Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/9y6LZjFwfSoaqNRT2uqBoPJcvVY.roa
File: 9y6LZjFwfSoaqNRT2uqBoPJcvVY.roa (raw, json)
Hash identifier: uAmzZvl864RqOnfyS3++PEw32TTeE1zwbdmu/WZcxpw=
Subject key identifier: F7:2E:8B:66:31:70:7D:2A:1A:A8:D4:53:DA:EA:81:A0:F2:5C:BD:56
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019420D59C5C7D628A031E386014A4247745
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/9y6LZjFwfSoaqNRT2uqBoPJcvVY.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42130
IP address blocks: 93.88.20.0/22 maxlen: 22
93.88.20.0/23 maxlen: 23
93.88.22.0/23 maxlen: 23
185.207.174.0/24 maxlen: 24
195.245.72.0/24 maxlen: 24
195.245.88.0/24 maxlen: 24
2a13:b2c0::/32 maxlen: 32
2a13:b2c1:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Feb 2025 13:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9c:5c:7d:62:8a:03:1e:38:60:14:a4:24:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f72e8b6631707d2a1aa8d453daea81a0f25cbd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:db:60:17:20:fb:75:e1:ec:d2:c3:b8:d3:
d7:c1:5d:f0:32:39:c4:6d:cb:c6:0d:60:5b:de:a0:
ad:0e:70:f1:6f:3a:23:5e:2a:ac:58:b0:ab:5c:fe:
04:7b:d1:62:9e:8a:fe:e8:48:d9:38:9b:2b:4c:e8:
07:68:70:8a:01:db:5a:1c:36:b0:d2:24:24:67:e4:
25:c4:b4:6d:90:be:68:75:7e:74:a5:c9:80:cc:9a:
89:dd:8f:cf:52:f6:0a:6a:d5:50:d9:20:c0:05:f4:
17:37:78:78:b0:4a:a8:92:3b:a2:18:c1:59:ca:61:
00:f0:45:20:f3:ae:1f:ab:1d:04:c1:1e:d7:1c:8d:
1f:9b:e8:06:cc:9e:9b:54:04:8f:86:3e:b1:fa:74:
b0:63:2c:12:45:9d:d1:fe:8d:6a:98:08:01:41:9c:
76:f9:75:63:db:02:e3:5f:5d:e5:b2:a0:b1:81:5d:
c7:2d:ba:d1:5e:3f:37:9a:c3:e9:01:30:b5:c7:6c:
af:98:1f:9e:8e:de:db:00:9e:19:3b:14:b6:6c:78:
eb:64:9f:93:f6:c0:f9:65:94:08:2a:a2:44:77:c2:
a7:31:cd:1a:2e:3c:f4:c3:98:d2:bf:90:b8:5e:07:
8b:e7:7e:90:0b:96:64:f5:53:4c:4f:b4:cb:bb:19:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:8B:66:31:70:7D:2A:1A:A8:D4:53:DA:EA:81:A0:F2:5C:BD:56
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/9y6LZjFwfSoaqNRT2uqBoPJcvVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.20.0/22
185.207.174.0/24
195.245.72.0/24
195.245.88.0/24
IPv6:
2a13:b2c0::/32
2a13:b2c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
90:88:4c:bc:59:40:ab:2c:05:f8:d6:dc:ac:b9:37:47:bd:7f:
c6:6b:19:f9:36:8e:cd:8c:8c:81:c8:0c:56:d0:ae:33:c8:18:
95:4e:f4:9e:60:b4:79:d1:d3:0e:69:ea:88:3e:55:ec:b3:77:
45:49:d2:9a:00:75:7d:e4:1b:b0:a7:49:ca:ae:fc:19:ff:79:
e1:a6:10:5a:de:93:ae:36:26:15:4f:59:a1:a7:db:f3:37:20:
3d:b5:92:e9:3f:af:06:18:2e:15:78:53:55:4c:f6:2f:7d:97:
af:89:b6:eb:ea:90:3c:c0:d1:3f:f8:e6:71:b2:17:89:14:46:
28:f5:43:58:65:e9:53:9a:ee:3a:74:9d:8e:36:7a:25:9c:fd:
f9:48:77:9f:31:31:48:fb:98:04:33:bc:27:35:e3:8b:eb:7e:
50:3b:7a:9a:b3:b4:81:54:c9:4a:ba:e9:fd:b2:64:95:ab:51:
a5:07:26:df:6b:ce:0e:07:9d:4e:b0:29:6b:1a:7a:67:64:21:
eb:f2:42:b5:c7:cf:cc:5c:7f:3a:89:88:92:68:12:0d:b5:a1:
a6:04:09:d4:75:47:c8:c5:58:e3:bb:e6:e4:c0:0e:ba:89:35:
9c:18:65:99:bc:51:7a:6e:65:10:3f:af:05:52:c6:3a:dd:8d:
36:6d:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:52 2025 by rpki-client