Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/sCMSEPvnNFA8bp2iy7_o6hrlQ1w.roa
File: sCMSEPvnNFA8bp2iy7_o6hrlQ1w.roa (raw, json)
Hash identifier: L0wDVU/w+zUXlbDBuK4pDl1gFFwox5vlIyxKhZk4kuw=
Subject key identifier: B0:23:12:10:FB:E7:34:50:3C:6E:9D:A2:CB:BF:E8:EA:1A:E5:43:5C
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01939B298654C41285A009572FFC7AAAB038
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/sCMSEPvnNFA8bp2iy7_o6hrlQ1w.roa
Signing time: Fri 06 Dec 2024 08:50:09 +0000
ROA not before: Fri 06 Dec 2024 08:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25311
IP address blocks: 86.105.206.0/23 maxlen: 24
89.34.180.0/22 maxlen: 24
89.47.208.0/20 maxlen: 24
188.209.96.0/20 maxlen: 24
195.182.220.0/23 maxlen: 24
2a01:4700:8000::/33 maxlen: 48
2a03:9c20:2002::/48 maxlen: 56
2a03:9c20:3000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:29:86:54:c4:12:85:a0:09:57:2f:fc:7a:aa:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Dec 6 08:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0231210fbe734503c6e9da2cbbfe8ea1ae5435c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:95:ec:79:21:00:a5:58:8d:f8:d1:4d:f9:
7c:39:f9:44:b1:87:c4:29:29:88:d6:74:15:2c:de:
ab:20:ed:33:39:23:a5:44:dc:25:b1:cb:bb:0e:b0:
bc:d2:1b:49:74:c2:43:98:d5:eb:1d:a7:14:d0:13:
c3:54:7e:d4:55:fc:4d:24:97:82:c6:7c:76:71:5e:
4f:db:a1:5b:91:03:1d:70:f6:63:68:93:a0:28:c6:
a1:be:b7:21:77:69:8f:df:49:c6:c8:4c:2f:7e:b8:
74:99:59:15:5b:1c:9b:9f:73:da:4b:a7:fc:e7:f9:
55:56:43:1d:7e:06:4c:2f:19:b4:35:34:31:f0:ea:
24:01:b2:88:2f:ad:36:ef:5d:6d:a2:b3:c7:a2:09:
d8:59:51:de:67:a0:72:da:7a:87:77:d8:41:b4:75:
f5:1a:f4:50:6b:da:26:e0:82:61:1e:5e:db:08:13:
a7:88:ac:bc:e4:1a:79:72:6a:0a:b1:9d:5b:3b:2b:
48:0e:e9:d7:89:c1:3f:4e:ca:4d:bd:0d:9d:b5:f3:
99:fc:df:8a:66:67:ba:f4:60:48:e9:24:7f:53:ca:
9d:22:e5:15:01:38:8f:ec:46:6d:67:36:59:f3:d7:
e7:bd:e2:0b:d0:51:6a:bc:0b:08:b6:9e:52:33:79:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:23:12:10:FB:E7:34:50:3C:6E:9D:A2:CB:BF:E8:EA:1A:E5:43:5C
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/sCMSEPvnNFA8bp2iy7_o6hrlQ1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.206.0/23
89.34.180.0/22
89.47.208.0/20
188.209.96.0/20
195.182.220.0/23
IPv6:
2a01:4700:8000::/33
2a03:9c20:2002::/48
2a03:9c20:3000::/36
Signature Algorithm: sha256WithRSAEncryption
7c:99:f2:9d:da:85:99:74:14:f9:f3:cf:6f:5f:d6:5b:fa:fd:
a4:9c:e0:3e:6c:b4:85:6c:2c:13:d1:64:61:4a:58:1f:e7:de:
30:a3:ae:99:44:79:52:e7:31:03:fa:e6:18:50:30:2d:28:2c:
e1:0d:23:08:a6:f0:b4:80:a7:c9:a2:61:f5:2c:cc:6a:af:22:
ad:f1:e5:c4:3e:63:d2:d5:9b:92:a3:73:92:b9:53:c0:2f:25:
90:16:e8:5c:b9:9c:34:1f:0f:85:17:29:04:7a:1c:a0:fa:92:
8a:7e:23:89:4d:08:86:10:11:04:1f:2b:09:2b:44:8e:6f:51:
97:98:e0:6d:cf:d1:a2:b1:5d:5d:56:47:a6:f0:fb:b8:8c:e6:
fe:b6:b9:57:95:81:b4:1f:f7:e3:ad:53:1a:02:06:aa:66:61:
4e:dc:aa:4d:2e:ac:a5:77:d0:cd:29:82:4c:42:9c:5b:d5:72:
65:be:57:d0:7d:61:b8:3d:d3:d0:0a:57:06:b4:84:f7:3c:31:
20:fa:fe:d6:94:bc:33:35:ec:25:50:36:a4:6f:eb:f8:0c:03:
70:eb:50:6f:10:30:f5:cc:d4:ee:62:68:b9:ee:b9:a6:69:f6:
1a:a6:72:4f:df:6d:c9:0b:01:c2:20:91:65:c4:51:59:7b:ee:
6a:08:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:34 2025 by rpki-client