Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/k_x0c08uNPXr_HvXBwmntbOmMQg.roa
File: k_x0c08uNPXr_HvXBwmntbOmMQg.roa (raw, json)
Hash identifier: 4VJvWk4ioEKmA85Mx/KYQWZk46IAS/2fNXL0JAVNw/o=
Subject key identifier: 93:FC:74:73:4F:2E:34:F5:EB:FC:7B:D7:07:09:A7:B5:B3:A6:31:08
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019436FD0679C14B66634C267626CA5A959E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/k_x0c08uNPXr_HvXBwmntbOmMQg.roa
Signing time: Sun 05 Jan 2025 15:02:19 +0000
ROA not before: Sun 05 Jan 2025 15:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 93.190.12.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 14:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:fd:06:79:c1:4b:66:63:4c:26:76:26:ca:5a:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 5 15:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93fc74734f2e34f5ebfc7bd70709a7b5b3a63108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:db:a1:88:f9:57:c1:52:c9:de:64:39:e9:
e7:5f:71:16:95:c4:79:ab:72:04:0c:83:5c:52:ca:
aa:a3:cc:99:c6:f9:7a:09:44:ec:1f:56:1d:c1:59:
b4:11:46:7f:b4:2f:da:0a:c0:b1:0b:c8:ae:f6:e2:
e3:e3:0e:01:c9:02:e9:7d:9c:16:8c:4c:b8:cb:5a:
32:83:f0:88:8d:84:d2:af:ce:36:98:c5:15:3b:a9:
00:45:52:c3:0f:70:64:58:5a:d2:ae:a1:52:09:f2:
b9:8e:ab:51:fa:9c:71:1e:27:d4:cf:99:a7:07:e6:
cb:8c:76:f9:ef:7c:21:79:0c:23:28:b2:03:90:2d:
19:1d:79:39:b2:2b:76:fb:eb:57:73:f6:a7:11:1c:
aa:4d:14:a7:eb:67:ca:97:71:50:40:09:8b:52:ac:
c5:4b:63:b5:c4:d8:d0:51:24:31:14:6b:a4:52:45:
94:6c:4c:54:ac:6d:78:fa:9b:6c:a8:22:82:05:70:
82:13:76:3d:50:fa:6b:b8:3f:40:a8:6d:c8:cc:74:
16:f6:1e:71:b1:60:b1:64:bd:98:21:22:82:3c:e8:
80:f5:45:fc:0e:18:f2:b7:2e:5d:f6:7e:62:78:3a:
ec:46:b2:a0:07:29:a6:58:a3:a7:1f:83:b3:14:50:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:74:73:4F:2E:34:F5:EB:FC:7B:D7:07:09:A7:B5:B3:A6:31:08
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/k_x0c08uNPXr_HvXBwmntbOmMQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.12.0/24
109.236.51.0/24
160.20.109.0/24
185.86.6.0/24
185.243.181.0/24
185.254.28.0/23
185.254.239.0/24
193.35.152.0/24
193.160.143.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:07:49:4a:36:58:73:b2:44:5c:c9:13:71:f1:ec:25:88:08:
bc:2b:1f:d9:47:a3:bd:ed:cf:20:a4:15:e1:ee:e0:27:44:55:
24:82:53:15:1b:f8:55:06:5b:ed:6b:b8:15:5a:d7:62:89:ed:
93:44:9d:d9:58:e7:da:39:f3:9d:c3:8a:55:67:01:99:95:d3:
b5:86:71:df:5a:33:af:36:35:a5:4d:33:e5:db:22:7d:79:50:
d9:71:21:98:ca:2a:0b:cc:2a:97:7a:27:a1:94:ea:69:4c:05:
31:3c:71:d4:37:06:b3:67:99:2d:94:33:31:c1:e8:96:8e:8e:
ac:8b:42:bd:b3:6f:05:fa:9e:b5:30:85:f4:d1:a5:97:8d:c1:
c8:6b:24:55:37:0f:fa:69:04:67:59:1f:4b:b3:ae:fa:52:7b:
0a:4c:da:62:a6:46:87:38:89:7d:d2:8b:aa:19:50:ae:7c:a3:
3e:63:09:83:55:cb:46:ef:47:26:eb:09:da:31:0a:a4:68:1d:
2c:ba:5b:6d:2e:5f:a4:f7:f5:eb:a9:59:44:eb:e7:6f:3a:26:
6d:8d:19:3f:8a:ca:08:28:84:c5:b8:37:49:a9:14:1c:c1:01:
2d:3d:68:3c:e7:1c:c2:7b:bc:9b:ce:88:08:4d:41:d6:58:f1:
a5:19:aa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:21 2025 by rpki-client