Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/B7qsAVQU_RJsUpCJfSVt_v90Wpc.roa
File: B7qsAVQU_RJsUpCJfSVt_v90Wpc.roa (raw, json)
Hash identifier: 1Gaq518CcFlG/fBnkfsCs0t4FWQvGFerrgZq+k1LC54=
Subject key identifier: 07:BA:AC:01:54:14:FD:12:6C:52:90:89:7D:25:6D:FE:FF:74:5A:97
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194FB306EB7D3EA430129E90D5827FF701E
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/B7qsAVQU_RJsUpCJfSVt_v90Wpc.roa
Signing time: Wed 12 Feb 2025 17:24:02 +0000
ROA not before: Wed 12 Feb 2025 17:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213676
IP address blocks: 85.115.206.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.80.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 05:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:30:6e:b7:d3:ea:43:01:29:e9:0d:58:27:ff:70:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 12 17:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07baac015414fd126c5290897d256dfeff745a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:86:60:a2:f4:0b:5b:d3:1c:31:7b:33:ea:
24:c3:99:48:42:83:7b:27:82:ec:29:14:04:28:63:
6e:6f:2e:f2:49:c7:1a:2c:1a:6b:73:b6:8c:98:74:
f5:35:15:5a:5a:a9:31:ff:27:cf:60:2c:fa:13:bc:
90:2f:5e:bc:62:0b:65:67:45:5f:9f:bc:72:9b:47:
9a:1e:c1:2a:31:d7:80:8c:e4:71:a1:0c:c6:0d:31:
56:fb:3d:b8:70:c0:f0:53:59:5f:90:2a:26:1f:20:
87:43:9d:d5:a7:19:ab:98:a1:5a:75:dd:0e:fc:74:
03:ae:cd:24:3f:c0:50:cf:59:0f:3f:1f:da:ca:00:
46:e8:9c:e8:21:b9:8b:4f:0b:b7:73:23:e7:1f:e2:
f3:ea:1e:d4:70:9d:67:03:20:b2:9f:39:9a:a3:6a:
7f:5e:f6:45:04:61:66:e3:b3:2c:ac:1a:10:40:ed:
2b:bc:68:49:20:ff:6f:90:eb:0f:d8:c6:9d:e3:c1:
99:af:fd:5e:29:43:9e:8e:48:80:1a:81:9c:70:c8:
b3:30:06:41:05:c9:95:d6:58:6c:a5:72:ec:79:a0:
aa:77:72:05:50:ab:94:3b:be:11:92:2e:1e:38:c5:
92:fc:fa:dd:ce:b3:3c:e3:60:20:25:e5:4a:be:e2:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:AC:01:54:14:FD:12:6C:52:90:89:7D:25:6D:FE:FF:74:5A:97
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/B7qsAVQU_RJsUpCJfSVt_v90Wpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/24
85.153.6.0-85.153.8.255
85.153.65.0/24
85.153.80.0/24
85.153.93.0/24
85.153.120.0/22
Signature Algorithm: sha256WithRSAEncryption
15:3e:ba:d3:a7:2e:81:96:05:83:61:42:fd:36:0d:26:6e:c3:
b6:6b:f7:70:19:c4:50:36:18:2d:ca:e5:2d:60:36:aa:b6:5f:
55:2b:0a:0b:e5:03:24:8e:2b:48:6e:8b:e0:71:2a:6e:a1:71:
d3:16:b5:f8:2e:d6:1a:ee:2d:8d:3e:ae:fe:13:b5:e9:c3:24:
37:39:58:d4:dd:13:e3:e1:c9:c8:3a:9c:dd:b4:d1:d6:88:f4:
2b:ec:88:20:cd:fd:7f:21:2e:e3:99:d2:56:85:ad:95:c5:07:
e3:79:56:76:f9:f6:83:2e:e3:e9:31:ed:ab:c5:2a:b3:27:3b:
41:36:7b:99:cf:53:ce:c0:03:dc:f2:e0:f5:31:b8:fa:05:65:
73:1a:2a:73:48:6a:65:cf:69:e7:f2:73:51:6d:7a:f0:11:bc:
bd:49:93:32:3b:33:a4:d7:06:c2:75:4b:60:b8:22:96:ee:cb:
fd:40:eb:a5:06:65:36:d6:3f:d9:8d:b1:6a:c4:0a:a3:ff:f5:
13:4c:15:1a:5c:5b:d3:54:e6:ee:7e:14:03:f5:ea:c2:76:26:
bf:bb:a9:8d:4e:f2:a7:d2:dd:c4:6c:48:f6:6e:75:24:92:45:
dd:c3:ab:a9:2b:ae:f0:e5:11:f2:77:17:ca:78:b5:ee:bc:37:
d0:26:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:20:58 2025 by rpki-client