Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/STqjYl_588bS7XsyEZIUfosJa-c.roa
File: STqjYl_588bS7XsyEZIUfosJa-c.roa (raw, json)
Hash identifier: /EH4u2C1pfF7XUWMynCHMk5tGFdh7ksYiBH4gi2Hkng=
Subject key identifier: 49:3A:A3:62:5F:F9:F3:C6:D2:ED:7B:32:11:92:14:7E:8B:09:6B:E7
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 01973A609646408837899543195000B3E029
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/STqjYl_588bS7XsyEZIUfosJa-c.roa
Signing time: Wed 04 Jun 2025 09:58:17 +0000
ROA not before: Wed 04 Jun 2025 09:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39728
IP address blocks: 91.217.4.0/23 maxlen: 24
176.113.224.0/19 maxlen: 19
178.214.160.0/19 maxlen: 19
178.216.232.0/21 maxlen: 21
185.178.245.0/24 maxlen: 24
194.31.152.0/22 maxlen: 24
2a07:6900::/48 maxlen: 48
2a07:6900:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Jun 2025 14:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:60:96:46:40:88:37:89:95:43:19:50:00:b3:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jun 4 09:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=493aa3625ff9f3c6d2ed7b321192147e8b096be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:b0:b8:d9:00:c3:c5:21:46:f1:eb:1b:8b:
73:25:2b:2b:e8:83:68:a3:8b:04:8d:c3:76:de:58:
07:37:15:74:19:cb:76:17:71:d5:8a:3f:f6:f0:7b:
a7:55:59:cc:d0:7a:4d:0c:48:16:2c:6f:14:5f:aa:
97:19:91:66:9b:1b:38:e8:cd:bf:c5:6b:26:04:47:
51:33:06:4d:e6:7d:3a:56:bc:cb:99:a4:0d:9e:54:
66:db:7a:4b:f1:7a:78:bd:ef:d0:03:58:ae:8d:1d:
f4:cd:96:9a:44:44:ab:c1:34:dc:a6:0e:90:df:0b:
51:e9:e0:6b:69:43:be:0a:7d:0e:11:05:2b:d6:9c:
2b:d2:b3:5f:89:1c:84:0a:df:c0:82:94:d6:01:ce:
98:94:06:33:5e:a0:14:61:33:1b:71:01:66:68:86:
a3:76:21:a6:9d:ea:50:80:d9:76:bd:54:bb:94:e2:
bf:cc:7a:df:f6:91:f8:a8:79:3b:9c:d2:c2:e1:45:
bd:13:e0:1c:4c:75:08:22:15:e8:42:1a:c3:ac:60:
bd:dd:48:d4:6b:8e:2c:b0:48:0d:42:84:dd:ff:bf:
91:a7:eb:96:77:83:0b:5e:b7:9e:98:87:9d:8d:de:
1b:50:30:75:ee:b4:cf:1d:fd:4e:91:98:c7:1c:59:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:A3:62:5F:F9:F3:C6:D2:ED:7B:32:11:92:14:7E:8B:09:6B:E7
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/STqjYl_588bS7XsyEZIUfosJa-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.4.0/23
176.113.224.0/19
178.214.160.0/19
178.216.232.0/21
185.178.245.0/24
194.31.152.0/22
IPv6:
2a07:6900::/47
Signature Algorithm: sha256WithRSAEncryption
5f:0a:0d:99:a3:f8:ba:2f:87:c1:37:4e:63:bd:94:e7:c7:09:
3e:6f:6c:27:fd:3d:2c:b4:a2:1d:56:c8:eb:ab:a5:21:bd:d1:
39:7a:1c:30:23:72:46:f3:81:a4:31:8b:05:dd:4c:35:f0:2b:
1a:d9:a0:81:7f:18:84:90:d1:3a:e0:d5:f0:e7:2a:b8:6c:6c:
96:05:f9:83:09:eb:23:36:38:22:78:77:96:64:7f:99:54:f8:
53:b0:17:e4:52:2e:8b:7a:0c:2c:70:6e:02:e2:d6:09:4b:cb:
74:29:11:64:32:29:d0:26:26:99:b4:8f:eb:d6:4f:82:af:4e:
66:55:1f:01:75:0a:54:e4:4f:79:01:82:eb:21:b8:72:0c:7d:
c1:f0:85:ec:07:b4:25:52:a2:e2:4a:c6:44:c6:c6:41:d7:9f:
15:2e:1d:2b:73:bb:3e:ac:70:be:3c:7e:26:8a:0a:5d:66:12:
99:ff:66:d4:7e:2f:ef:f7:72:0a:88:30:38:49:83:6b:3a:92:
29:00:ee:9b:07:a4:32:aa:35:fb:08:dd:08:c8:b3:cb:53:56:
65:66:f7:f7:c5:91:0a:38:0e:15:93:5a:e1:67:ef:4d:fb:95:
2d:da:81:92:c8:59:2b:c7:3e:70:08:67:21:f3:63:f9:e2:6b:
1e:1b:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:50 2025 by rpki-client