Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Sg-6ZynZKZBK3tJKklsCyAxER6M.roa
File: Sg-6ZynZKZBK3tJKklsCyAxER6M.roa (raw, json)
Hash identifier: 5MksA1uhQY0S/B5NEWIslXjOE6Zf11nuGFeNlTTFZUo=
Subject key identifier: 4A:0F:BA:67:29:D9:29:90:4A:DE:D2:4A:92:5B:02:C8:0C:44:47:A3
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01941FFAB79D30455AB62EB085912D707FC5
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Sg-6ZynZKZBK3tJKklsCyAxER6M.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.170.0/23 maxlen: 24
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 00:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:9d:30:45:5a:b6:2e:b0:85:91:2d:70:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a0fba6729d929904aded24a925b02c80c4447a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b1:c7:4d:50:a2:8d:61:7e:91:f9:08:3d:f1:
c0:4d:1c:06:aa:7f:f8:e9:59:40:b8:b4:8c:97:59:
0f:ef:22:78:94:4f:af:1d:af:c6:cd:32:ce:2d:48:
c3:9c:4d:fd:c4:90:fd:3b:f0:f9:02:89:cb:c3:e2:
2e:cc:c6:43:9e:f6:ce:3c:44:08:c3:8a:2e:20:4b:
92:d0:d4:f3:0a:f4:dc:75:fa:8f:02:b4:e7:f7:71:
8f:ef:fa:69:d6:ba:e5:98:25:79:d7:e7:5d:1a:d4:
d8:56:cf:05:52:5f:51:b5:3c:8c:3d:83:29:a4:03:
79:16:1b:ab:9a:3a:1b:71:ad:6a:0b:20:11:27:47:
40:70:d6:39:5e:93:d4:4b:fe:89:3a:92:ca:c9:d3:
11:c5:ea:ca:80:4a:6d:8c:a5:d7:24:88:57:3d:8a:
0d:1b:5a:6f:87:54:16:da:3d:ab:b3:38:5b:55:7d:
46:0b:3e:01:4a:96:58:4a:09:18:84:8a:19:ef:87:
6e:e2:fc:73:37:d4:9a:98:35:b2:b0:41:b0:3e:df:
8d:75:a7:83:d4:dc:2e:95:24:18:a6:8a:bf:e7:20:
16:07:1f:a4:1c:01:e5:b5:78:1e:52:34:73:95:5a:
a4:41:9e:f1:dd:50:d7:1b:31:d9:67:d4:cd:47:de:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:BA:67:29:D9:29:90:4A:DE:D2:4A:92:5B:02:C8:0C:44:47:A3
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Sg-6ZynZKZBK3tJKklsCyAxER6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.170.0/23
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
68:bc:cc:3d:f1:86:ee:38:26:04:89:c1:5c:77:3c:ad:73:d6:
24:03:2e:f1:72:e3:8c:a2:b1:1b:ee:72:c7:bc:47:5a:01:0e:
eb:ff:b8:6c:23:62:2b:a6:d1:a0:0e:b7:fd:63:ee:3e:78:00:
9a:bc:5b:d3:c1:94:75:12:c7:b1:c8:85:8c:b6:54:df:1d:a8:
72:bd:9a:15:fa:b3:df:78:29:eb:b5:6a:39:bd:0f:06:8d:b0:
59:9f:9e:0f:ea:61:4e:78:8e:15:a4:f1:65:b4:62:cd:4c:37:
af:01:8a:30:76:5f:4d:8c:51:76:f1:d3:4d:7f:20:36:0f:0c:
ae:cb:a8:54:f5:a6:a8:65:6d:99:11:7d:19:3a:74:ed:7e:7e:
b3:00:d6:9d:96:98:87:cc:92:08:80:9e:bc:dc:ee:65:32:93:
8e:53:23:d9:89:5d:30:21:4c:92:c7:60:56:a7:2f:c6:28:d4:
21:09:f7:fd:85:41:89:c3:8d:ff:36:b6:41:35:da:82:8c:ad:
2e:30:9d:87:13:62:9a:04:42:44:1c:3b:7f:17:68:b5:cf:f9:
01:00:e8:28:2e:f4:e5:d0:05:f8:0e:9c:a4:21:6c:5d:b9:3e:
9d:a2:c3:06:d4:7c:e2:b4:61:89:09:8e:d6:78:7c:6f:93:b5:
1f:92:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:20:05 2025 by rpki-client