Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/P2CgegdAC97NYVlKTlWSyb2UKjI.roa
File: P2CgegdAC97NYVlKTlWSyb2UKjI.roa (raw, json)
Hash identifier: 071KFZiFldvzWSF1ZhPg1UUDlqmsWRKeBZCsC2rCiGc=
Subject key identifier: 3F:60:A0:7A:07:40:0B:DE:CD:61:59:4A:4E:55:92:C9:BD:94:2A:32
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 0194228DF4772B4A588DDDB18E7E4CE902CA
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/P2CgegdAC97NYVlKTlWSyb2UKjI.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212496
IP address blocks: 141.98.184.0/22 maxlen: 22
193.169.194.0/23 maxlen: 23
194.9.118.0/24 maxlen: 24
2a13:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Jan 2025 15:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f4:77:2b:4a:58:8d:dd:b1:8e:7e:4c:e9:02:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f60a07a07400bdecd61594a4e5592c9bd942a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:b1:4f:a0:e0:23:bd:99:99:b7:e9:21:d9:
92:2a:75:4a:1a:26:c4:d1:d9:fc:e0:c7:89:e7:af:
9e:68:61:de:70:c6:21:56:78:ab:9d:b4:f2:09:3f:
3e:ee:00:af:a6:56:83:fe:af:36:6b:ce:71:ea:52:
93:af:cf:0a:fd:c7:06:eb:0b:c5:5a:03:42:17:b3:
ff:a1:05:47:c2:ce:3a:bc:c6:9c:17:84:e6:28:99:
46:84:0f:65:3c:64:cd:39:17:24:27:08:cf:f5:b3:
4b:08:df:69:07:6c:95:7c:89:30:d6:1d:59:89:84:
ed:72:1c:5d:9e:30:f7:c5:a2:47:5b:40:24:b8:ff:
0e:d2:44:d4:c3:ed:fc:c7:9e:d3:b8:9e:5d:c2:a7:
5f:eb:77:28:6a:e6:92:99:d4:92:25:97:68:33:b3:
4f:08:fb:ac:c1:de:81:cd:0a:61:38:b7:91:ab:6e:
87:4d:4e:2c:12:76:98:87:8a:d7:65:f8:78:56:c9:
8f:62:65:bb:40:e6:a5:ea:51:7f:76:e2:46:b3:77:
75:d7:fe:2d:b6:37:08:0b:19:af:c0:e5:ad:c2:ab:
24:23:84:73:f0:eb:e2:79:3f:00:77:2e:91:90:72:
21:8a:0a:3a:bd:35:22:04:05:c1:e0:8c:0b:c2:a1:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:A0:7A:07:40:0B:DE:CD:61:59:4A:4E:55:92:C9:BD:94:2A:32
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/P2CgegdAC97NYVlKTlWSyb2UKjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.184.0/22
193.169.194.0/23
194.9.118.0/24
IPv6:
2a13:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
54:33:ac:a6:1e:3b:a9:0f:8e:40:db:ea:a4:f5:ec:7e:d7:3e:
2d:3d:09:67:39:50:2c:f7:5d:26:6c:66:8c:b2:3c:43:67:4b:
27:fb:3c:32:d8:6a:b2:3f:b4:54:cb:c5:76:46:2e:04:5f:1c:
c4:7c:ce:ce:4d:f5:ef:f7:fe:e9:9c:96:d0:92:da:f8:68:d0:
06:28:47:1e:0e:81:8f:ca:82:f8:dc:c5:87:46:95:1c:b4:b6:
cb:da:7d:a5:56:05:b1:bd:0d:53:29:c0:44:46:e4:16:ea:d6:
84:83:98:88:72:98:84:df:5a:3a:6b:4a:b8:91:43:41:20:29:
de:3c:91:4f:4e:83:5d:af:87:47:ec:36:26:76:3b:7f:80:9e:
3e:ba:f1:65:11:24:aa:f0:48:49:01:73:57:d1:95:a4:cb:9b:
1b:8a:3a:e1:68:f0:f6:ca:52:d3:df:d7:c5:ac:5d:16:07:ef:
09:cc:05:fe:ca:10:65:88:e2:18:90:55:bc:f1:32:02:fe:67:
da:fe:f6:b8:2d:03:8e:33:ae:eb:c2:99:e3:78:b8:ad:aa:55:
28:2e:94:c3:97:95:6d:c7:27:ec:0a:03:7f:43:e5:79:93:d3:
ae:52:ca:60:68:cf:2b:fd:e7:67:b8:f3:61:c0:57:3a:89:8c:
3c:65:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 08:30:26 2025 by rpki-client