Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FK4vsp_BfXfmB_E6kihnBeH2KSM.roa
File: FK4vsp_BfXfmB_E6kihnBeH2KSM.roa (raw, json)
Hash identifier: 8P/AE2l66e9n0oH5MF+3EcQHSP3bOs2Biv9hWgcgzWk=
Subject key identifier: 14:AE:2F:B2:9F:C1:7D:77:E6:07:F1:3A:92:28:67:05:E1:F6:29:23
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01956B8C003CC4273549AA4DE89E6A7144B8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FK4vsp_BfXfmB_E6kihnBeH2KSM.roa
Signing time: Thu 06 Mar 2025 13:01:31 +0000
ROA not before: Thu 06 Mar 2025 13:01:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 11:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:8c:00:3c:c4:27:35:49:aa:4d:e8:9e:6a:71:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 6 13:01:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14ae2fb29fc17d77e607f13a92286705e1f62923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:83:f0:e8:18:6d:2c:cf:9e:83:26:51:4d:
66:4e:21:fd:bf:df:22:4a:03:b4:db:87:2d:53:4a:
b8:c7:d0:ea:01:33:25:94:e5:03:1c:fc:31:c6:45:
d9:76:4d:95:f9:a0:e1:34:e1:bb:0b:17:74:40:1e:
9e:02:ec:a4:38:c1:63:a0:c8:91:b6:df:54:36:47:
b8:6a:be:54:fa:42:0c:19:d0:b3:be:ef:09:ee:21:
81:10:3e:8e:92:e8:91:e6:8a:e1:38:0f:d9:26:eb:
19:1b:7c:8f:24:ac:96:de:96:ea:ce:c1:f5:19:41:
61:26:8d:0f:3b:89:16:47:9f:b7:3e:b1:10:f7:58:
e4:cd:98:b2:bb:1c:ba:60:de:7b:2e:e3:88:7a:c9:
75:ef:64:11:02:e0:a9:f4:75:37:49:a2:e7:3a:46:
e4:8c:30:a9:12:27:e9:8c:9f:d5:26:0d:4b:b8:db:
0c:bd:f4:76:f4:83:15:74:45:c9:64:12:08:b6:2b:
bf:a6:c9:9e:6c:3f:1a:dd:b6:85:88:2a:2f:e3:38:
c8:92:8f:6d:e9:2e:9f:56:fe:08:44:e8:f9:8e:ff:
ce:86:86:f1:4d:c2:2a:f6:03:37:0a:85:3a:3f:d8:
9b:0c:6a:b5:50:5d:7f:68:b4:c9:57:1a:61:03:6c:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:2F:B2:9F:C1:7D:77:E6:07:F1:3A:92:28:67:05:E1:F6:29:23
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FK4vsp_BfXfmB_E6kihnBeH2KSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.188.0/23
188.132.191.0/24
188.132.236.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
17:b3:99:11:7c:a4:49:39:4b:19:41:a9:3b:ba:a2:71:af:e9:
16:7e:b1:e4:83:0d:fe:12:23:88:cd:d0:86:5b:44:20:0f:4d:
14:d4:c1:48:93:2e:1e:48:f9:7d:64:dd:20:fc:8a:1c:51:86:
bb:8c:2a:d7:97:2a:5e:f6:3a:bb:80:c5:dd:86:d8:ba:ed:52:
ab:c1:21:58:77:05:de:b6:ca:17:02:93:23:14:45:42:28:c8:
94:cc:c2:c6:1c:ef:d4:87:53:b1:46:76:5c:50:2d:50:f3:ba:
27:be:e1:06:27:ee:1d:41:22:53:0e:08:c9:fb:61:29:81:41:
4e:ab:6a:fe:20:48:85:73:f2:f1:1c:2f:c1:8f:7f:f5:6d:b2:
9f:d2:2a:dd:56:d2:4d:f1:8e:aa:c0:01:6a:c0:3a:62:15:24:
59:c7:07:82:fc:45:65:cc:0c:cf:67:0a:28:b2:9a:ca:7b:c6:
74:ce:30:91:fb:f5:e4:d3:bf:18:7c:02:ae:6c:9c:ac:c3:ef:
8b:73:f8:d4:88:27:a0:72:68:45:5d:7d:13:a9:eb:6e:e1:b7:
66:59:49:40:34:c0:a8:07:51:dc:13:9b:32:b8:05:b7:a1:0c:
18:ec:47:12:8e:5f:ce:9c:e6:b6:e6:1d:7b:0c:e7:a4:e8:e2:
85:dc:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:32 2025 by rpki-client