Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/O-ZxwY6B3UKmxP7s1JUmEy-HB1g.roa
File: O-ZxwY6B3UKmxP7s1JUmEy-HB1g.roa (raw, json)
Hash identifier: 7/kTpN+o+Mi8KREZhs1XHuo+feaQe6PBIvId0Ib9aeE=
Subject key identifier: 3B:E6:71:C1:8E:81:DD:42:A6:C4:FE:EC:D4:95:26:13:2F:87:07:58
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 01958491406E1496E5FF0652D009F09258A0
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/O-ZxwY6B3UKmxP7s1JUmEy-HB1g.roa
Signing time: Tue 11 Mar 2025 09:37:46 +0000
ROA not before: Tue 11 Mar 2025 09:37:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39900
IP address blocks: 86.54.24.0/24 maxlen: 24
86.54.25.0/24 maxlen: 24
86.54.26.0/24 maxlen: 24
141.98.184.0/22 maxlen: 22
194.9.118.0/24 maxlen: 24
2a13:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 13 Mar 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:91:40:6e:14:96:e5:ff:06:52:d0:09:f0:92:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Mar 11 09:37:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3be671c18e81dd42a6c4feecd49526132f870758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:a9:79:d5:3a:37:55:24:45:b4:54:d2:c1:
0f:3c:29:58:87:f1:b8:8f:ff:97:f8:ce:ee:f0:c2:
17:40:70:f1:ba:b5:1c:53:1c:46:e0:62:12:f1:aa:
67:13:39:89:5e:fa:44:17:33:b6:a4:4e:78:86:7c:
e6:dd:48:9b:0c:2e:33:6a:ef:e2:65:2f:e0:f0:8f:
4b:13:66:b6:19:dc:c9:00:17:70:d6:10:cf:f1:cf:
eb:d8:9a:4e:5f:3c:41:02:05:ec:ac:ee:7c:41:34:
c2:ef:d8:c7:d5:c9:26:a0:44:e0:79:f1:53:e8:c5:
16:b8:ad:16:6a:df:63:e7:cb:56:7a:55:8c:df:5a:
ba:b6:04:6a:51:0f:d0:08:0a:16:ee:3c:a0:8e:75:
27:f4:97:e5:ea:1b:61:11:ea:b7:72:38:d1:72:cd:
c2:26:dd:c3:fd:27:43:d0:f5:2d:d4:13:c5:92:56:
da:6f:f4:de:fb:f0:6e:8e:57:ec:f6:ff:e5:71:48:
b6:c4:bb:56:cf:09:6a:fe:0d:c5:3b:70:e6:06:62:
5e:be:34:d1:39:15:89:e4:2c:7d:4d:e0:91:67:a3:
3d:18:1f:f1:c3:32:68:88:98:88:e7:ca:4b:cc:19:
a9:17:6f:05:f6:19:46:6f:9b:fe:b3:fd:5e:c9:d6:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:71:C1:8E:81:DD:42:A6:C4:FE:EC:D4:95:26:13:2F:87:07:58
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/O-ZxwY6B3UKmxP7s1JUmEy-HB1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.24.0-86.54.26.255
141.98.184.0/22
194.9.118.0/24
IPv6:
2a13:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:75:ad:1c:4c:ad:b4:5e:cb:9d:79:3a:17:6a:2c:ff:f0:dd:
a4:ee:10:8c:90:3e:9a:bc:17:e3:e9:e8:99:fb:f1:8d:48:29:
f8:62:e1:a1:08:7a:e0:a9:70:5a:3d:de:06:38:b2:3c:c9:58:
9d:7b:2d:4a:b0:7a:d4:4e:46:f4:07:eb:09:92:4b:1f:12:3d:
83:91:19:d4:1c:1e:97:e4:13:3a:60:d4:02:1f:65:f8:5e:77:
ca:24:83:46:fe:cb:1e:41:73:4d:c0:f4:45:f9:a5:cf:b2:d2:
2b:99:0c:e0:54:8e:cf:8d:70:11:52:c6:b1:bd:c6:18:35:1c:
e7:c1:19:07:e3:c5:8f:f4:f1:e4:71:b2:59:43:ef:84:16:39:
0b:ec:e2:22:f4:6f:56:ac:15:e2:a7:9c:92:34:5d:2f:0d:84:
74:a2:fb:28:2e:4e:c9:b0:11:60:1b:e1:6d:84:de:b9:09:bc:
07:bd:af:28:1f:61:32:97:c1:2c:fa:0c:26:92:c9:3d:7b:c8:
f4:cc:7f:54:d5:1f:04:7a:7b:44:84:8e:94:c2:78:17:35:b2:
98:9a:ea:09:d0:9f:7f:43:b4:35:29:91:31:95:2b:e8:81:dd:
66:b0:20:50:72:1a:97:6f:c7:f7:0c:0e:fa:46:03:36:cd:04:
60:c4:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 08:24:04 2025 by rpki-client