Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SLI5Tc_2G73Tg2udAFzduvB45X0.roa
File: SLI5Tc_2G73Tg2udAFzduvB45X0.roa (raw, json)
Hash identifier: bNkfttOSYNXU1pUcXBcmALZAcUdbG4Pr6EaOxw5hSMQ=
Subject key identifier: 48:B2:39:4D:CF:F6:1B:BD:D3:83:6B:9D:00:5C:DD:BA:F0:78:E5:7D
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194F029D391ECF0EE20CA050C521717DF76
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SLI5Tc_2G73Tg2udAFzduvB45X0.roa
Signing time: Mon 10 Feb 2025 14:01:00 +0000
ROA not before: Mon 10 Feb 2025 14:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
91.186.212.0/24 maxlen: 24
91.186.213.0/24 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.52.0/24 maxlen: 24
178.253.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 01:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:29:d3:91:ec:f0:ee:20:ca:05:0c:52:17:17:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 10 14:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b2394dcff61bbdd3836b9d005cddbaf078e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:fb:84:80:f7:f6:07:b3:bc:15:f2:56:14:
59:b9:e4:93:84:f3:b8:4c:01:25:d7:96:00:87:7c:
45:66:23:3e:ac:80:b8:fc:48:66:3e:b8:8d:9c:5f:
2f:1e:14:4e:16:a9:86:c4:e2:9e:54:33:4a:13:4c:
8a:5c:4d:f5:86:c7:a0:cc:d9:2f:54:5d:a9:b1:02:
56:3a:b2:23:50:5b:72:a1:49:bd:d3:16:55:61:1b:
da:16:43:3d:0e:e9:44:a6:ec:a7:3f:6a:fd:5e:05:
19:51:2a:6c:66:e2:d7:78:21:6e:80:15:01:43:b3:
12:63:ce:34:c3:61:8e:e1:b5:6c:f3:71:5f:e1:cb:
08:31:02:2f:2e:87:aa:41:e2:d9:2a:d5:d8:2a:53:
ca:76:c7:73:a3:cd:f7:bc:85:62:bd:ec:a0:36:88:
f6:ea:4b:56:7e:bf:33:89:26:78:7e:5e:5c:20:6c:
aa:b2:64:e3:83:15:1c:0f:59:f1:3b:92:20:a6:4d:
3d:e6:b8:7a:72:41:a7:df:e5:63:b7:d8:fc:57:f9:
b8:39:d7:42:3a:1e:f5:e4:8a:d5:06:c1:bb:22:68:
eb:c9:f5:6c:19:4d:8a:8c:ff:42:8e:ce:d0:33:91:
0f:cd:16:59:43:86:9f:5f:92:1a:ca:27:20:9a:78:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:39:4D:CF:F6:1B:BD:D3:83:6B:9D:00:5C:DD:BA:F0:78:E5:7D
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SLI5Tc_2G73Tg2udAFzduvB45X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.216.0/24
83.147.253.0-83.147.254.255
91.186.212.0/23
178.253.31.0/24
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:8e:1f:59:01:15:33:2b:e2:0e:d4:f9:89:b7:23:7b:74:64:
ef:d2:b5:8e:05:58:45:f5:8c:6a:dc:86:be:d2:9a:a6:11:56:
22:56:48:8d:c1:47:30:c2:df:a2:e8:36:ae:eb:a9:78:0b:ae:
d0:99:a0:17:5f:90:eb:7d:e2:72:35:ca:cf:29:84:c2:39:5d:
53:a7:db:57:4f:47:a7:83:11:57:07:84:74:b7:d7:1d:94:d8:
a6:3b:ae:78:96:82:97:69:6f:38:4d:94:fd:50:15:0a:fa:99:
41:93:68:6c:5c:ba:90:cd:90:f4:6a:71:0a:25:1c:4a:c1:4b:
f2:08:25:47:ba:41:4c:41:d9:e3:b1:4e:af:68:46:1d:36:85:
83:d2:e5:b6:35:1c:a5:25:9d:9e:5d:7d:3b:3b:dc:82:1f:66:
04:c4:be:49:7c:b1:d0:ba:ec:44:9b:2e:0c:06:c9:bc:41:1d:
97:77:56:ef:50:4b:79:8f:d5:ba:f5:22:bd:1b:27:e9:1e:f2:
87:ef:62:33:30:aa:ef:64:03:2a:32:e7:e1:2b:53:b3:6c:ad:
28:fd:72:13:6c:d5:67:57:f7:62:25:4c:12:99:81:50:7f:90:
fb:4f:07:2a:64:d7:cb:71:01:11:aa:03:f7:6c:ef:e8:84:eb:
14:e8:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:57:43 2025 by rpki-client