Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/spvIsR6HP9WzCsMC9KZfVlaGb5I.roa
File: spvIsR6HP9WzCsMC9KZfVlaGb5I.roa (raw, json)
Hash identifier: X906OwzW9P4fsNAI4kNrDht3UoDcebfx2SsxB4gM2OQ=
Subject key identifier: B2:9B:C8:B1:1E:87:3F:D5:B3:0A:C3:02:F4:A6:5F:56:56:86:6F:92
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 01932A3A15D9D34FE295673635013E73151D
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/spvIsR6HP9WzCsMC9KZfVlaGb5I.roa
Signing time: Thu 14 Nov 2024 10:31:09 +0000
ROA not before: Thu 14 Nov 2024 10:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 85.115.204.0/24 maxlen: 24
85.153.12.0/22 maxlen: 22
85.153.24.0/22 maxlen: 22
85.153.35.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.40.0/24 maxlen: 24
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.153.65.0/24 maxlen: 24
85.153.66.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Nov 2024 10:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:3a:15:d9:d3:4f:e2:95:67:36:35:01:3e:73:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Nov 14 10:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b29bc8b11e873fd5b30ac302f4a65f5656866f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:cf:56:33:cb:a5:4f:c2:d3:15:5e:1c:45:
3a:3e:74:3f:63:38:28:5a:e8:54:a3:3c:18:f9:5f:
31:8b:87:9d:85:28:db:27:4b:ba:62:27:d9:0d:c3:
ab:cb:e9:c3:10:17:c8:de:c2:3f:e3:bd:8a:52:e2:
0d:7c:c5:01:90:a4:ba:86:11:86:a9:dc:78:b1:be:
9a:16:95:8d:ec:c6:76:13:31:6d:f0:8a:53:a0:a2:
19:66:90:f5:d9:fb:d7:55:55:4c:e9:0e:39:32:bb:
86:5f:92:82:5b:f8:73:4f:84:f9:c4:df:43:86:66:
23:ac:bc:f1:85:4b:5d:a9:1d:f9:10:49:d3:69:80:
65:c4:ed:fb:e3:0b:c1:14:1b:6c:8b:48:94:45:b4:
b2:e4:df:5a:00:e7:fa:ce:5b:3e:ed:82:18:b3:ab:
04:4e:ba:17:94:58:88:92:00:60:e6:9f:6f:7f:ff:
23:11:62:b5:c4:d2:3c:4d:af:a3:b4:6a:af:92:a7:
bb:5f:79:d4:3e:68:47:97:d3:07:2c:33:31:2a:db:
10:89:70:3e:f3:68:9e:a4:8e:e1:f8:4c:00:66:db:
59:57:e5:5d:b7:52:a9:6b:c0:ff:ea:c2:c9:1e:26:
c3:a9:40:76:c4:eb:25:4d:6c:ae:cf:99:1c:f0:e5:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:C8:B1:1E:87:3F:D5:B3:0A:C3:02:F4:A6:5F:56:56:86:6F:92
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/spvIsR6HP9WzCsMC9KZfVlaGb5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/24
85.153.12.0/22
85.153.24.0/22
85.153.35.0-85.153.42.255
85.153.52.0/22
85.153.59.0-85.153.63.255
85.153.65.0-85.153.67.255
85.153.72.0/23
85.153.88.0/22
Signature Algorithm: sha256WithRSAEncryption
86:42:4a:da:62:23:91:68:96:a4:1b:30:0c:ac:67:58:22:2e:
84:6d:71:0c:9f:53:64:eb:21:f7:94:ed:6c:64:b9:36:76:30:
b0:e9:ee:d8:8a:8e:6e:67:37:89:00:5f:f8:d3:ed:fc:f4:74:
9a:a2:97:ea:4e:2e:2a:5c:cb:b3:c8:59:19:0e:61:16:e4:75:
45:7a:cf:c6:50:c3:23:1c:f4:a4:f6:6b:13:79:a1:42:49:38:
2e:64:48:80:5e:76:fa:a9:94:0c:1a:0c:18:54:a9:41:6c:e2:
52:2f:2e:68:07:25:bb:80:d8:9d:4d:a7:28:84:fe:10:5e:bd:
16:ac:d2:b4:3d:a1:8d:72:75:60:7d:c0:4f:7d:21:7c:b1:49:
7a:70:5b:d3:b9:7b:85:7b:5a:31:61:34:f8:20:fc:4e:7b:30:
ce:d4:ad:c0:5b:13:2a:fc:60:be:07:db:70:a4:7c:a6:b1:46:
07:1c:e9:ab:9e:7a:8d:6a:ef:9b:9d:c6:4b:22:eb:f0:bd:41:
46:60:2f:4b:b9:b4:22:db:e8:22:9f:7e:8c:28:a6:0d:b9:5f:
7d:37:99:f8:e8:a8:ca:bb:65:42:ac:cb:f0:3f:3c:f1:7a:2b:
e8:4d:db:d8:72:14:69:e7:05:ba:00:68:9f:63:fb:b9:5b:25:
2e:08:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:35 2025 by rpki-client