Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/iA54OTeb5FFDiWsExTHLK_FYTdk.roa
File: iA54OTeb5FFDiWsExTHLK_FYTdk.roa (raw, json)
Hash identifier: Jdf30c1m27S+6jrnhsf1uLEfN8uOFsPfW9TEFJ09lqw=
Subject key identifier: 88:0E:78:39:37:9B:E4:51:43:89:6B:04:C5:31:CB:2B:F1:58:4D:D9
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A282617B0B111D4F2E24B9075D58C
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/iA54OTeb5FFDiWsExTHLK_FYTdk.roa
Signing time: Thu 02 Jan 2025 09:47:58 +0000
ROA not before: Thu 02 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 34
2a0e:3307::/33 maxlen: 33
Validation: Failed, certificate revoked on Sat 04 Jan 2025 15:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:28:26:17:b0:b1:11:d4:f2:e2:4b:90:75:d5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=880e7839379be45143896b04c531cb2bf1584dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:86:49:c2:eb:fb:31:55:9c:f7:61:5d:ec:
c2:7e:df:88:cb:be:27:de:66:cb:74:59:76:62:e6:
a5:c7:ce:87:3f:d7:5f:6f:0d:75:a4:fe:ad:24:05:
a3:57:c6:70:ff:0d:b3:7a:d9:a9:56:fd:bd:3e:c2:
94:21:68:99:1d:67:22:64:90:af:10:84:a1:2e:de:
d0:a9:91:d6:f4:49:15:dd:eb:dc:62:6f:bb:72:fe:
3e:5d:52:cd:3e:39:a4:2f:7f:ea:a4:10:4b:8f:e4:
49:cc:f6:75:2c:cc:79:bf:41:d7:e7:0b:f8:9d:0d:
a2:34:d9:a5:e4:01:6c:02:78:3f:ed:ac:1f:8a:7f:
a0:dd:89:88:a4:60:76:31:ad:0d:2b:5f:71:aa:26:
40:09:ae:18:b4:f5:61:03:c6:15:8b:52:a4:ae:bc:
11:90:0e:84:d6:39:3e:84:c4:6e:ce:f0:e6:0e:32:
e1:48:9e:98:d2:48:e0:14:65:d3:0a:c8:ee:c5:c1:
a4:70:1c:de:79:9c:83:33:74:66:fa:38:89:c0:3b:
b9:47:b9:c3:60:24:a9:ee:2c:93:c6:d8:b5:b8:6a:
16:c1:80:8d:8f:54:7c:40:1e:c6:3c:e4:4f:d2:70:
a5:a4:0c:fc:cb:5f:9b:c6:c5:07:49:fb:4f:63:e0:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:78:39:37:9B:E4:51:43:89:6B:04:C5:31:CB:2B:F1:58:4D:D9
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/iA54OTeb5FFDiWsExTHLK_FYTdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
64:6d:b8:05:d8:1f:34:99:0a:d3:91:3e:7c:de:8e:e6:66:8d:
7d:98:6c:04:2e:81:73:e5:97:6a:cb:9a:84:a2:ec:37:fd:05:
32:b1:47:ca:a9:f5:d4:eb:53:d7:7b:dd:04:c4:64:27:06:46:
94:0f:89:ce:35:11:ca:07:df:02:9f:64:ed:03:37:6a:19:fd:
d2:ef:10:65:8e:31:4a:cb:4f:e1:16:22:9e:0d:0b:2b:db:29:
44:94:89:e0:fb:cd:42:6f:b0:47:ec:17:d8:78:04:0e:40:03:
e9:fd:89:52:c9:b5:f9:39:e5:ee:ca:21:74:8f:0f:76:33:99:
47:26:a6:d8:97:06:f5:f2:01:39:ee:eb:f6:51:62:20:73:bc:
86:ad:a4:64:7c:df:9b:49:2f:f1:76:fe:11:a2:ee:c1:cb:f5:
1f:26:86:e2:16:42:32:ca:df:5c:53:af:e3:94:45:3f:03:df:
87:78:2d:99:f0:56:34:eb:eb:4f:46:5d:05:d2:59:99:1e:f9:
06:de:1e:d5:c2:57:76:53:e0:53:6b:18:18:35:61:48:18:e5:
91:1e:0c:29:25:fa:31:83:90:79:ac:64:68:d6:f6:24:70:dd:
5a:86:d7:9a:02:52:16:1f:fb:92:90:2e:32:df:2e:13:12:b6:
08:ae:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:38 2025 by rpki-client