Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/p1GxXnpfPJu1Xllm39kFX8jvnpw.roa
File: p1GxXnpfPJu1Xllm39kFX8jvnpw.roa (raw, json)
Hash identifier: ohvfiKjXdvwrkpvoJ2ZP2TsHCpswiYZzfmY8JO7JYVs=
Subject key identifier: A7:51:B1:5E:7A:5F:3C:9B:B5:5E:59:66:DF:D9:05:5F:C8:EF:9E:9C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D40795C5A889B74F34B8FE44A06B2167B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/p1GxXnpfPJu1Xllm39kFX8jvnpw.roa
Signing time: Thu 25 Jan 2024 11:55:11 +0000
ROA not before: Thu 25 Jan 2024 11:55:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 25 Jan 2024 12:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:79:5c:5a:88:9b:74:f3:4b:8f:e4:4a:06:b2:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 25 11:55:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a751b15e7a5f3c9bb55e5966dfd9055fc8ef9e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1c:d9:ea:97:74:e1:46:82:b2:dd:c8:ab:20:
e9:ae:cc:d9:e1:6b:66:f4:3e:26:66:29:a8:30:df:
f3:43:c5:4f:27:ba:9c:80:74:04:7a:31:db:85:59:
c1:01:d1:12:69:ef:3e:96:14:cb:9c:84:dd:c6:0f:
54:23:04:d6:0b:e8:17:3e:2d:21:ec:e6:e4:91:c6:
a7:28:d4:47:92:42:e8:b0:5a:5d:75:10:a4:55:8c:
1a:16:f4:f3:d0:3c:ba:ea:0c:19:8c:2c:4f:ed:dc:
28:95:8a:dd:ac:a2:1c:bf:f8:83:15:24:25:94:4e:
21:7a:34:50:37:5e:15:55:1c:49:ac:c6:6e:5f:e7:
77:9b:5c:ad:5c:b2:7e:3b:fc:88:8e:06:5c:c6:52:
79:5c:61:19:50:ef:dc:54:14:b9:93:27:f6:85:cc:
e8:b6:d9:9e:96:27:ef:9f:e9:b0:e5:fa:73:f4:b6:
36:9f:12:fd:22:a5:e8:59:98:bf:dc:3f:43:0f:eb:
fe:95:a9:6d:a5:7e:a4:31:dd:0e:a4:8c:19:ba:da:
9c:50:b5:c4:c7:12:29:d5:81:4f:50:c7:0b:e0:21:
3c:04:e9:a8:43:d9:3b:0e:49:13:e8:f1:99:5b:1a:
82:ec:c2:70:78:70:f8:69:2e:e7:f0:83:fc:9f:ea:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:B1:5E:7A:5F:3C:9B:B5:5E:59:66:DF:D9:05:5F:C8:EF:9E:9C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/p1GxXnpfPJu1Xllm39kFX8jvnpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
2a12:bec3:b00b::/48
2a12:bec4:100::/44
Signature Algorithm: sha256WithRSAEncryption
12:61:f6:07:d6:99:84:23:c8:3f:6f:e9:72:6c:15:b2:9b:01:
ba:1d:62:46:7d:45:7d:01:e0:1b:03:80:8d:c2:a5:2f:df:57:
3d:e2:a5:0d:c8:e3:e6:71:4e:0f:9e:77:16:09:57:ed:75:97:
8e:09:d9:c2:a3:d7:c7:5d:a2:36:89:ea:2e:f0:02:2a:7e:d0:
08:96:e1:90:c1:86:34:2f:9c:e5:14:ea:64:a2:35:54:76:54:
0c:9c:65:e6:6d:72:a4:50:03:a2:f9:71:89:ae:f4:fe:1c:cd:
9c:64:bb:06:fd:5b:56:42:52:38:56:45:f6:47:dd:eb:1e:31:
e6:5d:37:ef:ac:e9:00:a4:f9:a8:51:28:f9:40:8a:b9:f5:bb:
f6:29:be:e5:aa:d1:29:64:bf:02:38:b8:42:d2:94:d9:d7:a0:
da:47:1a:3d:83:36:3d:2e:07:76:5f:13:95:06:c2:cb:77:f7:
75:9a:e9:d3:04:c6:18:64:56:ce:5d:54:39:3d:4d:c0:c3:9c:
2c:98:4a:f6:bd:b2:d2:6c:99:1e:2d:af:18:81:b0:95:21:af:
ef:85:65:ed:5d:09:a4:fb:fa:69:8a:ce:78:79:4b:1b:5f:38:
26:dd:dd:0b:d1:a0:6d:20:f2:1a:6e:8f:82:f7:a4:f6:b0:17:
87:53:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:09:24 2025 by rpki-client