Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/rSkoteSp59UXo4u92tVjxjKsahg.roa
File: rSkoteSp59UXo4u92tVjxjKsahg.roa (raw, json)
Hash identifier: 4cfta/LbcYClWxfFVQq5FPtoHI5a1RjdGnIdpXs521U=
Subject key identifier: AD:29:28:B5:E4:A9:E7:D5:17:A3:8B:BD:DA:D5:63:C6:32:AC:6A:18
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194FEAB3C8D4B8925C1112DBDE24F8AEACE
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/rSkoteSp59UXo4u92tVjxjKsahg.roa
Signing time: Thu 13 Feb 2025 09:37:02 +0000
ROA not before: Thu 13 Feb 2025 09:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 213.18.220.0/22 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.177.35.0/24 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 12:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:ab:3c:8d:4b:89:25:c1:11:2d:bd:e2:4f:8a:ea:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 13 09:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2928b5e4a9e7d517a38bbddad563c632ac6a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:64:ef:dc:5e:fa:d6:1f:e9:95:eb:fc:0e:
de:06:0a:7e:3f:aa:ae:f8:26:86:6e:e0:f7:b6:5b:
72:04:87:50:82:e7:d6:90:cc:2c:b0:12:a4:34:f4:
23:25:d2:22:8f:fd:46:fe:92:f3:f1:b1:db:92:b6:
e3:19:d9:bf:57:6b:f8:a6:66:48:6c:23:fb:14:1f:
9e:9b:be:ec:29:6b:f0:3b:fe:45:bf:90:9d:fa:77:
39:6c:9c:4f:85:5b:91:da:ed:8a:3b:89:f1:30:4c:
1e:a4:ac:b0:0c:2a:9d:fb:b3:9a:d8:25:f5:83:d4:
ab:48:cc:90:c5:b3:8f:78:55:76:ef:a3:11:fd:21:
ad:63:2e:9f:1f:5e:1d:66:ff:69:8d:10:cf:29:80:
fc:b6:18:08:5a:13:50:dc:92:ac:86:c6:a2:54:0e:
f5:6d:63:a8:10:b1:21:ec:be:39:a8:e9:ec:1a:fa:
77:9a:3a:ae:7f:f4:8d:94:38:25:04:dc:78:b4:61:
b6:ef:cd:2f:1f:ae:3a:ba:80:70:fe:15:6b:06:ae:
48:33:7f:53:8b:0e:5d:04:e4:ae:5f:3c:91:9a:5d:
e8:18:b5:1b:81:9d:ba:b7:49:e5:32:db:19:34:68:
c2:23:c9:61:a4:68:70:2b:47:7f:b9:ab:9d:a1:db:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:28:B5:E4:A9:E7:D5:17:A3:8B:BD:DA:D5:63:C6:32:AC:6A:18
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/rSkoteSp59UXo4u92tVjxjKsahg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.220.0/22
217.177.0.0/21
217.177.32.0/24
217.177.35.0/24
217.180.12.0/24
217.180.22.0/23
Signature Algorithm: sha256WithRSAEncryption
af:d7:e7:95:7a:f0:b4:ec:81:ab:4b:82:35:d2:99:be:cf:6a:
e6:0a:df:0b:7d:00:23:ca:31:1d:e8:e4:5a:29:df:ee:4d:d7:
47:ca:85:69:91:29:f1:38:c9:e1:5c:9c:21:3d:da:b8:17:6a:
a6:96:13:b9:75:4f:99:6f:ec:80:25:55:0b:7f:88:11:cd:e3:
13:2e:f5:d0:41:c7:5b:ef:54:f4:15:3f:4a:ef:ec:80:c8:f6:
b3:e6:ed:e3:c0:a7:33:78:b5:de:aa:72:24:ec:1b:2c:71:d8:
1f:6a:b1:c9:f8:9b:f9:b3:f4:25:38:c7:ef:76:00:5a:b4:31:
c3:90:33:3c:64:e4:54:03:8b:e8:e8:29:31:4d:d2:6a:5c:96:
87:6c:c2:70:0a:2a:66:53:6f:c4:04:19:3c:fc:70:88:d3:88:
06:b3:86:2c:f1:89:97:59:d1:31:0b:70:62:d4:14:98:cd:2b:
7c:e4:62:58:4a:ec:d6:f0:da:bd:fa:ee:52:69:05:28:55:4d:
c5:b4:e3:84:d9:7f:da:f6:6a:d5:ec:23:a4:df:30:c0:2a:cc:
60:6a:91:0e:37:50:ef:02:91:96:d0:14:c2:45:a2:3a:c6:a7:
57:a4:66:89:1f:50:dd:b2:87:75:2a:d2:6b:61:bd:d6:37:a5:
5a:1f:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:28 2025 by rpki-client