Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/rVbtrRtUCgmE31jPehNF-awAqgA.roa
File: rVbtrRtUCgmE31jPehNF-awAqgA.roa (raw, json)
Hash identifier: j6Bixn8TgOgqF6i3ILGNgja/arjCkAxMD1x0KeL6l54=
Subject key identifier: AD:56:ED:AD:1B:54:0A:09:84:DF:58:CF:7A:13:45:F9:AC:00:AA:00
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 01958EF7A7F702F61466448676CFBE4C59DF
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/rVbtrRtUCgmE31jPehNF-awAqgA.roa
Signing time: Thu 13 Mar 2025 10:05:49 +0000
ROA not before: Thu 13 Mar 2025 10:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 62.179.0.0/17 maxlen: 17
78.103.0.0/16 maxlen: 16
80.111.0.0/16 maxlen: 16
80.111.0.0/17 maxlen: 17
80.111.128.0/17 maxlen: 17
84.116.0.0/16 maxlen: 16
94.169.0.0/16 maxlen: 16
94.170.0.0/15 maxlen: 15
94.170.0.0/16 maxlen: 16
94.171.0.0/16 maxlen: 16
195.34.130.0/24 maxlen: 24
195.34.132.0/22 maxlen: 22
195.34.132.0/23 maxlen: 23
195.34.134.0/23 maxlen: 23
213.47.220.0/22 maxlen: 22
213.47.220.0/23 maxlen: 23
213.47.222.0/23 maxlen: 23
2001:730::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Mar 2025 09:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f7:a7:f7:02:f6:14:66:44:86:76:cf:be:4c:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Mar 13 10:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad56edad1b540a0984df58cf7a1345f9ac00aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:dc:b8:52:bd:6d:8a:10:4b:a4:38:6f:6c:
e0:c1:f2:d8:17:da:12:06:35:68:6c:b5:9d:75:13:
24:2f:b2:14:2c:84:6e:53:9e:a2:f2:1f:7f:bd:8c:
b8:ac:17:21:f9:53:7e:28:98:12:0a:ba:7b:d7:7a:
4a:c3:a7:5d:55:90:55:64:a3:97:8d:fc:bd:ab:a8:
2c:2b:17:7b:69:77:f8:be:bc:c4:2c:bf:74:22:2f:
88:d9:d0:f5:84:0d:e2:51:ac:35:d5:c2:aa:59:04:
ba:ef:9c:9c:40:d2:ed:29:2b:20:49:a8:a6:ae:c9:
ba:83:d6:9d:0c:43:82:21:5e:cf:ae:d3:d8:02:bb:
d4:bb:28:71:4a:47:bb:ef:37:e9:88:73:12:6f:a2:
0f:c5:53:a8:a7:9a:fb:ca:02:34:86:a4:d4:60:de:
b6:c4:40:43:b5:de:1e:51:ce:14:d7:be:60:f8:a3:
d6:94:73:47:ec:0b:85:cb:ce:58:99:e2:4b:d7:95:
3b:09:9e:40:58:93:a2:e9:05:5f:40:27:44:c3:80:
d5:31:68:8e:96:7a:1c:63:36:2b:ab:f8:a8:31:b5:
35:32:8a:c5:03:bc:a3:ad:75:3f:0b:38:2c:07:39:
37:70:be:60:51:f9:c7:2a:38:6e:b2:fe:ea:d8:2c:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:ED:AD:1B:54:0A:09:84:DF:58:CF:7A:13:45:F9:AC:00:AA:00
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/rVbtrRtUCgmE31jPehNF-awAqgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.0.0/17
78.103.0.0/16
80.111.0.0/16
84.116.0.0/16
94.169.0.0-94.171.255.255
195.34.130.0/24
195.34.132.0/22
213.47.220.0/22
IPv6:
2001:730::/29
Signature Algorithm: sha256WithRSAEncryption
3d:5e:e3:a7:a2:95:c1:33:55:3e:ca:75:27:9c:9c:70:8e:a8:
2f:85:dd:1f:a1:0c:d1:c8:f7:65:a9:21:24:51:35:17:02:3a:
0e:45:5c:b4:d0:ae:00:bb:46:c4:39:51:b1:c1:1b:0d:61:93:
a9:60:2f:ce:98:54:86:fb:7e:77:cf:73:8d:38:e8:bb:3c:99:
f4:b5:28:8a:7c:18:ff:4b:d7:6a:60:ed:c9:ac:be:90:9d:b1:
26:e6:4b:2a:35:6f:db:7d:c7:6a:a3:0d:2a:e8:55:d9:60:47:
7b:e4:81:de:7e:c5:ac:5f:ee:6e:cb:8f:32:1d:dc:5d:86:17:
a4:ff:50:4e:81:88:2e:11:1f:9c:3d:3a:22:56:23:24:9c:81:
ac:83:ab:c2:13:15:6f:02:30:a4:01:87:bb:ca:62:7a:da:0e:
0c:17:52:cd:d4:1d:7a:fa:84:32:db:39:30:fb:45:47:87:9a:
eb:fc:95:29:f6:2c:59:f7:1e:e9:de:d3:0e:b5:da:bb:4b:77:
c7:3d:ab:e8:9a:e1:cb:e8:b7:b5:90:a7:65:06:eb:80:98:69:
ce:47:67:03:e2:d0:80:7a:c6:84:56:d0:e9:57:6d:9d:ac:5e:
15:ef:eb:53:58:1a:ff:f6:51:e6:33:b7:45:e1:5b:06:09:23:
0f:7c:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:25:21 2025 by rpki-client