Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/vLDZxUalG5UDBFb2mT3YA5G5qRg.roa
File: vLDZxUalG5UDBFb2mT3YA5G5qRg.roa (raw, json)
Hash identifier: niP+x7M8NzLZ/XrDQkyFC6s7F4bZJ+CG/VXsc8VMuHY=
Subject key identifier: BC:B0:D9:C5:46:A5:1B:95:03:04:56:F6:99:3D:D8:03:91:B9:A9:18
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 018F711907AF6299D0AC3135362D06E8EA61
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/vLDZxUalG5UDBFb2mT3YA5G5qRg.roa
Signing time: Mon 13 May 2024 08:36:56 +0000
ROA not before: Mon 13 May 2024 08:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201565
IP address blocks: 89.35.206.0/24 maxlen: 24
89.35.207.0/24 maxlen: 24
94.176.184.0/24 maxlen: 24
94.176.185.0/24 maxlen: 24
185.11.232.0/22 maxlen: 22
185.59.96.0/22 maxlen: 22
185.91.148.0/24 maxlen: 24
185.91.149.0/24 maxlen: 24
185.91.150.0/24 maxlen: 24
185.91.151.0/24 maxlen: 24
2a03:7e40::/36 maxlen: 36
2a03:7e40:1000::/36 maxlen: 36
2a03:7e40:2000::/36 maxlen: 36
2a03:7e40:3000::/36 maxlen: 36
2a03:7e40:4000::/36 maxlen: 36
2a03:7e40:5000::/36 maxlen: 36
2a03:7e40:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jul 2024 16:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:19:07:af:62:99:d0:ac:31:35:36:2d:06:e8:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: May 13 08:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb0d9c546a51b95030456f6993dd80391b9a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:ea:58:3f:1d:f9:5d:e6:e2:65:2d:35:9b:
81:e6:9e:38:7b:db:19:cb:e5:96:70:a9:b6:89:fb:
18:9d:56:35:89:4b:c6:8b:71:5d:33:d7:a6:ce:75:
72:b5:b8:39:2b:13:07:63:ab:55:d4:54:11:43:88:
5d:9e:5a:6e:ed:06:40:40:31:05:7f:c9:64:af:6f:
5f:a6:bc:2e:d5:78:ca:41:30:79:60:8a:9a:a3:df:
5b:76:e3:30:dd:99:af:c5:48:ec:e4:77:89:38:b2:
1a:e4:8e:5c:78:27:e9:4a:0a:e5:21:45:ae:b5:eb:
fd:66:da:92:07:b2:fe:3e:c4:7f:62:ec:09:49:a5:
43:73:e8:8b:46:3d:db:43:62:86:f1:af:8e:a0:48:
e8:1a:29:6b:8f:39:c8:72:6b:91:ec:a8:52:c4:86:
3b:fe:be:a0:4f:7d:1d:b8:6e:13:3e:93:8e:4b:a2:
6a:c2:ee:c7:73:0c:73:80:02:5a:3e:dc:91:f5:44:
39:ca:49:5c:89:04:4c:4a:65:a8:d3:24:e2:d7:79:
d7:18:12:90:cc:b6:58:62:a5:a4:25:4e:f8:51:ba:
7d:0e:e4:4f:7f:ee:37:c9:ad:90:45:1e:85:81:0f:
1b:35:93:95:1f:f2:c4:83:f3:a5:71:d4:c3:15:e5:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:D9:C5:46:A5:1B:95:03:04:56:F6:99:3D:D8:03:91:B9:A9:18
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/vLDZxUalG5UDBFb2mT3YA5G5qRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.91.148.0/22
IPv6:
2a03:7e40::-2a03:7e40:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:49:92:69:5a:a7:b6:c2:e8:58:9b:7e:17:8d:0d:09:81:51:
68:d7:48:42:ff:4f:91:a8:2f:35:8b:89:e1:61:ec:c4:e4:db:
88:f7:ba:db:1d:f0:f1:35:56:d1:c0:c0:53:35:5a:90:ee:e8:
a3:00:5c:c0:c0:1e:ce:a1:e6:1f:1e:80:7f:9c:ae:0e:d8:1a:
8a:cf:23:c0:a1:b9:1f:f7:d8:26:44:0a:66:30:93:2f:42:54:
86:37:36:e8:46:70:b8:5a:06:19:d2:bc:51:78:06:9a:fb:0e:
75:f5:04:c5:0b:b3:31:f2:08:01:0f:98:db:80:e2:75:ab:ed:
ce:55:f7:b4:97:04:5e:df:46:b4:e9:a2:2f:30:27:f3:9a:f3:
8f:be:f1:a2:8c:25:a5:68:45:01:06:02:ff:19:f2:0f:3e:69:
4b:69:0a:8f:03:f2:26:cb:86:fd:40:a1:e1:c0:f1:6d:2d:56:
93:20:c3:1c:61:79:dd:a8:8f:55:a1:30:4d:53:3a:2b:83:ac:
dd:5e:d3:e6:d0:86:e7:24:27:dc:ca:d1:94:cf:69:f2:39:e9:
b1:ae:e9:b7:78:07:b7:af:f3:c1:24:82:d0:68:22:6b:8d:17:
ef:c4:55:22:7c:75:74:ee:00:83:c7:7c:a9:a9:86:a3:df:25:
d6:e5:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:29 2025 by rpki-client