Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/smXa78WsoWmCd8T2kOnbEX0DCcU.roa
File: smXa78WsoWmCd8T2kOnbEX0DCcU.roa (raw, json)
Hash identifier: BbCgxaS9lY3xa2J6gy5MfzpEpBBnUZwOQpIMlHa9nGE=
Subject key identifier: B2:65:DA:EF:C5:AC:A1:69:82:77:C4:F6:90:E9:DB:11:7D:03:09:C5
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01942825A2713DD5156C2D4BC5FBE53EFE55
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/smXa78WsoWmCd8T2kOnbEX0DCcU.roa
Signing time: Thu 02 Jan 2025 17:52:22 +0000
ROA not before: Thu 02 Jan 2025 17:52:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40994
IP address blocks: 31.14.17.0/24 maxlen: 24
46.102.156.0/24 maxlen: 24
46.102.157.0/24 maxlen: 24
83.138.55.0/24 maxlen: 24
86.106.182.0/23 maxlen: 24
94.177.8.0/23 maxlen: 24
110.172.148.0/24 maxlen: 24
193.219.97.0/24 maxlen: 24
203.34.137.0/24 maxlen: 24
2a0d:f302::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Jan 2025 15:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a2:71:3d:d5:15:6c:2d:4b:c5:fb:e5:3e:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 2 17:52:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b265daefc5aca1698277c4f690e9db117d0309c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:fb:f2:1b:87:8a:9f:d7:7b:ee:68:ae:01:
4d:b3:f3:22:e1:2c:69:52:ca:1f:14:f9:2c:21:a8:
64:43:58:a8:89:b4:0f:87:14:a3:3d:d1:12:b6:94:
9d:85:2f:73:7b:cf:74:6e:0d:7e:0a:27:aa:bf:c1:
71:64:b5:0c:13:e7:d1:97:15:64:ec:58:cb:65:86:
a7:07:71:dc:f4:e8:8d:ca:eb:0c:54:03:b1:91:39:
58:28:1a:f2:bb:9e:1a:2c:50:06:54:c3:35:f8:5f:
c5:c3:13:91:dc:f5:85:a5:42:b9:65:b2:b3:81:9e:
25:24:68:ca:d9:e1:35:d1:e5:2c:44:3b:fe:c5:49:
9a:03:1e:36:3c:6f:74:dc:13:31:5b:d4:f5:0b:02:
8d:f9:90:5d:69:1b:68:18:e1:41:a2:e5:65:11:e4:
74:05:56:ac:25:48:02:ab:e4:69:df:13:6c:85:93:
4a:36:bf:90:36:bf:69:8f:ba:88:23:10:57:79:3d:
5d:e5:66:3a:cf:81:c6:99:a5:98:e0:ce:21:9c:7a:
a5:61:e5:4d:b1:61:bf:82:ad:1d:73:cd:47:2d:1e:
40:aa:07:2f:a8:bc:3f:9d:38:44:64:af:74:f9:db:
f2:42:37:f9:62:ce:4a:38:22:7b:4e:4c:1b:ae:d5:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:DA:EF:C5:AC:A1:69:82:77:C4:F6:90:E9:DB:11:7D:03:09:C5
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/smXa78WsoWmCd8T2kOnbEX0DCcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.17.0/24
46.102.156.0/23
83.138.55.0/24
86.106.182.0/23
94.177.8.0/23
110.172.148.0/24
193.219.97.0/24
203.34.137.0/24
IPv6:
2a0d:f302::/32
Signature Algorithm: sha256WithRSAEncryption
54:82:8a:b5:b8:50:4f:ed:b3:d4:02:9a:50:2b:68:6c:e8:f6:
1e:3e:48:39:72:ac:bf:88:e3:43:d7:00:09:07:9e:8a:24:54:
bc:9b:8e:b7:85:02:7a:0a:e3:e4:22:46:f0:1f:b5:d4:cd:84:
a5:6a:3a:9d:0e:8b:18:67:0f:80:57:9c:7b:20:04:f8:5e:31:
a4:7d:1c:c2:81:58:21:31:a3:f9:8a:9a:22:af:5f:ac:7e:cc:
0d:b5:e3:c3:35:ba:0d:70:79:ce:0d:78:b5:62:b4:c4:c9:e7:
14:8b:0f:f6:0e:fc:22:3f:a5:9a:20:8e:c2:a9:1b:04:92:c6:
01:cc:3b:d6:6b:9f:25:b2:f8:17:8e:78:e6:bb:5b:73:47:af:
c6:36:35:be:cb:3b:95:90:c5:48:b8:20:ba:43:dd:36:fd:70:
e7:80:8c:a4:00:94:df:cb:86:92:f1:0a:2b:e0:69:06:6e:ff:
40:76:3f:17:1b:9c:c5:23:45:16:fb:83:24:9c:dc:96:69:aa:
78:61:53:2e:cd:1c:5c:6c:2c:da:f5:4a:18:6e:2a:08:dc:e5:
81:36:8a:f0:46:da:30:4d:78:6f:20:07:30:7e:a8:d4:40:95:
f6:b4:42:1a:2e:b2:df:ff:24:bb:f5:8f:4c:3f:e0:d2:dc:00:
be:ae:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:12 2025 by rpki-client