Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/BmadtmzFCyY-8kQUOu-zI1TDq3Y.roa
File: BmadtmzFCyY-8kQUOu-zI1TDq3Y.roa (raw, json)
Hash identifier: GFXSQ8rvzNEcsaSw3Mhl9r+m6F+5mnuNB3XgPJgoqMY=
Subject key identifier: 06:66:9D:B6:6C:C5:0B:26:3E:F2:44:14:3A:EF:B3:23:54:C3:AB:76
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0195281162472BC570ECA3A7F663363E3711
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/BmadtmzFCyY-8kQUOu-zI1TDq3Y.roa
Signing time: Fri 21 Feb 2025 10:33:02 +0000
ROA not before: Fri 21 Feb 2025 10:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210392
IP address blocks: 93.126.14.0/24 maxlen: 24
93.126.23.0/24 maxlen: 24
93.126.36.0/24 maxlen: 24
93.126.37.0/24 maxlen: 24
93.126.38.0/24 maxlen: 24
93.126.45.0/24 maxlen: 24
93.126.46.0/24 maxlen: 24
93.126.47.0/24 maxlen: 24
93.126.48.0/24 maxlen: 24
93.126.50.0/24 maxlen: 24
93.126.57.0/24 maxlen: 24
93.126.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 10:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:11:62:47:2b:c5:70:ec:a3:a7:f6:63:36:3e:37:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Feb 21 10:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06669db66cc50b263ef244143aefb32354c3ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:a9:f7:a3:f3:cb:92:40:8b:45:56:0e:60:
7a:87:28:ee:52:0a:0a:2b:d2:67:40:3b:56:e8:fe:
1e:3a:7b:d9:9b:5b:fb:1e:2c:35:fa:39:98:b8:ca:
43:04:91:38:4a:67:47:b4:6e:e2:b5:c6:da:df:59:
33:66:de:36:35:44:c2:ef:49:dd:f8:05:be:3c:6c:
d6:12:cb:b5:e6:fa:5c:d1:b8:6a:4a:7d:1d:65:7a:
0e:39:03:9b:35:76:48:cf:01:30:56:e1:5a:32:c5:
e8:0a:f3:d1:a2:c6:aa:55:ab:4d:2a:e6:5d:58:3d:
28:ec:3e:83:1e:f2:75:74:51:20:06:ef:dd:88:d5:
a2:3a:93:c7:31:3f:a1:76:48:73:c1:47:38:83:0e:
19:ed:98:27:aa:ee:83:52:47:95:29:b5:82:cb:02:
7c:c9:52:89:31:33:cf:80:43:52:da:e8:2f:a3:3d:
f6:dc:bf:f8:3d:1f:48:b1:c9:75:3c:d9:41:89:b2:
71:0e:3d:1f:0f:e8:8a:5d:21:c7:df:6d:d1:4b:77:
93:19:a9:0c:50:33:f8:d1:e9:90:ae:57:18:6c:63:
6b:44:0f:38:cc:58:b4:0e:24:7e:f6:82:a8:a3:e5:
68:db:67:1b:bd:b0:c5:15:5c:0e:47:5a:09:d6:c7:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:66:9D:B6:6C:C5:0B:26:3E:F2:44:14:3A:EF:B3:23:54:C3:AB:76
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/BmadtmzFCyY-8kQUOu-zI1TDq3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.14.0/24
93.126.23.0/24
93.126.36.0-93.126.38.255
93.126.45.0-93.126.48.255
93.126.50.0/24
93.126.57.0-93.126.58.255
Signature Algorithm: sha256WithRSAEncryption
44:30:b4:d9:41:b0:8e:69:3e:8a:90:66:c9:64:b4:fe:15:94:
b1:00:03:5c:26:26:68:fc:d7:11:51:6d:98:46:90:29:c3:e7:
f4:b0:b8:99:6f:08:ee:c5:8d:6c:4e:e3:1c:9e:be:11:ff:ad:
60:6a:4e:17:2b:fc:72:61:66:f4:64:dd:f7:ae:ee:5d:eb:69:
71:72:92:76:6f:2d:41:57:f6:71:ad:47:7d:39:e6:bc:0a:ae:
89:f5:41:05:af:65:5d:c6:d8:dc:32:fc:ef:21:63:77:80:c1:
ae:76:a4:6b:41:27:a4:7b:fe:04:f2:1e:2b:c8:ff:e6:9e:94:
d9:f1:43:0a:e3:d0:c8:ff:1b:80:35:14:dd:de:10:cb:6c:02:
ed:00:95:01:07:2b:86:30:55:6d:3f:db:6b:81:f1:ed:d1:23:
b2:98:98:1f:a5:e9:42:bf:7e:a5:cf:d6:85:e2:09:67:8b:8c:
90:76:d6:19:28:1f:05:4d:c0:c6:49:14:19:f2:74:fa:5f:eb:
d7:21:00:28:ce:9b:cd:33:46:10:8e:cc:b0:ce:fa:a1:15:f1:
e8:a9:39:59:da:77:3f:ec:33:8a:72:50:ef:85:eb:c5:66:e7:
83:fb:18:9a:a6:c2:4f:df:b2:45:9a:e0:64:cb:c6:89:a3:3f:
a8:e8:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:11:25 2025 by rpki-client