Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/Ck-GJ6J2qNPotVzT8PRw1yGp6ZI.roa
File: Ck-GJ6J2qNPotVzT8PRw1yGp6ZI.roa (raw, json)
Hash identifier: rlbgL6sJbXv5Y7t4nUpdfEJ/MBzRVzMBS1YCE5tPAW8=
Subject key identifier: 0A:4F:86:27:A2:76:A8:D3:E8:B5:5C:D3:F0:F4:70:D7:21:A9:E9:92
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019570D1AEBA7810E2C2162DCED83D89FDEA
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/Ck-GJ6J2qNPotVzT8PRw1yGp6ZI.roa
Signing time: Fri 07 Mar 2025 13:35:44 +0000
ROA not before: Fri 07 Mar 2025 13:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 80.93.220.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
2a05:3040::/29 maxlen: 29
2a05:3040::/32 maxlen: 32
2a05:3041::/32 maxlen: 32
2a05:3042::/32 maxlen: 32
2a05:3043::/32 maxlen: 32
2a05:3044::/32 maxlen: 32
2a05:3045::/32 maxlen: 32
2a05:3046::/32 maxlen: 32
2a05:3047::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 07 Mar 2025 21:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:d1:ae:ba:78:10:e2:c2:16:2d:ce:d8:3d:89:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Mar 7 13:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4f8627a276a8d3e8b55cd3f0f470d721a9e992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:aa:fb:07:6e:e8:e5:f4:04:63:ef:de:24:
be:79:b3:c5:22:a6:61:df:a9:6a:06:8e:4b:13:c4:
68:bd:a7:c5:29:9b:74:13:be:23:18:06:7e:77:c7:
af:45:77:6d:cc:e7:86:22:00:10:c8:5f:ab:2b:eb:
24:fc:70:2f:fe:89:b7:6a:f0:00:cb:f8:df:c1:6a:
33:cb:a4:c0:ef:90:a4:99:95:1c:04:1f:f2:a9:1e:
aa:99:5f:41:12:da:bd:ba:57:f9:e7:d5:60:79:8b:
4f:8a:df:bc:24:d6:7d:9e:cc:8b:c1:2e:d0:23:d7:
e5:96:1c:f9:6d:92:40:ce:f7:a3:20:76:d2:6a:a3:
45:45:92:78:45:a4:b1:f1:8b:e2:4b:1e:75:17:2e:
37:14:d2:19:7c:89:53:7d:cb:4c:75:7c:6f:13:28:
c9:b4:2f:cb:db:83:f0:90:77:e8:55:dd:5b:e9:2a:
fe:c1:03:93:ae:8b:a6:ca:0e:06:5f:f6:ea:0b:91:
ee:e0:0e:f1:e6:bd:f8:f5:b3:8a:43:5a:a5:30:e5:
ae:b7:77:7e:eb:96:f6:a5:24:86:12:39:8d:c8:5b:
81:4f:ec:36:41:72:ba:3f:23:72:39:10:7f:c6:c8:
2a:49:3e:b8:28:61:60:2d:f4:81:95:ab:c6:fd:77:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:86:27:A2:76:A8:D3:E8:B5:5C:D3:F0:F4:70:D7:21:A9:E9:92
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/Ck-GJ6J2qNPotVzT8PRw1yGp6ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
IPv6:
2a05:3040::/29
Signature Algorithm: sha256WithRSAEncryption
3f:da:01:a5:1a:25:fb:76:57:7e:54:f1:48:6a:13:07:bf:35:
a3:8d:7f:80:c3:25:40:44:72:27:77:58:5c:91:cf:81:34:d2:
cd:b9:3d:e5:94:c3:c2:ca:39:ba:84:f0:c6:74:29:01:d0:e2:
99:b8:ec:9c:d8:20:d7:f4:20:1e:95:55:38:30:31:ad:24:cf:
94:80:14:69:b4:7c:6c:96:65:ca:da:dc:9b:1e:d3:6e:82:7a:
2e:07:ff:3a:df:8e:96:9f:0e:09:29:3d:f5:82:75:a6:a2:21:
9f:b9:8e:14:5e:ba:8a:dd:3c:99:cd:15:17:82:68:3a:29:29:
cd:51:f0:52:66:bd:68:b9:d2:0e:7e:f1:1b:6b:78:76:e0:3b:
82:96:b7:81:99:f7:c2:92:d5:7c:c2:8f:05:74:7b:90:e1:cb:
b5:47:c2:f2:0f:15:38:44:54:f5:da:93:af:39:2c:9d:fb:a8:
99:48:33:64:20:ea:24:0e:3d:21:34:e6:75:47:59:c3:32:3b:
62:23:77:ae:2c:76:f9:f4:26:c9:d1:76:00:32:67:34:64:40:
0c:ae:dc:89:82:00:54:34:5c:6c:fa:3e:7e:5a:31:54:63:da:
b0:7d:c4:f9:06:b5:83:27:aa:da:e7:09:d0:94:15:22:38:c3:
b7:f6:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:27 2025 by rpki-client