Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/FVMikT_UuXyyhVsVp4ORiuIQJjY.roa
File: FVMikT_UuXyyhVsVp4ORiuIQJjY.roa (raw, json)
Hash identifier: +GaIY8JC/SO9f9tYXAKPQu7QOaiPhg0hQgq4rUsDZoI=
Subject key identifier: 15:53:22:91:3F:D4:B9:7C:B2:85:5B:15:A7:83:91:8A:E2:10:26:36
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 0194206824B2305361A3D51E36422C822FE7
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/FVMikT_UuXyyhVsVp4ORiuIQJjY.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47523
IP address blocks: 93.174.248.0/24 maxlen: 24
93.174.249.0/24 maxlen: 24
93.174.250.0/24 maxlen: 24
93.174.251.0/24 maxlen: 24
93.174.252.0/24 maxlen: 24
93.174.253.0/24 maxlen: 24
93.174.254.0/24 maxlen: 24
93.174.255.0/24 maxlen: 24
2a03:8ac0:248::/48 maxlen: 48
2a03:8ac0:250::/48 maxlen: 48
2a03:8ac0:254::/48 maxlen: 48
2a03:8ac0:255::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 14:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:24:b2:30:53:61:a3:d5:1e:36:42:2c:82:2f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155322913fd4b97cb2855b15a783918ae2102636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:02:2e:84:a0:57:36:14:48:36:d1:32:7b:
44:49:fa:57:cf:a3:d2:f1:da:a7:02:93:27:2f:31:
49:5f:ce:4f:86:6c:2f:f4:49:f2:96:56:3e:6a:c2:
21:1e:88:b2:11:94:10:63:ca:6a:e1:db:64:a9:eb:
70:d8:88:e0:5f:e4:86:d0:64:08:37:f7:6c:24:e4:
ed:e8:1e:d8:5f:fe:5a:24:6c:a8:a9:1a:5e:13:42:
99:f9:48:9c:90:68:69:46:eb:b0:d1:76:09:77:1b:
60:79:33:fe:b5:74:da:84:a6:fd:7b:52:bb:80:d5:
d1:11:b6:c8:70:1f:76:2f:24:c5:6c:12:96:e2:23:
de:88:3b:8b:58:4b:c6:11:40:2f:f8:be:06:bc:d4:
89:d2:1c:ac:9c:0a:79:54:3a:28:74:7b:ef:35:f4:
2c:60:16:54:d1:36:3d:48:44:a4:d6:77:1c:f0:2f:
91:c7:a7:5e:49:67:43:2c:19:09:c0:8a:80:d4:7d:
78:1a:d7:a2:1e:67:84:6d:6c:20:56:86:c3:49:d5:
e2:6c:c3:68:5c:80:c5:2f:41:04:aa:ba:99:91:13:
e3:69:71:19:aa:24:c0:ef:71:fb:47:fc:46:d6:af:
52:be:d9:93:17:1c:ae:3a:fe:6c:88:bb:f7:93:d1:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:22:91:3F:D4:B9:7C:B2:85:5B:15:A7:83:91:8A:E2:10:26:36
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/FVMikT_UuXyyhVsVp4ORiuIQJjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.248.0/21
IPv6:
2a03:8ac0:248::/48
2a03:8ac0:250::/48
2a03:8ac0:254::/47
Signature Algorithm: sha256WithRSAEncryption
82:ae:6c:5a:ca:f8:38:33:ca:6b:23:8a:35:9a:9e:e0:ca:d5:
db:57:a8:96:32:6b:c6:42:4d:b6:ea:df:87:a4:fe:cd:55:0c:
f7:de:d2:0f:a0:09:d1:f2:4c:33:1e:76:3d:2f:05:0b:89:1d:
3d:d6:8c:32:45:7e:19:52:c8:90:29:6e:66:d0:25:32:6d:27:
63:aa:0a:d1:71:92:b1:fa:96:6a:6b:67:fb:53:90:09:f4:9b:
1a:01:0b:1a:3c:f5:8a:72:20:4b:2a:4e:e2:f4:1b:eb:59:2c:
2c:42:04:4a:7c:cc:53:e5:ca:75:7c:e3:9c:94:20:76:e7:dd:
f3:4d:93:04:15:d6:ca:b9:4f:0a:9d:de:ce:01:52:a9:bf:35:
ca:2d:ce:46:4a:45:05:c0:2e:99:05:14:3a:8a:ae:f3:88:97:
b5:55:b0:36:0d:17:a1:27:d4:f9:72:27:c0:fe:c0:d5:c9:34:
d1:75:74:55:3c:ec:20:b0:42:66:f3:b5:6a:c2:11:fb:38:22:
0d:06:5b:60:5c:8b:11:37:77:48:fe:60:fb:c3:3e:31:03:a7:
42:66:2e:eb:d0:c2:c5:01:37:24:19:c6:a7:b5:a4:eb:8c:62:
a1:8c:24:55:e7:34:c5:54:78:ef:9f:23:59:93:a8:95:c7:ba:
ad:2d:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:34 2025 by rpki-client