Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8EI17TPD0nI3UtKkum9kIClPLg.roa
File: k8EI17TPD0nI3UtKkum9kIClPLg.roa (raw, json)
Hash identifier: Z4enyqwIHbtgrBww6VzVz/R0SiAlvUNRyJfmFWwcW7I=
Subject key identifier: 93:C1:08:D7:B4:CF:0F:49:C8:DD:4B:4A:92:E9:BD:90:80:A5:3C:B8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194E0CE8E982A3431B10183972B56D9FBED
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8EI17TPD0nI3UtKkum9kIClPLg.roa
Signing time: Fri 07 Feb 2025 14:27:00 +0000
ROA not before: Fri 07 Feb 2025 14:27:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 07:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:ce:8e:98:2a:34:31:b1:01:83:97:2b:56:d9:fb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 7 14:27:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c108d7b4cf0f49c8dd4b4a92e9bd9080a53cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:52:4a:92:e4:27:18:20:86:38:01:71:30:
5d:90:b9:1c:14:c1:4c:5a:41:4d:29:8c:29:b2:12:
70:a8:fd:d7:22:aa:7a:54:50:4e:37:5a:4b:84:88:
a5:66:35:79:11:71:c6:21:38:fb:34:79:98:1e:03:
d0:b9:f7:11:5d:c3:21:16:db:29:32:65:8b:f4:20:
6c:89:b9:1d:1c:71:c6:2b:1c:d2:4b:60:2d:75:58:
c5:81:5b:12:a6:3a:ba:b2:98:ca:90:5e:6b:32:88:
b7:cb:55:fd:0e:48:fc:75:b4:27:2d:2c:db:0b:5a:
d5:9e:c5:44:48:6b:f2:b5:89:e2:9e:3b:73:41:b9:
8c:16:03:a2:73:5b:c1:81:a3:bf:75:ae:2f:b5:8b:
3c:0a:8b:e9:f6:06:aa:c9:7a:a3:4b:76:ef:8c:1a:
ab:64:a3:5d:4e:f5:ba:bc:01:67:c6:99:2c:96:dd:
32:c2:ec:3b:b3:64:8d:d1:e7:44:7f:96:0b:5d:5f:
13:e7:25:48:e8:31:f4:0b:72:40:fc:47:15:f0:e9:
04:21:3a:83:fe:ec:87:ac:34:56:78:38:6d:86:b0:
68:f5:f2:4b:c4:c6:47:e4:04:68:18:bc:d3:4e:d6:
36:be:e8:5c:4f:59:39:83:65:48:57:be:39:f3:39:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:08:D7:B4:CF:0F:49:C8:DD:4B:4A:92:E9:BD:90:80:A5:3C:B8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8EI17TPD0nI3UtKkum9kIClPLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
188.214.107.0/24
193.124.225.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7d:9d:77:89:04:98:8c:9c:9b:aa:ff:5f:0a:0b:dd:96:a6:
5e:d0:5a:4d:3a:d8:a4:36:e5:95:7c:24:07:f2:b7:a4:0b:13:
87:b3:f8:9c:45:36:7b:79:46:98:7f:e9:53:8f:bd:65:b0:ef:
5a:61:a2:12:64:39:c6:f2:1d:47:f7:d2:58:d0:1d:ef:eb:94:
c9:38:38:a7:8d:46:d0:83:55:03:50:3d:c4:5a:9c:b2:e8:b3:
98:e5:0b:46:77:3c:ac:af:78:c6:57:0a:51:ee:74:bb:7a:90:
8c:7b:53:57:b2:de:f9:4d:59:2f:0d:b0:00:61:3e:5d:27:2c:
ec:ca:e1:8d:09:5a:22:f4:7d:ed:a5:f6:75:c5:e9:b8:d5:b7:
3a:fe:b5:d9:77:99:7a:7c:13:05:ce:ef:a9:d6:9b:df:79:15:
5a:fc:71:a2:50:f0:b8:b9:08:73:e2:0c:fd:90:4f:38:a0:70:
b7:cf:90:7b:64:2e:03:f3:17:79:85:68:49:8d:5d:ae:6a:d4:
32:a4:57:6b:e9:81:81:c6:82:ff:4d:7b:60:b8:77:9d:cb:2a:
90:85:91:93:da:d4:02:6e:d2:92:b8:92:51:8e:3f:92:2a:07:
78:1e:bf:1e:82:ff:97:9a:fe:a1:ee:35:7f:22:c6:96:95:c8:
66:eb:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:08 2025 by rpki-client