Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ESkzmlyohPPOz8q13_LubPQuvB4.roa
File: ESkzmlyohPPOz8q13_LubPQuvB4.roa (raw, json)
Hash identifier: lxhuve8pFJxtSoyjO4ji+4QB5VZXgcXDixzLQUiJhuY=
Subject key identifier: 11:29:33:9A:5C:A8:84:F3:CE:CF:CA:B5:DF:F2:EE:6C:F4:2E:BC:1E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0196A405862EB54ED892438C9613B2F40EF5
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ESkzmlyohPPOz8q13_LubPQuvB4.roa
Signing time: Tue 06 May 2025 05:15:47 +0000
ROA not before: Tue 06 May 2025 05:15:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.68.0/24 maxlen: 24
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 05:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:05:86:2e:b5:4e:d8:92:43:8c:96:13:b2:f4:0e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 6 05:15:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1129339a5ca884f3cecfcab5dff2ee6cf42ebc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:34:3f:68:d1:a1:0f:b5:6d:28:6d:98:96:
e8:24:1f:c0:2d:ae:9a:ca:92:f3:ed:c0:8e:e2:a0:
50:15:03:fe:fb:3f:53:11:23:34:3a:b5:14:b9:e5:
3a:ac:81:4d:a1:70:f5:78:a6:dd:44:38:05:77:40:
36:57:05:c7:e8:35:62:12:66:a3:a1:24:21:1e:4b:
b8:33:98:fa:d9:c1:29:eb:65:ba:90:c7:a5:be:c7:
33:c2:e0:46:75:90:65:de:cf:ca:92:9d:7e:e2:d0:
34:15:ea:90:c2:ce:df:d0:bb:80:85:3a:20:62:02:
31:58:84:58:ed:18:76:52:37:71:e9:5c:24:b6:18:
10:0a:b3:28:1b:8b:cc:c1:48:af:70:b0:e2:f8:a6:
be:b1:e3:40:f9:67:63:6a:84:05:42:a5:2f:2d:61:
68:89:36:c7:ec:8a:df:8e:28:e8:0f:83:a7:00:33:
0b:96:8a:97:88:ad:7e:bf:5c:cc:3f:80:d6:83:89:
56:8f:05:87:92:11:a2:5b:26:70:a0:f9:9d:f4:32:
ec:27:37:54:25:08:bd:50:58:14:92:9c:11:4f:32:
e5:3b:dd:41:2b:73:79:c7:67:9d:4f:24:ec:93:ba:
98:56:1d:75:74:14:bd:3b:76:91:6e:68:2c:81:c5:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:33:9A:5C:A8:84:F3:CE:CF:CA:B5:DF:F2:EE:6C:F4:2E:BC:1E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ESkzmlyohPPOz8q13_LubPQuvB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
9b:df:c8:fb:d1:c4:9a:e6:36:e5:14:9b:44:72:57:a7:fe:9b:
93:c3:bd:c2:03:0a:74:e9:c5:0c:aa:cd:18:b3:ec:28:d3:ce:
77:d2:7c:fe:81:2e:ab:0f:de:73:95:6f:b3:6f:22:db:85:3a:
d6:ec:11:65:50:91:57:5f:fe:cb:c8:1f:6b:ab:c6:11:f6:2c:
2e:f6:63:c6:ab:c8:da:2d:fd:dc:d4:e6:ef:6e:69:5c:74:a8:
3b:ae:ff:2a:17:9f:92:ef:d8:be:10:81:fc:33:8c:95:7d:07:
31:08:8a:0d:98:6a:ab:15:cf:7d:05:4e:2a:6d:86:af:83:b6:
65:d8:d7:4f:5b:45:ac:9f:84:ef:e1:a7:e9:08:91:46:93:64:
59:55:29:73:ed:be:fa:f3:38:19:cd:c9:ae:46:99:d1:f0:bd:
ee:9f:c1:25:73:59:3b:7e:5d:49:49:43:f7:a8:e0:18:2c:7e:
06:0a:53:fc:93:d2:6a:95:80:ce:52:73:06:05:9c:3b:11:3f:
90:49:08:08:4e:c0:9c:1a:e9:d8:15:77:2e:24:c8:98:b2:b6:
87:26:f1:d3:77:09:a6:93:76:5e:d5:3c:81:72:8f:58:84:b8:
63:15:ee:27:54:e6:18:10:0a:7a:1e:3b:37:91:d9:41:b1:81:
bd:eb:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:05:37 2025 by rpki-client