Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/_nyt2lF-9ao0AlXpJs_1D7xe8lc.roa
File: _nyt2lF-9ao0AlXpJs_1D7xe8lc.roa (raw, json)
Hash identifier: n1CkieifMhh8Y917OMR2W5ViVvCUY1uFjImGTH2gy6M=
Subject key identifier: FE:7C:AD:DA:51:7E:F5:AA:34:02:55:E9:26:CF:F5:0F:BC:5E:F2:57
Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial: 0194206863DCF58285846E1A3C81586ECB77
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/_nyt2lF-9ao0AlXpJs_1D7xe8lc.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25070
IP address blocks: 88.135.188.0/24 maxlen: 24
109.197.33.0/24 maxlen: 24
109.197.34.0/24 maxlen: 24
109.197.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 11:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:dc:f5:82:85:84:6e:1a:3c:81:58:6e:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe7cadda517ef5aa340255e926cff50fbc5ef257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:6c:4e:8d:cb:22:ef:2e:6b:d3:06:3e:f2:
b5:c3:db:8d:a4:6e:9e:d3:f9:7b:75:c3:61:ef:b4:
8e:22:3a:4c:09:c2:c3:81:23:c5:49:43:d7:b4:8f:
d1:f7:fc:33:11:de:14:3c:fb:68:20:e9:35:04:ce:
89:55:42:6b:41:22:71:63:85:67:1a:7b:f0:52:de:
fe:38:e9:23:99:0e:c1:e9:9d:19:0d:91:18:4a:86:
f2:00:e4:51:7f:27:b3:b2:d9:a8:44:86:34:31:27:
01:f2:bc:8b:3c:1a:b7:00:a3:08:6a:a3:36:27:c6:
1e:57:b4:b3:a2:f6:03:49:1f:b5:e0:c3:c9:02:aa:
2a:9f:a2:48:9f:d2:ab:ab:d4:9d:24:f1:47:24:d3:
43:58:79:3e:bd:ed:fd:6c:50:fc:9f:25:ee:90:08:
96:4f:1f:fd:8c:df:be:4d:a2:35:7c:d2:b2:f5:6d:
40:1c:b1:0f:95:05:ad:95:72:c9:80:2a:7e:2b:4b:
12:c2:56:42:72:fd:22:39:2b:e1:ce:d3:f7:70:7b:
ca:6e:bc:66:a7:5d:79:76:97:27:93:40:45:89:62:
65:23:bb:bd:af:89:33:f5:ef:b4:ab:fd:65:9f:a8:
c4:bd:5c:62:68:9d:53:60:f3:a4:8e:2d:0c:73:34:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:AD:DA:51:7E:F5:AA:34:02:55:E9:26:CF:F5:0F:BC:5E:F2:57
X509v3 Authority Key Identifier:
keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/_nyt2lF-9ao0AlXpJs_1D7xe8lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.188.0/24
109.197.33.0-109.197.34.255
109.197.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b6:c7:24:eb:2c:dd:54:e3:c7:ea:c2:a1:a0:98:82:af:6c:
1b:8c:f3:37:16:64:1c:12:43:e2:67:5e:6d:9e:82:57:41:1c:
dc:76:de:1c:98:6c:7c:6d:e0:51:b8:cb:43:7f:e3:11:d9:bd:
9f:97:3e:18:b9:82:dd:b0:22:e1:ae:2e:62:92:35:d7:5f:1c:
53:38:37:80:e6:b6:99:68:62:4b:8b:30:be:75:94:fd:ea:59:
54:e9:1b:0b:a6:e9:0f:47:00:81:3b:54:cf:10:f5:c2:cf:44:
bb:91:37:ce:bb:7a:7e:62:7c:0e:f1:24:f8:d5:f4:2c:4b:d5:
61:72:e3:00:4f:ee:66:da:24:ec:64:4b:f3:60:e8:d5:19:6d:
cb:16:08:af:36:8d:ec:f2:64:64:06:07:ae:60:de:74:6b:ce:
0a:b7:3a:99:5e:4a:f4:57:b9:93:bc:62:c7:8d:23:ff:5c:79:
bd:2d:05:07:52:cb:01:1c:39:b1:09:c2:25:90:dd:5b:00:66:
61:d2:1c:ab:6c:85:f6:46:36:27:d7:4b:d8:55:26:fc:f9:cd:
10:fa:16:e9:34:c9:8b:85:b6:6d:33:c4:05:63:ea:c4:da:d4:
4a:fb:2c:8b:99:ac:6c:cb:8f:1b:41:22:0c:c7:f8:87:fa:0e:
33:fe:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:15:57 2025 by rpki-client