Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/m1kToLdFX9HmaRSLAcXpCFgxL-M.roa
File: m1kToLdFX9HmaRSLAcXpCFgxL-M.roa (raw, json)
Hash identifier: HRHH3l7k2vENip0Ba49ZMSj2kNiGox7AHDo87jzkwUs=
Subject key identifier: 9B:59:13:A0:B7:45:5F:D1:E6:69:14:8B:01:C5:E9:08:58:31:2F:E3
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019425211594389C247BDDC1BBCC3170B2F0
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/m1kToLdFX9HmaRSLAcXpCFgxL-M.roa
Signing time: Thu 02 Jan 2025 03:48:32 +0000
ROA not before: Thu 02 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8613
IP address blocks: 185.8.204.0/22 maxlen: 24
195.200.128.0/19 maxlen: 24
212.102.192.0/19 maxlen: 24
2a00:b300::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 15:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:15:94:38:9c:24:7b:dd:c1:bb:cc:31:70:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Jan 2 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5913a0b7455fd1e669148b01c5e90858312fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:02:6a:a5:70:43:d4:7b:39:7d:7c:ec:97:
f5:e4:97:3c:55:91:f0:6b:c6:99:a7:cc:9d:4d:98:
5c:77:28:10:58:41:6a:9e:d0:23:fd:d9:f7:57:9d:
ab:81:59:71:b4:ea:b3:a7:8b:47:fe:ae:63:3c:31:
be:b4:bd:82:37:fd:6c:e8:1f:2c:9f:8f:3d:08:8b:
ba:0a:56:59:68:16:ae:be:eb:3b:5a:f8:43:ec:71:
aa:a4:9d:28:07:c5:80:86:63:d4:c7:6a:73:97:29:
d4:11:12:9b:ba:84:4f:d3:a5:b2:f9:5c:15:15:e3:
be:2e:49:f0:e7:f1:72:21:eb:80:02:39:2a:39:df:
0c:ef:3c:11:28:0b:4b:ef:a0:23:6f:3b:43:cc:6a:
e4:a4:e4:24:e0:ae:88:bd:89:38:b6:0d:a5:16:5d:
7b:cf:55:b6:95:30:6b:fd:7e:a3:b3:18:16:45:ee:
83:92:3e:43:e8:49:bc:c7:88:29:39:6f:49:05:b2:
62:33:b2:45:fd:4d:7a:89:97:27:d9:2d:83:c5:ca:
4c:3a:2b:0b:95:67:f0:56:c1:b7:78:19:b9:fa:5c:
09:c4:28:49:9d:1c:3b:43:b7:12:06:6e:5d:9b:e9:
80:31:78:26:eb:97:66:a4:f6:41:ad:3d:25:f8:80:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:13:A0:B7:45:5F:D1:E6:69:14:8B:01:C5:E9:08:58:31:2F:E3
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/m1kToLdFX9HmaRSLAcXpCFgxL-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.204.0/22
195.200.128.0/19
212.102.192.0/19
IPv6:
2a00:b300::/29
Signature Algorithm: sha256WithRSAEncryption
34:03:61:84:19:87:db:cc:f4:5a:ce:fd:6e:63:47:1f:4b:51:
f5:3f:b5:21:24:a3:4b:52:41:2c:04:9f:f9:48:cd:06:5c:bf:
2e:d0:00:fa:4b:f4:0e:80:6a:3d:32:09:4d:01:e8:66:61:53:
ff:f3:6f:9a:a3:9e:3f:98:87:f4:4d:1e:c0:39:f9:7e:c3:17:
51:2f:42:a8:6c:af:4d:d8:ee:d9:bb:cd:5c:16:a7:9d:8e:82:
08:ce:5c:5c:f3:fa:2c:ca:01:08:1a:e1:52:67:87:f9:fd:a4:
4a:e2:1b:fb:4e:1e:df:6e:4c:e9:4d:69:04:30:e6:7d:93:a7:
0d:54:93:99:32:a7:af:16:d4:0b:ef:24:cd:8f:f9:29:15:66:
7f:43:8c:16:4d:ff:91:e5:f2:a7:6a:f0:57:9b:c7:4f:4d:db:
d3:ca:69:3a:f9:24:27:a7:c2:83:46:17:30:23:7b:38:61:33:
81:a8:05:a1:cd:c3:2f:4a:df:75:4a:e0:0b:15:d9:f4:e0:8d:
77:e7:37:d8:49:42:61:bf:db:ba:50:c2:bd:d1:23:ae:9f:43:
07:86:fc:a8:51:7f:bd:a4:d4:bf:3e:fe:83:6c:83:95:54:69:
e8:9a:fc:2e:55:af:99:e9:d0:04:8f:c8:4c:e1:8f:25:bf:84:
4f:99:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:10:12 2025 by rpki-client