Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/kVtoaXgWTtWF89aeUTVuV7Z_5ac.roa
File: kVtoaXgWTtWF89aeUTVuV7Z_5ac.roa (raw, json)
Hash identifier: MtSMp0CITLYTU0XAvEo42swBxLHrdQXP4p/BP+NKex8=
Subject key identifier: 91:5B:68:69:78:16:4E:D5:85:F3:D6:9E:51:35:6E:57:B6:7F:E5:A7
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 018CC4924B773AE9A6F184BD191DE0FF3C24
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/kVtoaXgWTtWF89aeUTVuV7Z_5ac.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42637
IP address blocks: 86.106.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4b:77:3a:e9:a6:f1:84:bd:19:1d:e0:ff:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=915b686978164ed585f3d69e51356e57b67fe5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:06:45:15:60:3e:67:5c:a6:2d:f1:b7:86:
54:8b:ed:ee:81:07:a0:ab:d3:bd:ed:ae:b9:72:59:
0a:9d:da:39:69:78:d7:36:b4:7e:a4:95:5d:b0:b8:
4b:f3:a1:00:dc:f9:84:51:aa:4e:13:a6:3f:76:7b:
a3:ef:f4:47:92:44:ef:f4:2f:15:35:fd:f9:0b:81:
f7:8c:6f:c7:b4:8c:d9:5d:e7:b1:1b:36:ea:06:9f:
09:58:5e:8d:a1:16:f6:e8:01:33:f9:85:9c:c2:aa:
6c:ac:bc:26:4d:4c:ca:3c:cf:42:a0:4a:dd:a0:3e:
c6:43:0c:f1:01:c8:8e:3d:5f:90:52:f1:01:e9:4a:
bf:fc:7b:46:49:ba:f8:22:d2:fa:b7:2b:ba:98:5c:
db:7e:2f:9f:c1:56:02:a4:ab:db:f6:52:75:5e:45:
23:b5:47:25:13:47:e4:b7:a9:ab:cf:69:6c:d3:83:
da:6e:8a:7a:9f:9f:ac:ba:e7:20:88:f6:90:16:b3:
80:46:1d:2d:fa:1d:c8:2a:0c:10:9f:db:b1:70:e1:
54:12:b9:1c:3f:d4:23:a8:39:b7:56:be:de:90:a7:
d8:fc:6e:07:80:6b:24:c3:76:24:01:87:80:32:ff:
33:69:d2:1a:97:af:e2:c3:51:f0:a4:2e:1e:ba:f6:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:68:69:78:16:4E:D5:85:F3:D6:9E:51:35:6E:57:B6:7F:E5:A7
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/kVtoaXgWTtWF89aeUTVuV7Z_5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0c:95:d6:c7:a9:d8:90:42:d9:ed:7d:14:d4:7b:ac:cc:a5:
1b:f2:5c:11:05:d7:ac:b9:8e:5c:55:22:aa:56:f6:81:17:eb:
32:99:1d:1a:49:1a:e3:04:5e:dd:72:53:04:76:e3:ed:21:bb:
d2:43:06:8c:6e:c1:6a:29:9d:6c:d2:ce:80:e4:15:43:c8:74:
da:57:47:4b:d8:e2:fe:88:5b:7a:aa:90:0e:41:f1:63:e9:d4:
df:8c:b7:a8:8b:e3:98:3f:9a:af:9b:e9:89:71:e6:a0:e6:d6:
82:ad:7e:20:63:a9:34:eb:5d:e4:d9:48:0e:05:c5:dc:59:d4:
f4:75:e9:fb:82:31:54:5c:e1:0e:65:1a:40:20:cd:6d:75:e8:
01:d8:d4:74:67:73:d6:92:b7:63:41:25:f6:fb:68:3a:52:c9:
45:98:26:ee:80:ab:94:37:da:3d:a9:93:dc:a0:0d:34:bb:79:
b3:f3:b7:43:e0:28:2c:ff:54:74:96:e0:d1:03:35:b4:45:a0:
36:31:77:b3:2b:d3:a1:7c:67:f1:0d:79:c9:27:48:1b:f4:5d:
0f:9d:e6:15:f9:10:48:6c:04:98:e5:37:f4:64:f0:71:53:d3:
d1:17:00:3e:49:0e:50:f8:01:48:e6:eb:16:a1:e3:12:0c:37:
84:b4:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:58 2025 by rpki-client