Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/FfvEXRddcgOfB9zGf4KB7whnoug.roa
File: FfvEXRddcgOfB9zGf4KB7whnoug.roa (raw, json)
Hash identifier: ggjHSgHGhI/+MqeeqPp4ep2ZOjzf/Tc/cd9bOXPfSzE=
Subject key identifier: 15:FB:C4:5D:17:5D:72:03:9F:07:DC:C6:7F:82:81:EF:08:67:A2:E8
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0194274814CE2601E0CB70C463277A220595
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/FfvEXRddcgOfB9zGf4KB7whnoug.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57172
IP address blocks: 37.123.208.0/23 maxlen: 23
37.123.208.0/24 maxlen: 24
109.202.96.0/21 maxlen: 21
109.202.96.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.232.224.0/21 maxlen: 21
109.232.226.0/24 maxlen: 24
188.95.48.0/21 maxlen: 21
188.95.50.0/24 maxlen: 24
188.95.54.0/24 maxlen: 24
188.95.55.0/24 maxlen: 24
213.152.160.0/19 maxlen: 19
213.152.182.0/24 maxlen: 24
2a00:1678::/32 maxlen: 32
2a00:1678:be1::/48 maxlen: 48
2a00:1678:be2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 13:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:ce:26:01:e0:cb:70:c4:63:27:7a:22:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15fbc45d175d72039f07dcc67f8281ef0867a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:6c:d8:e8:76:42:7e:9d:e7:c6:d9:af:96:
f8:18:08:23:32:22:65:41:d2:4b:da:72:63:b7:e2:
27:7d:e1:88:67:61:e5:fa:63:43:a9:fa:ed:d1:41:
52:ca:c2:b5:28:04:5d:27:ec:1d:84:97:d3:93:e7:
51:e2:66:06:5b:ba:cb:96:6e:eb:b2:85:95:2a:67:
b9:86:c3:a4:08:61:0e:c8:1e:1b:98:2a:11:d8:d1:
aa:54:fb:09:47:9c:6c:60:78:3d:75:98:f1:f1:02:
5d:26:41:6a:ef:5f:ef:0a:f3:8c:86:1f:80:58:fe:
11:51:0e:9f:77:fb:dd:b3:dc:85:f7:11:82:0e:a6:
86:13:b0:d6:0f:f7:ed:c9:e1:91:f2:95:30:92:dd:
10:3f:c4:19:23:38:2d:87:00:3b:17:4f:33:45:ad:
91:43:35:38:fb:9b:30:6a:16:cf:5d:c1:3d:a0:08:
d1:f4:e2:46:cb:df:83:b2:06:7a:f3:92:40:4b:84:
fe:0b:49:c1:a6:8a:11:f7:2d:52:9c:00:58:e1:35:
81:ae:af:ed:4b:58:f5:54:2c:d3:6b:92:05:e2:06:
a8:b0:98:7d:16:28:b5:a6:89:38:fc:75:63:e3:53:
af:89:82:7a:eb:0a:fc:cd:0b:f2:8a:8d:18:17:8e:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:C4:5D:17:5D:72:03:9F:07:DC:C6:7F:82:81:EF:08:67:A2:E8
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/FfvEXRddcgOfB9zGf4KB7whnoug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/23
109.202.96.0/21
109.232.224.0/21
188.95.48.0/21
213.152.160.0/19
IPv6:
2a00:1678::/32
Signature Algorithm: sha256WithRSAEncryption
45:7a:59:40:84:71:17:3b:aa:f9:c8:e1:33:b1:24:39:28:9e:
1c:79:fc:f1:b7:a5:56:d2:28:3e:30:e5:cb:b1:70:92:2f:e6:
53:e2:ad:c3:9b:ae:66:49:aa:0f:71:13:30:36:1b:61:bf:16:
78:1c:c1:5d:f3:53:ab:d3:1d:29:96:b9:e6:bd:ee:75:24:c9:
36:8a:27:85:76:e0:59:69:09:d3:2d:91:7b:94:94:33:2b:6e:
11:35:92:1b:fa:5a:87:56:19:b7:35:fa:94:39:19:e1:ff:52:
93:50:ce:18:a7:f2:f8:a5:6f:3f:0c:99:4d:35:43:02:e4:02:
c8:dc:02:c1:04:9e:a3:b3:d5:9b:8e:d2:56:00:77:09:08:0e:
ae:17:96:b6:cc:35:c3:25:42:ac:5b:d6:71:46:0a:ef:42:b1:
a1:01:11:20:f7:d4:45:4c:ad:28:d8:5a:b0:0b:d2:d9:32:f0:
dd:3d:1f:b0:47:a4:0c:63:51:51:9e:86:ab:29:1f:32:50:66:
95:32:c0:04:4c:5f:98:07:96:d0:43:ab:d9:9f:b2:3c:09:42:
74:ec:56:83:9e:e6:86:bc:a1:0c:0f:bd:5f:6d:28:06:02:a0:
2f:05:a7:bf:f9:96:d4:8a:bb:e1:47:2f:f7:30:ec:b5:61:24:
73:0f:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:24 2025 by rpki-client