Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/cbGi8SfDQpUxSJsEBKdqbhybF6c.roa
File: cbGi8SfDQpUxSJsEBKdqbhybF6c.roa (raw, json)
Hash identifier: lx18K2UVi8trzx5h6Sh3M+DMUPlZ4bfh7pqP//bjj+A=
Subject key identifier: 71:B1:A2:F1:27:C3:42:95:31:48:9B:04:04:A7:6A:6E:1C:9B:17:A7
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01940801BD185BC92CB6D542F59AD7458D49
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/cbGi8SfDQpUxSJsEBKdqbhybF6c.roa
Signing time: Fri 27 Dec 2024 12:05:19 +0000
ROA not before: Fri 27 Dec 2024 12:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207143
IP address blocks: 185.101.156.0/22 maxlen: 22
185.101.156.0/24 maxlen: 24
185.101.157.0/24 maxlen: 24
185.101.158.0/24 maxlen: 24
185.101.159.0/24 maxlen: 24
185.229.88.0/24 maxlen: 24
185.229.89.0/24 maxlen: 24
185.229.90.0/24 maxlen: 24
185.229.91.0/24 maxlen: 24
193.203.253.0/24 maxlen: 24
213.254.165.0/24 maxlen: 24
2a11:8b81::/32 maxlen: 32
2a11:8b82::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:01:bd:18:5b:c9:2c:b6:d5:42:f5:9a:d7:45:8d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Dec 27 12:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71b1a2f127c3429531489b0404a76a6e1c9b17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:66:8b:a1:26:47:f3:3a:00:0b:d7:4d:d6:
c6:85:8b:ca:31:40:9e:c2:bb:71:f7:f2:fd:99:b9:
26:88:7d:14:42:3c:aa:b8:d1:a4:3b:e0:2c:f6:35:
16:3e:bc:6f:4e:75:1e:61:aa:5e:ac:2a:69:35:e8:
94:33:19:df:72:18:42:21:2a:ab:30:10:d4:d6:1d:
1f:44:9e:4a:13:a8:7c:17:8c:69:04:32:e7:39:9e:
31:f5:c1:2b:3a:60:7c:87:c4:1b:b8:01:ce:11:39:
e9:3b:69:c1:f5:0c:04:5d:32:dd:15:02:ff:2d:36:
22:80:f2:22:3e:85:fb:48:98:bc:ff:9a:f0:85:b5:
04:1f:98:13:a5:6e:33:ad:26:39:a6:5c:4e:3c:31:
43:34:51:0c:54:38:b7:95:6a:9e:84:f5:d5:49:ff:
82:02:77:a0:6e:66:7a:dc:fb:23:e6:9e:55:5a:05:
7b:e6:95:b6:15:36:57:fa:f5:8e:15:f3:95:43:cb:
1a:22:b6:aa:ec:7f:91:65:eb:11:80:66:31:7d:96:
2e:b6:dd:a7:b6:af:0d:43:21:fc:ff:3f:32:1c:d8:
67:f7:e7:ed:9c:cc:9d:4e:5e:02:3d:2c:19:9a:cb:
6e:7a:54:62:51:1e:a3:bb:f1:91:99:83:d2:9e:c7:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:A2:F1:27:C3:42:95:31:48:9B:04:04:A7:6A:6E:1C:9B:17:A7
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/cbGi8SfDQpUxSJsEBKdqbhybF6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.156.0/22
185.229.88.0/22
193.203.253.0/24
213.254.165.0/24
IPv6:
2a11:8b81::-2a11:8b82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:c6:ad:0f:5f:79:88:38:06:00:2c:38:87:75:33:05:72:39:
7b:9a:2e:c4:b5:7c:ad:bc:b5:8c:f7:bf:f2:7b:e1:5a:e1:5e:
c6:d9:09:55:11:2a:d4:46:04:f7:a9:ca:6b:1e:cf:40:0b:21:
08:22:e2:7f:4e:13:8a:2d:eb:8e:22:23:e3:89:d4:dc:48:14:
27:f7:46:7f:b0:72:43:ae:6f:72:48:84:29:b9:12:46:88:89:
52:31:d8:30:4d:e1:a5:65:ac:5b:20:c0:24:a9:34:75:26:8a:
74:2b:9c:8a:48:9d:d5:af:c2:ee:b5:09:ac:98:35:ec:a9:67:
c3:c7:29:da:ef:68:c9:e9:5a:f4:c5:23:2c:ea:f8:2e:f8:4b:
13:6b:5e:21:6b:5f:54:fc:72:04:7b:2d:09:1c:6e:5e:73:99:
90:16:16:6b:2d:6e:17:1f:59:7e:fb:73:84:bc:07:66:ce:05:
a0:19:df:ce:6d:72:53:c4:3f:f5:e3:1c:9c:10:40:60:24:89:
50:38:2b:90:b6:cb:c1:50:f0:13:1c:58:a3:39:cd:5f:1e:ec:
0c:e6:f0:26:c5:eb:e0:89:44:01:e2:c0:7a:bb:c6:07:0b:cc:
53:bc:a9:0b:25:ea:16:57:e5:c8:bb:ad:5b:77:57:bd:b0:11:
67:36:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:33:29 2025 by rpki-client