Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BrlqPQvY60qTmUVaHbmjV1_tjbM.roa
File: BrlqPQvY60qTmUVaHbmjV1_tjbM.roa (raw, json)
Hash identifier: /8QnnWd2LwRZorZNxanq1fTH0N4qnps1F2RkhSywdCg=
Subject key identifier: 06:B9:6A:3D:0B:D8:EB:4A:93:99:45:5A:1D:B9:A3:57:5F:ED:8D:B3
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019560D5CFFC85055265E87CD971129943AF
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BrlqPQvY60qTmUVaHbmjV1_tjbM.roa
Signing time: Tue 04 Mar 2025 11:06:19 +0000
ROA not before: Tue 04 Mar 2025 11:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11404
IP address blocks: 195.226.92.0/24 maxlen: 24
195.226.93.0/24 maxlen: 24
195.226.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 15:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:d5:cf:fc:85:05:52:65:e8:7c:d9:71:12:99:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Mar 4 11:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b96a3d0bd8eb4a9399455a1db9a3575fed8db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:e9:00:d1:cd:8f:d8:ea:4c:4d:c7:ea:d6:
13:23:58:76:97:83:95:7f:73:b0:73:51:a5:8b:3b:
cb:b3:77:5c:84:47:fe:4f:22:28:8b:9f:63:55:47:
a5:8d:f6:88:71:06:47:8b:70:87:c3:c2:e3:bf:16:
24:0c:fc:7a:5b:b7:9c:9e:28:dd:08:7e:f3:ab:a3:
7c:ee:9e:84:91:d7:bc:17:64:0e:e3:c1:0a:7c:62:
c8:89:a8:6b:6b:bd:30:e7:c1:a9:86:f7:57:c5:19:
67:cd:45:40:12:5f:86:85:99:67:8c:36:71:17:7b:
86:55:28:2e:34:96:ea:bc:d0:e5:44:c3:a6:c6:13:
e0:ee:56:40:5e:07:40:9f:13:4c:58:e7:98:7d:86:
9b:9b:b7:f8:4c:0d:ff:ca:06:c3:1b:43:81:50:99:
50:eb:af:3b:aa:f6:8f:2e:18:a6:93:f0:f6:65:74:
5a:66:9c:2f:1d:fa:b4:63:2c:25:eb:76:a0:08:eb:
f5:49:5b:ee:c2:4e:fa:8c:d3:73:d7:a4:99:3a:ad:
63:9a:b7:b7:bd:5c:0a:22:c3:39:41:9e:0e:b9:88:
34:37:2c:a5:4c:51:6b:4e:9d:b0:b0:20:8f:94:16:
34:80:ff:d7:9f:84:3c:de:f9:5b:2e:f3:df:86:de:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:6A:3D:0B:D8:EB:4A:93:99:45:5A:1D:B9:A3:57:5F:ED:8D:B3
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BrlqPQvY60qTmUVaHbmjV1_tjbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.92.0-195.226.94.255
Signature Algorithm: sha256WithRSAEncryption
09:99:8f:ef:12:af:78:59:35:7d:0b:21:a1:b7:25:d4:e2:fa:
59:ff:5d:e0:3a:2c:18:e4:83:60:70:3f:b0:eb:d8:4a:86:69:
2e:21:1b:66:69:08:1d:4a:13:98:a2:c5:be:95:69:a9:d2:68:
ff:85:52:8f:80:53:65:90:25:7a:8a:9f:7d:9b:97:59:0a:88:
15:5a:1c:92:53:66:a1:09:16:e3:47:32:07:22:95:88:f3:87:
a6:0e:80:cc:ac:ed:f7:ef:59:ae:c9:f2:eb:7b:ec:8d:c0:1c:
14:c0:39:9c:24:df:a4:e7:fb:01:97:a9:ff:d3:c0:81:57:f7:
57:e6:f4:1f:80:3a:29:bc:ee:80:ee:d2:36:2a:da:b6:e7:50:
4f:7b:6f:30:e0:6f:f7:f9:6b:28:dc:dc:78:ed:94:b2:ab:52:
c1:34:1a:30:a1:76:82:b5:34:8b:0f:dc:61:9e:9f:4d:da:43:
fc:a2:e3:16:a9:bf:64:2f:f0:7e:33:a5:c1:04:74:a2:11:88:
d4:f2:2c:44:7e:3d:90:b1:5b:84:a9:a1:b9:95:b1:24:61:37:
25:f6:40:af:5f:28:b0:8f:7c:d1:eb:b6:12:69:0e:3e:57:68:
37:7e:47:fc:0f:48:65:92:9c:3d:1f:0d:ae:2e:3e:b8:b8:d3:
d9:aa:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:39:38 2025 by rpki-client