Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/_Y9Kih_SOBOWJveTwDSqi7xtAs8.roa
File: _Y9Kih_SOBOWJveTwDSqi7xtAs8.roa (raw, json)
Hash identifier: 55eT03GX6pmiLoYHdNbo+QUGGzVf83aIoSIhldz1NiI=
Subject key identifier: FD:8F:4A:8A:1F:D2:38:13:96:26:F7:93:C0:34:AA:8B:BC:6D:02:CF
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01966BC58AF1518F554C80459A8DE92773E2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/_Y9Kih_SOBOWJveTwDSqi7xtAs8.roa
Signing time: Fri 25 Apr 2025 07:07:10 +0000
ROA not before: Fri 25 Apr 2025 07:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.240.0/22 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.196.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.224.0/20 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 14:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:c5:8a:f1:51:8f:55:4c:80:45:9a:8d:e9:27:73:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 25 07:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8f4a8a1fd238139626f793c034aa8bbc6d02cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:37:ff:c6:f4:b1:eb:4c:0f:14:32:41:11:
48:61:4b:7f:91:10:7b:8b:02:90:76:26:d8:4b:b2:
11:8c:0c:74:9d:1a:8a:32:d7:a3:66:bb:3b:37:39:
dc:66:48:9e:7a:0b:82:71:23:53:54:b8:56:ef:f7:
fd:53:08:93:85:44:04:87:ec:4e:52:6a:d0:c7:17:
0f:93:87:43:05:ef:da:cc:cf:3a:5c:ef:53:1e:1a:
b4:35:42:5f:6c:93:e3:3d:30:48:a0:aa:8b:a1:42:
90:f2:60:9d:d3:67:e5:67:f1:ef:9d:92:45:d1:84:
f4:59:97:a2:ef:e2:5b:f6:3e:48:b6:24:94:17:81:
fe:8d:93:88:aa:b1:b7:4c:d4:44:e3:57:52:90:ec:
b8:8c:4b:f5:1c:53:40:08:53:4a:36:9c:d2:8c:9e:
49:0c:d5:b9:03:6e:02:cb:5d:4c:e9:06:ba:50:47:
70:a0:55:b5:f6:ec:98:91:1c:e2:1f:70:9e:b8:82:
f3:10:0d:06:21:c3:00:7f:bb:09:66:fc:2e:51:fc:
32:72:f5:b2:f4:36:55:63:e1:9d:e4:ec:17:98:64:
64:bb:ff:06:3c:af:ee:7e:f8:90:d4:fe:d6:30:a8:
c8:10:20:10:4d:27:29:a6:dc:4c:43:57:11:26:9f:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:4A:8A:1F:D2:38:13:96:26:F7:93:C0:34:AA:8B:BC:6D:02:CF
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/_Y9Kih_SOBOWJveTwDSqi7xtAs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
194.238.78.0/23
213.18.196.0/22
213.18.220.0-213.18.239.255
213.18.245.0/24
217.177.0.0/21
217.177.32.0/24
217.179.56.0/22
217.179.72.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
Signature Algorithm: sha256WithRSAEncryption
43:39:8b:60:66:fc:b9:0e:1a:d9:9a:29:a9:a0:8f:30:c2:6c:
66:f4:65:87:ab:f7:22:e1:9d:83:2f:b1:3b:f2:1f:55:c3:bb:
a7:6e:a6:5f:82:2c:8f:27:a2:cc:f6:ae:dc:df:72:67:95:6b:
35:66:53:47:e1:2c:af:e8:38:6c:fa:98:c7:14:d0:2e:3c:1f:
0d:be:8f:21:73:e9:46:30:be:bf:51:62:f9:6e:9e:5e:5a:b3:
4d:26:a4:5d:65:a2:8c:19:61:17:ef:d6:e0:cc:c3:ac:4e:65:
9d:63:83:d9:e6:9f:7e:d4:36:ff:7b:98:36:c5:99:c3:35:ef:
91:42:47:d0:7f:d9:1c:63:a9:4e:f6:90:13:8e:23:a6:2f:66:
0d:8a:79:80:84:e2:c0:2a:2a:52:2e:b3:5f:a4:36:49:fb:75:
58:22:02:2e:af:2b:dc:44:b4:de:5f:56:59:bd:31:5a:55:8d:
d6:45:f1:84:dd:9c:0a:dd:59:53:50:42:08:c9:d2:e3:7c:e3:
1e:8f:25:22:ca:d4:25:87:8b:93:47:a5:f1:18:b9:e8:53:41:
14:1b:0f:4e:64:65:2d:e0:1a:7b:47:ab:2c:95:54:45:06:a6:
8b:4f:be:e6:d3:14:27:17:76:81:6f:b0:98:32:63:92:02:92:
f0:4b:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:22 2025 by rpki-client