Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2CB2R2C27xX9_4gBDn11sLoICjs.roa
File: 2CB2R2C27xX9_4gBDn11sLoICjs.roa (raw, json)
Hash identifier: q5QttWGJWS2Z8RFvqykP9LTmJtO8f2iKEPVCvP6nG48=
Subject key identifier: D8:20:76:47:60:B6:EF:15:FD:FF:88:01:0E:7D:75:B0:BA:08:0A:3B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019436FD05F133DC6B0526385B62FB0D91B3
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2CB2R2C27xX9_4gBDn11sLoICjs.roa
Signing time: Sun 05 Jan 2025 15:02:19 +0000
ROA not before: Sun 05 Jan 2025 15:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 11:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:fd:05:f1:33:dc:6b:05:26:38:5b:62:fb:0d:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 5 15:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d820764760b6ef15fdff88010e7d75b0ba080a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:ff:11:f8:46:56:1a:74:96:69:8a:27:ac:
cb:8a:68:00:62:50:d9:20:b1:06:6f:7c:50:7d:18:
10:c4:f4:d8:df:3d:db:9b:99:48:bc:91:de:0d:08:
10:3d:f0:90:b9:0c:e6:8e:1d:c7:a2:8f:6f:f1:28:
95:dc:53:cd:c3:8b:ff:6c:94:3b:3d:e6:3e:cb:ee:
46:b2:31:ad:be:a7:f2:4d:bb:91:81:81:7a:de:ff:
1e:30:b8:4a:55:1c:63:ad:a9:5a:51:bd:02:b7:fe:
09:f3:5e:8a:bd:9d:90:aa:99:62:6d:62:ac:78:8a:
c9:af:fe:fe:d3:9b:e9:c2:dc:3c:ee:da:39:4f:fe:
4b:ef:95:5b:6f:f4:b9:9a:fc:c3:f5:7a:ab:73:f3:
8f:12:a7:53:98:77:9b:75:6f:c3:77:1c:81:10:ba:
83:0f:ba:8a:20:33:88:a2:de:94:6d:bc:8b:1b:4f:
88:7d:7c:f6:18:be:2d:83:a6:0e:9b:2a:98:58:75:
bb:0c:70:35:89:c8:ad:aa:67:f7:ee:c1:80:f3:11:
df:28:09:d2:98:56:83:d0:b4:63:c4:cd:70:19:36:
dc:d0:49:2a:95:7b:40:05:37:7e:46:4d:eb:17:a8:
36:90:f9:27:5d:2b:e6:65:6b:c2:3d:13:9f:42:f2:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:20:76:47:60:B6:EF:15:FD:FF:88:01:0E:7D:75:B0:BA:08:0A:3B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2CB2R2C27xX9_4gBDn11sLoICjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5e:74:a7:bd:18:56:c5:ab:c6:07:5b:18:b1:c1:e4:b0:dc:
08:dd:a6:0f:ae:18:a1:10:f0:28:d4:76:0a:85:55:d3:59:ca:
c8:cc:9d:79:e4:5a:52:a4:6c:e0:ed:7f:20:68:d0:d4:87:d8:
ca:7e:19:50:37:4a:60:fb:c5:63:6c:f4:7f:64:b6:dd:f0:5f:
db:22:cf:6d:9c:ad:46:bc:91:c6:55:28:51:af:91:27:0a:2c:
3e:72:94:fa:74:65:36:16:23:1e:5e:60:74:b4:69:0b:00:2b:
d7:64:f5:7c:2a:e9:cd:09:a6:6a:3f:5d:ff:01:bf:15:7f:c1:
90:43:d6:12:d1:aa:fb:a0:60:b3:42:00:d5:bd:ff:a0:a1:2c:
02:50:75:47:76:cd:5f:5a:26:0c:4b:e4:6a:ad:2a:67:f5:40:
ac:3d:1a:9d:9b:0e:82:e6:56:69:d4:e5:27:11:00:b1:97:bd:
5c:8d:c8:2e:50:6e:2a:04:54:3d:bd:42:c7:9e:de:7c:e8:5e:
c7:8c:9b:a7:5a:69:fb:8f:95:eb:81:1f:6f:ee:87:0c:e0:86:
e3:c5:26:d4:83:ab:45:b8:05:2b:2a:ca:8d:e8:21:0b:8b:a7:
3d:4d:5a:5e:2f:ce:1f:25:37:ff:e2:eb:59:be:5f:98:ef:71:
a8:48:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:20:42 2025 by rpki-client