Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Cmf9RxXVbj1W_upe6IuVSwuAxKQ.roa
File: Cmf9RxXVbj1W_upe6IuVSwuAxKQ.roa (raw, json)
Hash identifier: rsOsAqqxDUPTEG53YtwuWDnU0k4Vab+UJYOi1M8uBcE=
Subject key identifier: 0A:67:FD:47:15:D5:6E:3D:56:FE:EA:5E:E8:8B:95:4B:0B:80:C4:A4
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0194222010BD21C1F6317CBF3B2F989A5FA0
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Cmf9RxXVbj1W_upe6IuVSwuAxKQ.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 148.253.239.0/24 maxlen: 24
148.253.240.0/24 maxlen: 24
148.253.241.0/24 maxlen: 24
148.253.242.0/24 maxlen: 24
148.253.243.0/24 maxlen: 24
148.253.249.0/24 maxlen: 24
148.253.250.0/24 maxlen: 24
151.249.90.0/24 maxlen: 24
151.249.91.0/24 maxlen: 24
163.171.77.0/24 maxlen: 24
163.171.90.0/24 maxlen: 24
163.171.91.0/24 maxlen: 24
163.171.246.0/24 maxlen: 24
163.171.247.0/24 maxlen: 24
163.171.251.0/24 maxlen: 24
163.171.253.0/24 maxlen: 24
163.171.254.0/24 maxlen: 24
185.27.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 08:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:10:bd:21:c1:f6:31:7c:bf:3b:2f:98:9a:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a67fd4715d56e3d56feea5ee88b954b0b80c4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:9b:8a:5b:b9:2d:3c:8a:5b:54:fb:5d:62:
c5:15:4e:f5:4d:e1:fa:6e:29:87:be:8d:33:8a:d5:
c1:85:8c:04:3a:0c:41:e4:80:ac:69:9c:2f:be:48:
87:5f:7e:f8:a5:dd:c2:99:e3:bc:9b:71:38:06:6f:
89:b7:7c:b1:18:0b:30:37:57:83:84:d1:99:fd:28:
3e:b9:ae:5f:6f:88:64:0a:75:27:a0:fd:b7:dc:95:
be:0e:01:04:31:f0:59:6d:91:a5:21:5f:a3:09:9f:
f8:a5:e4:7b:3c:5e:76:48:40:b7:fc:0c:e9:31:de:
bc:59:7a:b0:66:bb:5c:13:fb:5c:8a:59:ad:7b:2d:
cf:72:4c:75:72:22:2d:f7:e8:eb:c7:ef:af:e1:e3:
2a:2d:2d:04:d6:a2:51:bd:5e:03:a3:18:92:f8:96:
21:1a:e7:37:6a:48:91:85:93:e5:18:0b:95:4f:f9:
e8:29:ea:28:c9:f8:e6:49:1a:5f:ed:c8:04:f4:1d:
78:f7:18:79:43:f2:96:9d:24:fd:5e:a7:de:5d:b9:
ba:29:be:f6:97:23:aa:b3:bd:ea:5d:ba:7e:0d:57:
ff:c3:48:66:39:87:29:f0:a0:60:2d:0e:46:3b:13:
36:f6:45:50:e0:b8:3d:db:14:d5:4c:5a:bd:2d:40:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:67:FD:47:15:D5:6E:3D:56:FE:EA:5E:E8:8B:95:4B:0B:80:C4:A4
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Cmf9RxXVbj1W_upe6IuVSwuAxKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.239.0-148.253.243.255
148.253.249.0-148.253.250.255
151.249.90.0/23
163.171.77.0/24
163.171.90.0/23
163.171.246.0/23
163.171.251.0/24
163.171.253.0-163.171.254.255
185.27.228.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:11:7f:f8:bf:36:a2:b8:95:54:af:a5:83:b0:a1:4c:da:5e:
5d:17:7e:93:44:01:e8:c8:b3:5c:7f:0a:80:19:c3:7b:ac:31:
a9:ac:00:15:2d:3f:ca:ae:2c:47:e2:fc:7f:a8:c1:2f:97:3f:
0a:82:aa:5b:32:f2:86:ac:27:2d:c0:eb:c5:9a:d1:92:4f:f2:
0b:44:0f:44:37:73:66:ad:8c:58:37:b4:d2:7f:0b:b4:d0:8f:
9d:28:32:1a:a1:06:db:20:dc:67:a1:1d:2d:fe:36:95:23:cc:
be:65:6a:5d:c2:16:c7:86:c9:68:88:33:67:1f:f5:69:bd:4b:
c5:bc:94:75:e1:b1:83:a3:6e:e6:8f:49:c0:62:89:ee:ff:32:
0e:92:4f:66:34:07:29:49:e1:d1:ec:0a:05:6e:79:85:f5:cb:
72:7b:2c:e2:3b:21:3e:59:45:45:0a:cb:77:f0:50:a5:50:63:
cf:fc:6e:03:ce:7e:51:45:ad:06:1c:41:a3:be:38:52:3d:3b:
0d:d5:dd:b6:59:d3:80:41:73:38:91:2b:b0:66:72:b4:9a:cc:
03:76:69:61:0b:7d:24:86:ab:27:73:b3:e1:3d:7c:91:7b:ab:
e6:d5:74:25:d4:1e:cc:69:0d:fa:84:f8:fb:70:9b:23:37:af:
c4:f0:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:42:33 2025 by rpki-client