Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/5me2j0Cyvarm8QY8x5YhzhlSSg0.roa
File: 5me2j0Cyvarm8QY8x5YhzhlSSg0.roa (raw, json)
Hash identifier: sKiJZe8RaefjgKohQbn9AZs+RGQ3H8yqOKmDOKion8I=
Subject key identifier: E6:67:B6:8F:40:B2:BD:AA:E6:F1:06:3C:C7:96:21:CE:19:52:4A:0D
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 01942369B704E9116D69C379747B02CFFE52
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/5me2j0Cyvarm8QY8x5YhzhlSSg0.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198363
IP address blocks: 176.103.248.0/21 maxlen: 21
176.103.248.0/24 maxlen: 24
176.103.249.0/24 maxlen: 24
176.103.250.0/24 maxlen: 24
176.103.251.0/24 maxlen: 24
176.103.252.0/24 maxlen: 24
176.103.253.0/24 maxlen: 24
176.103.254.0/24 maxlen: 24
176.103.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 11:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b7:04:e9:11:6d:69:c3:79:74:7b:02:cf:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e667b68f40b2bdaae6f1063cc79621ce19524a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:e7:b2:56:ff:e1:73:a3:d8:a6:8f:ec:9f:
e2:b5:93:88:97:a0:33:15:5b:5b:ea:cf:25:07:e9:
5f:89:09:7f:67:02:7e:14:d7:34:51:d3:60:71:45:
b1:36:19:26:95:ba:df:f8:62:01:1f:51:f6:56:43:
6d:f5:f9:8e:47:ba:1c:9c:27:5b:1a:f7:43:a7:98:
2b:b7:c0:dc:83:61:94:63:f0:99:e7:73:3c:1d:cd:
8b:ee:2d:ab:45:aa:bb:71:92:67:9a:e5:70:3b:b1:
36:5d:5e:0e:ad:cb:63:bf:f6:5c:f4:49:77:d6:64:
e9:40:4a:7d:10:f3:48:90:f6:28:71:6f:1d:1d:7b:
5d:97:3d:aa:a8:41:44:4b:34:96:ed:19:4d:ae:7b:
76:28:34:c0:de:b5:08:19:0c:f9:c5:c7:33:54:61:
ab:22:8f:1d:8a:7b:10:96:28:37:1b:c6:f9:72:0e:
7e:36:4e:b3:0d:f9:ac:ae:be:2e:ee:1a:c8:2e:4e:
90:24:84:34:67:20:60:a9:70:b7:0a:67:92:6b:ce:
32:47:87:e3:5c:35:89:55:17:15:02:b9:2b:6d:ad:
44:d2:62:87:ce:0a:a1:5a:71:cf:a0:b6:54:d1:e9:
b6:44:ef:44:39:77:4a:d9:ac:f2:f7:8a:db:c1:ca:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:67:B6:8F:40:B2:BD:AA:E6:F1:06:3C:C7:96:21:CE:19:52:4A:0D
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/5me2j0Cyvarm8QY8x5YhzhlSSg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:10:db:fd:ad:39:84:24:37:69:f4:c4:5c:6e:03:7a:76:b7:
4e:24:97:66:33:b9:dc:36:cd:ed:9a:27:ba:13:d3:08:4c:2c:
6e:42:17:f8:65:3d:90:ca:b0:d0:fe:d1:a8:c1:53:94:77:98:
97:50:4d:77:b6:6f:93:27:aa:c9:4d:25:24:4e:f4:e0:3d:9f:
e5:2e:33:95:06:64:a4:2c:9b:31:ab:a4:26:de:65:f8:3e:05:
d6:0d:2f:79:9b:db:6e:ac:86:64:bd:1f:0e:d2:1a:6b:98:09:
6f:c0:7f:d1:5d:55:98:0a:1e:ae:82:36:65:bb:c0:0c:29:22:
7c:1c:77:74:db:20:01:62:8a:78:71:8f:96:48:e8:d8:5e:4c:
59:bf:88:40:b6:64:23:00:52:43:2a:ef:0e:ec:d3:2a:3d:10:
2a:d8:8c:20:46:f5:c9:1d:57:dd:82:7a:97:89:55:0c:6a:87:
c6:a1:cf:67:e7:9b:dc:70:0c:d0:2d:52:e7:ff:ae:bf:97:59:
8b:f6:66:96:65:5e:1c:bc:eb:f2:4b:db:90:b1:b8:ef:5d:9f:
8f:73:6d:01:86:8d:08:d8:9a:db:7c:9a:5c:8e:62:9d:c1:a3:
a5:5c:03:da:9f:56:94:05:95:08:10:f1:9a:c2:52:a2:a7:ed:
34:fb:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:59 2025 by rpki-client