Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7aP5c0wdkLuP2DOOcud5vc9AExY.roa
File: 7aP5c0wdkLuP2DOOcud5vc9AExY.roa (raw, json)
Hash identifier: kJUahD21TCn2THREY/CUiPzVjfbnyroTKYiQjg3SFSU=
Subject key identifier: ED:A3:F9:73:4C:1D:90:BB:8F:D8:33:8E:72:E7:79:BD:CF:40:13:16
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019392038C394A151D505E160FD7C1853BE1
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7aP5c0wdkLuP2DOOcud5vc9AExY.roa
Signing time: Wed 04 Dec 2024 14:12:06 +0000
ROA not before: Wed 04 Dec 2024 14:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57269
IP address blocks: 86.127.224.0/19 maxlen: 24
188.26.192.0/19 maxlen: 19
188.26.192.0/21 maxlen: 24
188.26.200.0/21 maxlen: 24
188.26.208.0/21 maxlen: 24
188.26.216.0/21 maxlen: 24
188.26.218.0/24 maxlen: 24
194.55.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:03:8c:39:4a:15:1d:50:5e:16:0f:d7:c1:85:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Dec 4 14:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eda3f9734c1d90bb8fd8338e72e779bdcf401316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:e4:6a:6c:7f:0c:33:28:59:35:ff:9a:e9:
83:8e:7c:91:8b:5b:21:8f:f2:56:95:e0:90:ce:b4:
3a:94:09:55:33:df:d5:f4:c4:09:b6:15:a1:87:e6:
de:f3:b3:75:5c:35:11:e2:0c:7a:c7:f3:ad:ff:6e:
d7:a1:41:f7:04:03:1a:c7:74:f2:a7:05:9a:0f:d8:
9b:91:43:d8:d8:78:16:8c:90:89:29:3c:30:c0:c6:
06:bc:92:fe:51:9c:74:74:8f:a7:f8:85:1a:9a:43:
06:d1:ff:ca:87:1a:33:85:e6:3a:91:aa:30:d3:3a:
4d:79:2c:2a:b1:3b:8f:e3:55:b1:8a:01:10:06:84:
69:65:99:7e:29:59:95:8e:85:61:d7:45:56:c7:79:
de:d3:43:7a:18:7b:9d:9d:af:23:c4:1b:99:51:d3:
ee:3b:73:04:bf:98:ad:b4:41:6b:77:da:45:0b:6d:
56:44:a6:02:12:e2:11:0a:d0:1d:e2:a0:c2:3d:78:
02:8c:37:d9:74:68:5e:ef:6d:16:e3:4e:d5:2e:a5:
b8:6e:21:c9:f3:b6:3f:e3:dd:cc:dc:2a:86:b6:df:
69:3e:8a:2d:a2:aa:eb:40:d5:20:1d:8c:b2:ae:ec:
a8:14:91:ec:83:fd:b5:e6:ae:f0:91:5b:37:e3:e7:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:F9:73:4C:1D:90:BB:8F:D8:33:8E:72:E7:79:BD:CF:40:13:16
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7aP5c0wdkLuP2DOOcud5vc9AExY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.127.224.0/19
188.26.192.0/19
194.55.169.0/24
Signature Algorithm: sha256WithRSAEncryption
51:83:22:96:01:8d:7b:4b:8f:94:9c:f1:0f:5e:33:ab:89:40:
2b:a3:76:d9:bd:ea:c1:34:50:73:f5:b4:28:42:81:e0:60:03:
84:4b:9d:dd:35:93:5b:05:14:14:bd:62:fd:4a:e7:70:80:04:
8f:3c:b4:f5:a7:ef:33:1e:cc:34:c4:3f:aa:d4:95:13:9d:b4:
b3:6a:cc:45:a3:eb:9b:b3:20:a6:32:17:33:65:1f:cf:77:63:
05:c2:6c:d3:3c:58:27:e9:7e:59:96:03:ab:03:a7:3c:e4:74:
bc:f2:01:48:17:c9:43:3d:58:8a:6f:8e:16:97:6c:44:a1:a5:
66:69:5b:77:c3:11:c6:f5:4b:8e:b8:37:31:b2:aa:0a:25:15:
44:5b:16:8b:70:d5:94:d6:0a:8c:2b:89:9a:07:c5:46:47:4a:
d5:50:de:c6:df:c5:71:4d:d9:5f:82:70:41:cb:0a:b5:28:fa:
fb:0e:d1:25:d2:49:32:c6:67:06:6d:06:a3:b6:e8:10:dd:c3:
68:62:32:f8:e9:b2:3e:49:52:2e:68:9e:03:46:c6:31:ca:e8:
d1:51:67:50:b2:1f:87:85:c3:d9:56:59:b7:9e:47:28:d8:54:
3f:0d:bc:61:8c:b3:e9:a6:4b:92:03:e8:78:de:82:6a:04:dc:
1f:ad:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:12:53 2025 by rpki-client