Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/9Zt4_rkl_g5iyWN9-0XNUpPhd84.roa
File: 9Zt4_rkl_g5iyWN9-0XNUpPhd84.roa (raw, json)
Hash identifier: /b/9dwU8DdRkacInUdHCkhYm0CwFOHOe8Sr+Lbe7pj8=
Subject key identifier: F5:9B:78:FE:B9:25:FE:0E:62:C9:63:7D:FB:45:CD:52:93:E1:77:CE
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01908D6C885BE0FEB15F33D0BF18B88D8C64
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/9Zt4_rkl_g5iyWN9-0XNUpPhd84.roa
Signing time: Sun 07 Jul 2024 13:40:18 +0000
ROA not before: Sun 07 Jul 2024 13:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47330
IP address blocks: 37.156.28.0/23 maxlen: 23
92.114.16.0/22 maxlen: 22
92.114.20.0/24 maxlen: 24
188.213.65.0/24 maxlen: 24
188.213.66.0/24 maxlen: 24
188.213.67.0/24 maxlen: 24
188.213.68.0/24 maxlen: 24
188.213.69.0/24 maxlen: 24
2a00:5ca6::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 30 Dec 2024 11:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:6c:88:5b:e0:fe:b1:5f:33:d0:bf:18:b8:8d:8c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 7 13:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f59b78feb925fe0e62c9637dfb45cd5293e177ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:30:1c:f9:36:be:6e:1f:e1:20:5b:73:ee:
fa:1b:61:1c:5f:34:1f:d7:ae:59:f1:8a:38:ed:b1:
e6:9a:d9:9b:01:3a:4b:3a:6f:0f:41:bc:02:ec:a5:
92:fd:77:78:d0:d8:3e:d4:e6:58:db:a4:da:8c:5e:
de:a4:d0:51:f4:17:6c:8c:61:b8:82:b7:f9:1c:06:
f5:20:08:98:13:d5:4e:76:63:06:74:fd:36:17:47:
bc:64:cd:f9:ba:2a:f5:68:2f:80:46:4d:b8:6e:a3:
09:a9:94:2a:d1:30:9a:ba:0d:8c:fd:61:6b:5f:70:
92:a4:f5:b6:d5:ad:24:db:75:57:4a:35:b8:56:4a:
ac:d5:27:ce:f2:45:5a:d0:a3:b7:39:ee:ea:c5:e0:
31:b2:bf:c1:c3:71:bf:bf:a3:ee:3f:46:a7:13:c6:
fd:6a:37:60:67:3b:c9:19:dc:dd:03:de:5b:f5:85:
a4:cc:cd:79:7c:5d:25:87:13:84:2b:43:11:99:5f:
8d:07:05:50:e6:7d:ec:14:46:3c:77:9d:a0:f8:c2:
f9:ee:18:30:b4:8d:20:e7:06:25:59:d6:a6:1a:4f:
a9:01:0f:bd:ac:2c:20:77:43:6b:e6:e4:41:00:4e:
f6:ad:2f:78:60:a6:cf:77:52:7d:78:05:0b:73:18:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:78:FE:B9:25:FE:0E:62:C9:63:7D:FB:45:CD:52:93:E1:77:CE
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/9Zt4_rkl_g5iyWN9-0XNUpPhd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.28.0/23
92.114.16.0-92.114.20.255
188.213.65.0-188.213.69.255
IPv6:
2a00:5ca6::/31
Signature Algorithm: sha256WithRSAEncryption
51:2c:b4:01:ae:c2:f3:de:44:d1:7f:35:39:05:b8:2b:d6:35:
12:1a:62:4e:09:9d:03:a1:33:ad:88:9e:99:d1:4f:d1:c7:c4:
04:1c:66:cb:e8:92:c2:68:c6:1a:aa:cb:f2:ec:6b:3c:ed:1a:
da:fb:36:ab:2c:e6:2c:30:a8:c3:27:66:ab:76:43:88:0e:01:
8b:1a:b8:ab:14:46:2c:50:1a:ec:56:ee:ea:f9:fd:f4:dd:15:
d6:2c:96:e0:a2:f5:0b:8a:a3:49:88:44:47:ff:64:fd:b7:5b:
97:ad:17:a9:de:6f:1b:cd:29:76:a8:3e:34:9b:ee:f7:fe:cb:
bf:37:05:d2:30:90:8c:e4:f0:a8:9e:48:0c:b0:86:89:1a:5b:
a6:58:7a:a7:35:bd:4e:2f:50:80:76:71:99:d1:da:58:cd:a9:
1e:9b:97:6f:1f:02:95:8c:17:e3:01:f2:62:30:d0:00:08:b6:
8f:92:17:fa:14:27:8f:7f:84:31:bd:c7:c9:3f:99:19:f0:1b:
ad:1a:ee:6c:ee:70:db:51:3b:fd:63:a7:5d:54:6e:a7:76:3a:
a7:8f:4f:5a:bb:92:5c:39:32:ed:36:4a:d1:41:8a:fe:d7:7b:
c5:1a:ea:05:db:24:11:96:78:77:48:be:a8:0c:69:ae:27:dd:
52:c5:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:29:45 2025 by rpki-client