Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bg0-rLvxqIqciPZYpTm_omQpSkg.roa
File: bg0-rLvxqIqciPZYpTm_omQpSkg.roa (raw, json)
Hash identifier: 0R8worbXXkJHIiMMDd8k2hRjJFrXfdfL2JqoaVAzn7w=
Subject key identifier: 6E:0D:3E:AC:BB:F1:A8:8A:9C:88:F6:58:A5:39:BF:A2:64:29:4A:48
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4B3053831B6A48AA1C4CEED8C391
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bg0-rLvxqIqciPZYpTm_omQpSkg.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 94.154.33.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 17:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4b:30:53:83:1b:6a:48:aa:1c:4c:ee:d8:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0d3eacbbf1a88a9c88f658a539bfa264294a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:80:41:c1:65:c2:97:e9:4a:4a:20:81:10:
9d:a4:b2:7c:d4:d5:d0:a5:51:57:07:c4:99:2e:14:
a3:06:97:09:d8:2e:a6:b4:f5:c3:17:9d:bb:54:43:
77:40:fe:48:5c:95:d7:82:ae:cf:11:98:57:8c:20:
c6:5c:b6:57:c8:d3:61:f3:c5:f9:9e:4a:c4:3d:71:
d6:09:25:83:a0:92:44:88:f8:be:ed:f6:22:e0:89:
69:fa:26:10:43:e7:1f:e9:22:db:c6:fd:88:af:60:
50:04:f7:45:21:a9:6e:ad:22:97:6b:7f:58:d6:a2:
60:0e:d5:30:d6:c5:37:eb:ec:02:cc:9b:26:b6:77:
e4:6b:7b:81:72:73:71:4e:94:16:5e:38:83:d9:a4:
10:45:b0:66:b6:c1:8b:df:9d:1e:8c:0e:91:20:3c:
87:ea:5d:b8:27:fa:df:e2:44:6e:09:98:da:fe:d8:
28:1a:32:f3:43:c2:e1:13:09:1a:d9:a6:81:51:b1:
0e:50:89:0c:d2:5d:64:77:9e:3d:58:7f:d4:55:9f:
62:d1:00:83:9f:18:64:d6:5f:13:9c:2d:c8:12:1b:
43:d8:30:72:56:ff:35:5b:d7:ec:bd:57:38:49:c5:
21:0f:d1:d6:75:19:c3:d6:33:77:7c:01:dc:66:53:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:3E:AC:BB:F1:A8:8A:9C:88:F6:58:A5:39:BF:A2:64:29:4A:48
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bg0-rLvxqIqciPZYpTm_omQpSkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:69:79:a9:c8:4f:60:7f:28:f5:73:78:32:2f:e8:6b:b7:89:
51:3a:49:c8:13:21:4b:76:02:3e:ba:fe:20:33:f4:e5:77:bc:
e9:0e:1c:1d:c3:0e:72:12:ab:ac:6a:1e:b4:eb:f6:b4:4d:62:
62:31:65:16:ed:3b:cc:61:b6:cd:25:a9:37:4c:3c:80:77:cd:
90:3d:84:c8:fc:e7:47:0d:9d:0d:3e:d0:75:e6:c2:aa:6f:37:
ae:ca:7b:be:eb:c3:9d:45:f9:87:61:e1:3e:d0:4a:88:88:c7:
0a:18:93:af:4f:e4:e0:f0:50:9c:83:71:c1:a1:5e:6d:38:ce:
64:bf:79:75:9a:f1:eb:29:58:b2:16:b1:7e:be:c8:e9:72:18:
d9:67:ce:be:e4:b7:fc:35:e3:97:2d:40:e8:28:ef:1d:b6:d7:
f7:24:83:38:d0:56:ad:7d:66:26:0c:51:18:10:8c:db:6c:ec:
b2:8e:de:23:65:a7:8f:10:ae:83:2a:f2:b3:37:70:bf:e1:53:
51:98:bd:30:e9:3a:d6:3a:ff:f4:df:d5:c6:69:92:c9:1c:bf:
5d:cb:73:63:4d:21:43:20:c3:6d:00:5d:44:55:9b:eb:6d:6c:
7e:46:e1:96:11:1d:80:83:2c:91:b3:a7:89:31:61:d3:17:b1:
a3:f3:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:48 2025 by rpki-client