Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/COLnUzP0dJMtC4ck6ShEKr1j0_0.roa
File: COLnUzP0dJMtC4ck6ShEKr1j0_0.roa (raw, json)
Hash identifier: bbHC366oTWUgiT18KQFMr6cfTjt6JH6pr3BgiyQbTdQ=
Subject key identifier: 08:E2:E7:53:33:F4:74:93:2D:0B:87:24:E9:28:44:2A:BD:63:D3:FD
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01967B35DFE578011224586D11D10DCC3512
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/COLnUzP0dJMtC4ck6ShEKr1j0_0.roa
Signing time: Mon 28 Apr 2025 07:04:10 +0000
ROA not before: Mon 28 Apr 2025 07:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.240.0/22 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.196.0/22 maxlen: 24
213.18.208.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.224.0/20 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.35.0/24 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 06:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:35:df:e5:78:01:12:24:58:6d:11:d1:0d:cc:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 28 07:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e2e75333f474932d0b8724e928442abd63d3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:a3:7e:e8:d5:db:f2:78:73:b3:97:1b:4b:
7b:d0:b9:09:ba:c2:08:42:df:40:0d:1b:ee:f5:29:
e9:c3:88:39:96:74:97:61:7b:ad:d4:d2:96:d0:55:
e3:ad:77:03:17:cf:05:fe:53:cc:b4:3d:21:1b:f4:
52:c1:91:8e:9c:a3:04:c9:1e:f6:2d:dc:09:45:56:
72:cd:38:cb:fb:9b:25:48:10:2a:17:a0:30:65:07:
3d:b2:f8:db:07:f4:51:8a:82:e5:59:77:ce:07:aa:
8e:6c:73:10:88:d8:5c:27:bc:39:90:f8:24:53:a1:
37:f3:6a:58:9c:3e:df:d3:e3:ab:e5:93:e4:d8:4f:
02:d2:4c:f2:31:c9:ad:19:1e:47:f0:0e:40:a9:c1:
45:43:ec:97:1f:85:8f:7c:a3:f9:58:43:ee:ec:bc:
47:e0:f7:86:4a:6f:84:20:43:7d:23:b3:ec:2d:1a:
31:4f:03:97:2e:de:f5:78:fe:0e:7c:dd:ce:c9:8f:
42:13:79:12:e0:a5:fd:2c:81:8e:2c:3f:a9:2a:4a:
57:2e:7d:19:0b:f7:91:c2:f5:d9:b7:06:e2:81:5d:
da:87:36:eb:a0:6d:f0:ac:94:e2:c4:ed:b5:23:ee:
d8:81:ad:da:08:03:0e:7d:a0:20:c3:ac:68:66:2c:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E2:E7:53:33:F4:74:93:2D:0B:87:24:E9:28:44:2A:BD:63:D3:FD
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/COLnUzP0dJMtC4ck6ShEKr1j0_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
194.238.78.0/23
213.18.196.0/22
213.18.208.0/22
213.18.220.0-213.18.239.255
213.18.245.0/24
217.177.0.0/21
217.177.35.0/24
217.177.44.0-217.177.55.255
217.179.56.0/22
217.179.72.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
Signature Algorithm: sha256WithRSAEncryption
08:56:b0:1e:c2:35:b9:c7:95:ac:16:ba:fe:93:bb:67:93:bb:
8d:11:f4:9b:92:6f:f1:50:9e:b0:7b:3e:9b:58:36:ec:5c:5b:
af:46:a7:99:57:14:61:5e:66:59:3b:f8:90:ff:27:73:4d:47:
dd:ed:4c:7a:48:e9:f0:af:e9:20:d1:66:d5:fa:dc:fb:e1:5c:
aa:1c:c7:87:53:e1:c1:6b:15:ad:4f:6f:3d:61:8c:c1:69:8f:
9e:a3:ec:1b:f1:f9:b8:c0:68:d2:03:5d:64:6f:bd:24:95:0d:
ea:24:20:92:d7:be:60:e0:65:b0:9a:20:6b:95:3b:b8:ca:a0:
75:b8:98:ac:b4:96:95:7a:87:dd:61:45:51:0d:bd:ff:46:df:
5d:96:01:b2:54:14:09:47:f5:14:87:fd:4e:b1:d0:ce:e1:29:
0b:0c:76:a0:ef:62:3f:81:cd:ac:c9:9c:f5:de:b7:74:bd:59:
84:57:84:0a:d6:dd:0b:7a:18:0b:58:27:6f:a4:10:07:f3:6f:
e9:58:f5:af:a5:ca:da:17:23:07:96:c1:aa:57:b8:44:88:a9:
78:92:03:7c:9c:98:3e:22:30:f4:e5:02:04:ba:fc:b6:b6:35:
0c:14:9a:52:53:27:63:48:7c:bd:55:e6:c5:ec:e9:f5:c9:95:
a3:ca:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:27:01 2025 by rpki-client