Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IvPjCiso0pyCyBU_s6P-Gqs8w9M.roa
File: IvPjCiso0pyCyBU_s6P-Gqs8w9M.roa (raw, json)
Hash identifier: Os1cIYkJy1ssLkc555AboVUExjbZrwETjLPDvDawO5s=
Subject key identifier: 22:F3:E3:0A:2B:28:D2:9C:82:C8:15:3F:B3:A3:FE:1A:AB:3C:C3:D3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0196876255976C1D0236A544C204B241F02D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IvPjCiso0pyCyBU_s6P-Gqs8w9M.roa
Signing time: Wed 30 Apr 2025 15:48:10 +0000
ROA not before: Wed 30 Apr 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214447
IP address blocks: 188.132.212.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 15:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:62:55:97:6c:1d:02:36:a5:44:c2:04:b2:41:f0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 30 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22f3e30a2b28d29c82c8153fb3a3fe1aab3cc3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:b6:5d:70:54:01:c2:b1:e2:54:de:38:ba:
b2:e2:e4:17:81:d0:40:30:23:1b:f1:32:3a:a1:14:
83:cd:67:9e:32:16:db:c1:8a:59:ed:12:7e:43:a8:
14:f5:c5:de:ae:8f:62:b8:a8:46:30:bc:9f:bd:ba:
99:49:41:5d:a1:4c:03:aa:2a:c4:98:80:bf:35:77:
9a:30:ef:8a:dd:91:b8:01:fc:83:f7:46:40:a9:f8:
7c:0a:71:06:51:cf:16:5a:b4:27:25:45:2a:46:f5:
44:87:1a:27:5d:08:c4:d5:aa:8c:2a:4f:33:10:09:
c8:bd:56:34:58:23:10:1a:d2:04:aa:9b:bf:26:78:
4b:c4:78:ae:df:7b:c8:3b:1d:df:d5:ec:c6:0a:90:
f7:f2:d1:a3:12:a3:f2:d0:51:9f:e2:0c:45:94:8c:
df:af:f3:6a:57:17:bd:7d:9f:d7:84:73:54:c9:9f:
63:b1:11:cb:40:aa:36:58:d1:cf:96:15:59:6d:34:
3b:37:f6:d7:64:66:a0:aa:6a:04:25:1c:77:ff:7b:
be:ba:9a:48:8f:80:4d:71:a1:35:56:57:64:b1:b6:
15:dc:6f:4c:21:21:d2:13:42:8e:66:84:c4:9d:ff:
b2:97:1c:f5:fc:41:f3:0f:4c:68:be:39:7b:5d:ce:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:E3:0A:2B:28:D2:9C:82:C8:15:3F:B3:A3:FE:1A:AB:3C:C3:D3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IvPjCiso0pyCyBU_s6P-Gqs8w9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.212.0/24
188.132.228.0/24
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
47:82:3e:e1:92:34:d1:cd:f4:a7:2b:ea:35:ab:79:1d:b6:05:
42:82:75:00:78:91:6d:71:14:aa:77:11:8e:59:29:64:99:34:
f1:d2:8f:41:2e:d9:34:7b:11:65:d8:98:c2:11:5c:a9:7a:af:
0d:20:59:f7:7b:86:77:d2:54:9f:11:dc:31:e4:e5:d0:89:02:
da:f7:0a:31:72:1b:21:d0:55:ae:38:9a:81:8b:d4:6c:c3:15:
4d:64:2c:91:07:1a:bb:eb:e3:af:41:6a:74:ab:bc:01:62:a7:
a7:2e:36:95:00:9b:d5:15:5a:3b:04:c3:f6:78:8b:9e:f5:b2:
a2:7d:58:34:55:13:30:d3:56:da:f8:3c:ba:26:b9:5c:f2:38:
94:8f:94:0c:91:64:fb:49:1d:9a:39:8e:a7:47:d1:d3:85:e0:
52:4d:95:f0:04:5d:3c:59:ba:e9:be:f3:0e:f0:35:47:e5:ae:
4a:64:9c:dd:74:30:fa:c6:c0:5b:1f:b5:b9:ca:aa:3e:0a:fb:
f5:63:3f:02:20:7a:7e:46:ec:b6:2e:e8:82:ad:95:c4:ed:11:
39:0d:b1:b8:c6:09:d6:e2:b9:f9:ae:79:95:cc:94:82:5b:f5:
5f:b7:2a:d9:df:d7:54:61:ab:76:03:59:86:34:40:c0:ce:38:
7e:87:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:54:16 2025 by rpki-client