Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XM53Hj-eChnoasPIqM91boc5CMA.roa
File: XM53Hj-eChnoasPIqM91boc5CMA.roa (raw, json)
Hash identifier: nNk0ClsbWWxnQmiZqCfzwnTTLXwlNOHBaPmSpShiJt4=
Subject key identifier: 5C:CE:77:1E:3F:9E:0A:19:E8:6A:C3:C8:A8:CF:75:6E:87:39:08:C0
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194F9E7C10B2FE6021E796C6C5CF29F7622
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XM53Hj-eChnoasPIqM91boc5CMA.roa
Signing time: Wed 12 Feb 2025 11:25:02 +0000
ROA not before: Wed 12 Feb 2025 11:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213676
IP address blocks: 85.115.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 17:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:e7:c1:0b:2f:e6:02:1e:79:6c:6c:5c:f2:9f:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 12 11:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cce771e3f9e0a19e86ac3c8a8cf756e873908c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:58:3b:3c:13:40:e8:a5:83:8f:8a:4b:5e:
21:a9:6a:29:21:58:b4:3d:29:39:f5:14:2f:1e:a0:
92:4b:b7:42:47:81:7e:5e:17:6f:52:f9:c4:fd:4a:
99:42:1c:26:86:a0:d0:8b:e7:47:64:5e:9d:ec:ad:
9c:9e:85:68:3e:2c:63:03:10:67:d6:98:7f:f5:19:
f5:97:01:f9:09:b4:67:88:55:a1:09:7f:69:bb:e0:
ad:b9:f6:dc:5b:60:65:47:52:be:47:01:0b:c6:06:
dc:63:65:12:fa:ad:96:ab:5a:56:a1:2c:5a:aa:18:
4f:ca:16:ca:19:42:a5:25:a9:73:03:dd:43:a5:f0:
4e:c2:c0:76:c9:32:4c:3e:55:70:cd:c2:bd:f6:63:
94:af:11:fc:60:12:5a:0e:66:0b:94:d2:8d:71:ee:
d9:35:77:88:83:99:7e:32:70:5f:58:b2:b4:08:4d:
1a:ad:71:7b:a7:96:ae:0e:f6:98:4d:24:a4:31:18:
c9:fa:1f:3f:bf:e9:f4:73:2e:1b:86:ff:d2:a4:8b:
d4:bc:0f:7d:ac:ae:5c:76:f6:c2:58:a8:7f:47:da:
e5:37:ce:3b:b4:5a:ed:a3:7c:39:80:d2:60:32:be:
5a:5a:46:de:67:f6:0e:11:84:0f:2a:ad:41:64:30:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:77:1E:3F:9E:0A:19:E8:6A:C3:C8:A8:CF:75:6E:87:39:08:C0
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XM53Hj-eChnoasPIqM91boc5CMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/24
Signature Algorithm: sha256WithRSAEncryption
13:27:79:3d:43:80:ab:5a:13:78:0c:b1:04:48:83:59:b2:55:
18:ca:0a:17:0b:cf:b4:e6:03:c3:36:ea:77:39:3f:ba:a8:bf:
da:9b:9e:d0:94:5e:78:c7:09:2c:15:0e:71:c4:aa:a6:2a:a6:
52:0b:dd:7d:cf:7b:b5:dc:01:8d:21:54:67:b5:b7:c5:1a:3a:
18:80:90:d6:f8:02:69:98:6c:25:38:e2:46:74:ba:97:1c:05:
a2:83:a1:67:fc:fc:e4:82:0a:0a:f5:b6:67:10:49:39:a6:cd:
f6:80:78:e9:eb:97:d5:78:f6:fe:06:4c:dc:fa:c4:0f:09:e5:
db:5b:e1:60:6a:36:bb:37:30:13:49:88:8e:f5:85:af:26:92:
2e:53:78:b5:0c:e7:61:34:74:8d:de:ea:e4:7d:83:76:77:34:
1d:5d:08:88:c2:89:cc:8f:c2:1c:67:43:13:2d:4b:80:26:22:
b4:fd:13:94:6c:c6:40:9a:ff:3c:71:e4:9e:73:d7:73:45:55:
76:af:fb:6a:4b:b4:4a:d9:80:4f:98:14:50:d1:68:a4:7e:f9:
1b:af:92:5e:0f:ed:4d:e0:65:7e:0f:80:87:1b:5a:f5:80:14:
d7:c4:2c:74:84:1e:37:e6:f0:46:48:33:b2:92:7a:81:b5:ce:
f1:8b:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:11:29 2025 by rpki-client