifier: 1B:F8:A3:CB:86:F5:C2:C7:A9:AF:18:F1:93:4D:A9:CF:4F:3B:0F:7D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196E798C2E810FF3CA719C31002FDBDE5B7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G_ijy4b1wseprxjxk02pz087D30.roa
Signing time: Mon 19 May 2025 08:11:10 +0000
ROA not before: Mon 19 May 2025 08:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 92.71.32.0/20 maxlen: 24
92.71.64.0/18 maxlen: 24
134.222.0.0/19 maxlen: 24
134.222.176.0/20 maxlen: 24
134.222.208.0/20 maxlen: 24
134.222.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:98:c2:e8:10:ff:3c:a7:19:c3:10:02:fd:bd:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 19 08:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf8a3cb86f5c2c7a9af18f1934da9cf4f3b0f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:b3:1b:6c:f3:92:c7:42:77:4b:86:a3:72:
7d:7a:65:02:8a:8b:9a:01:38:99:76:71:51:82:da:
ad:78:3b:61:e1:a2:4f:2e:15:17:00:70:22:a6:5b:
d8:00:5e:90:c8:c6:a9:03:0f:18:0d:cb:84:51:fc:
6f:5f:7c:ad:db:16:3c:f5:6f:37:71:3d:c7:74:77:
3b:5a:91:15:69:af:59:bc:45:5a:bc:06:0c:51:8a:
07:b6:6c:87:69:68:a5:40:ab:6d:bf:93:ba:cc:cc:
94:c8:e6:82:dd:6a:67:c9:9e:e4:81:eb:90:2a:49:
ee:d4:c9:80:3e:85:09:b9:fc:84:b8:3f:82:6c:08:
ad:9b:cd:0d:cc:bc:df:80:83:d8:6c:1c:9e:f5:79:
f5:d7:fc:a7:f9:a6:ba:31:99:34:f8:13:c2:3f:df:
ae:22:c1:f0:30:69:84:5d:c2:e6:f1:ae:c8:aa:aa:
bd:e9:fc:22:e4:67:6c:0b:af:3e:15:ef:2e:fa:08:
0d:ac:6b:09:17:01:80:36:d4:f7:bc:e1:89:69:14:
cc:68:33:0e:e4:8e:dc:ba:6d:c1:8a:25:fb:7a:6a:
68:b7:d4:48:d7:a7:59:93:12:32:d9:82:e1:c6:99:
9c:a2:c7:4b:2f:49:3d:1b:2f:46:a1:72:cc:bb:c3:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:A3:CB:86:F5:C2:C7:A9:AF:18:F1:93:4D:A9:CF:4F:3B:0F:7D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G_ijy4b1wseprxjxk02pz087D30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.32.0/20
92.71.64.0/18
134.222.0.0/19
134.222.176.0/20
134.222.208.0/20
134.222.240.0/20
Signature Algorithm: sha256WithRSAEncryption
17:b1:d4:88:c6:a3:fb:49:51:7f:48:0f:6e:a3:f0:6a:30:0e:
d3:8e:e8:16:7d:64:3b:ec:9c:75:05:13:a4:3e:0e:ee:a2:a7:
ce:74:23:36:ac:91:34:56:09:4a:22:6d:80:c3:66:66:04:59:
37:e2:7d:cb:6a:be:30:13:2c:b8:d5:ed:d4:cc:5c:cd:1f:cc:
45:37:6f:93:a4:0a:33:3a:b3:1e:84:16:bf:07:cf:7b:30:c8:
99:14:3e:38:d9:65:22:74:c8:62:6e:84:d4:5d:5f:21:5e:f1:
5c:4d:66:4d:14:62:a7:a7:48:53:77:3d:c4:f6:88:da:6b:da:
d7:34:96:1d:cc:89:00:86:8a:56:8c:d8:e0:ff:66:97:bb:92:
2e:59:8e:2b:3f:d7:ef:80:b5:91:2e:2b:89:cb:69:ef:e4:a3:
5f:34:6a:86:e7:36:f1:b5:42:9b:83:fa:f3:ff:67:1a:14:0b:
8f:47:5e:b2:63:5b:79:d4:28:93:2a:a4:49:48:b1:6d:97:c1:
2d:88:b0:21:3a:39:1b:f0:32:67:a0:5a:9b:b8:02:e5:83:e9:
c4:1d:02:43:f2:d8:af:e8:ee:55:0a:b6:5d:7d:c0:be:3a:64:
df:91:cc:02:ce:94:5f:6c:3e:25:76:43:4e:fd:5f:45:ff:4f:
2c:8c:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:35:38 2025 by rpki-client