Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/jV1mcUhIApEKwSmQ9jabXZZHMXY.roa
File: jV1mcUhIApEKwSmQ9jabXZZHMXY.roa (raw, json)
Hash identifier: B9pntPJTWx4ZfYdpkxjb9p+mpVMA7j+23WOjtvraG7E=
Subject key identifier: 8D:5D:66:71:48:48:02:91:0A:C1:29:90:F6:36:9B:5D:96:47:31:76
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 0191B4F99B7D40041912FBA4D8E0F692467A
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/jV1mcUhIApEKwSmQ9jabXZZHMXY.roa
Signing time: Mon 02 Sep 2024 23:02:22 +0000
ROA not before: Mon 02 Sep 2024 23:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208669
IP address blocks: 85.202.92.0/24 maxlen: 24
85.202.93.0/24 maxlen: 24
85.202.94.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
2a10:1900::/32 maxlen: 32
2a10:1901::/32 maxlen: 32
2a10:1902::/32 maxlen: 32
2a10:1903::/32 maxlen: 32
2a10:1904::/32 maxlen: 32
2a10:1905::/32 maxlen: 32
2a10:1906::/32 maxlen: 32
2a10:1907::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b4:f9:9b:7d:40:04:19:12:fb:a4:d8:e0:f6:92:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Sep 2 23:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d5d6671484802910ac12990f6369b5d96473176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:ba:b5:31:82:70:7f:5c:e9:38:7e:b3:8e:
20:46:f3:f3:37:84:4e:58:56:c2:8b:18:ec:d1:5f:
71:85:55:0e:ac:42:1e:a0:60:d6:27:eb:14:68:86:
a8:72:64:dd:da:73:ac:a8:57:7d:eb:f3:44:24:17:
55:4a:2d:2e:01:dc:9d:b5:0a:a2:ab:bc:b3:18:ee:
ac:f7:5b:8e:c8:10:2d:9f:13:c6:8c:e5:18:70:1b:
b7:ba:a3:b7:b2:9a:bb:5e:ce:25:4e:fe:b6:86:5d:
b8:4d:38:37:c0:83:86:82:9c:d2:32:5b:8e:fe:64:
c1:42:67:66:59:b0:f1:e4:e3:cd:7b:ff:89:dc:1d:
b3:63:49:5a:19:7d:37:83:9f:30:a2:a1:a3:67:86:
54:a1:86:e3:b5:db:39:a8:1a:2c:11:5e:56:7b:96:
cd:6d:65:fb:a8:2a:37:48:1d:0e:65:6e:b8:7e:fe:
31:b8:fc:3e:b9:e0:5a:c8:a3:e2:41:20:b3:e7:79:
74:5a:ba:d8:2c:ee:2d:b9:a6:80:f3:66:8e:98:33:
fc:a0:68:88:1e:41:0a:10:ea:ac:9e:e4:f0:34:5d:
0f:39:e8:69:97:dc:67:76:85:18:49:70:2f:b2:06:
54:6a:6d:2e:50:74:84:c7:ac:67:40:b2:ee:6d:80:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:66:71:48:48:02:91:0A:C1:29:90:F6:36:9B:5D:96:47:31:76
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/jV1mcUhIApEKwSmQ9jabXZZHMXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.92.0/22
IPv6:
2a10:1900::/29
Signature Algorithm: sha256WithRSAEncryption
95:93:c5:e8:b1:cf:59:9d:00:c9:d7:6a:ed:37:ce:a9:3c:a2:
9b:76:e9:78:08:ab:32:54:ad:50:eb:04:db:ca:b0:9b:26:d4:
18:0b:d1:b1:91:1f:f5:0e:c7:b0:d6:0f:b8:b0:ec:b2:52:bd:
d3:ac:66:bd:40:36:41:62:d6:61:3d:44:58:0a:42:5e:37:0a:
cc:5c:d5:b5:83:ea:3b:d7:4e:a0:ce:85:de:b6:c6:e1:ea:0d:
82:16:54:93:1b:8a:94:0f:79:a4:d4:8f:20:f1:55:35:bf:eb:
17:04:d4:43:6c:8b:8f:03:9c:5a:d5:d9:27:16:5e:0b:53:cf:
cb:62:af:47:53:c2:4d:7a:cf:1a:99:3c:c2:60:c1:ff:a8:2c:
e4:59:f5:4a:3a:4f:78:f8:4b:4c:3d:9a:52:74:27:c4:c1:30:
97:d3:bb:02:01:3a:7a:72:f3:8c:8f:37:18:66:56:03:d7:24:
00:cb:40:f5:cd:e0:2d:5a:a0:22:b0:b2:38:fa:8a:45:91:2b:
f3:2f:b0:f7:0a:10:de:90:58:30:85:04:fc:81:c4:02:3c:50:
ef:e7:ef:de:73:3f:30:20:c8:b2:fd:f8:b7:c4:a4:9a:00:5a:
37:25:83:9e:5d:af:bf:4b:cb:bc:3b:cc:1f:42:b2:d7:8b:e2:
27:99:39:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:54:43 2025 by rpki-client