Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/b2Aoof62ErkIUQoGV81ekdX1cbU.roa
File: b2Aoof62ErkIUQoGV81ekdX1cbU.roa (raw, json)
Hash identifier: 5okjyygXzdBO4jM21xGPRyjvWQ1+Hymbuc1zpTr7BmQ=
Subject key identifier: 6F:60:28:A1:FE:B6:12:B9:08:51:0A:06:57:CD:5E:91:D5:F5:71:B5
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 0194276D8FA404D2ED92D58B4E7AE6B2479B
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/b2Aoof62ErkIUQoGV81ekdX1cbU.roa
Signing time: Thu 02 Jan 2025 14:31:19 +0000
ROA not before: Thu 02 Jan 2025 14:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24935
IP address blocks: 37.235.92.0/24 maxlen: 24
37.235.93.0/24 maxlen: 24
46.29.122.0/24 maxlen: 24
46.29.123.0/24 maxlen: 24
94.158.182.0/24 maxlen: 24
185.161.45.0/24 maxlen: 24
185.161.47.0/24 maxlen: 24
185.252.156.0/24 maxlen: 24
185.252.158.0/24 maxlen: 24
185.252.159.0/24 maxlen: 24
194.213.30.0/24 maxlen: 24
195.74.80.0/24 maxlen: 24
2a10:5140::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:6d:8f:a4:04:d2:ed:92:d5:8b:4e:7a:e6:b2:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Jan 2 14:31:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f6028a1feb612b908510a0657cd5e91d5f571b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:44:36:af:75:19:71:59:95:5d:21:01:35:
4c:1a:a2:66:e7:f5:de:89:88:24:8e:2a:0c:4c:a1:
ef:03:65:8e:5d:3d:33:af:d1:d3:da:7e:de:1b:5f:
a8:0d:73:3c:0b:a3:8e:45:c4:f1:70:c1:1c:dc:fc:
55:5b:c2:a4:37:39:b8:71:6a:50:77:89:ae:5d:53:
81:41:fd:e3:56:02:e4:99:c8:c3:ac:6c:29:9c:1c:
a9:02:e6:de:f6:aa:a6:86:1e:82:c7:f2:45:a5:9b:
0c:92:12:ae:d2:56:d1:dd:64:2c:b1:c9:b7:99:e7:
f4:26:f5:f3:94:a7:22:d2:fa:b9:56:26:1b:ea:f5:
83:c6:b5:9c:df:96:de:ed:96:04:d1:02:ec:b9:39:
2e:9b:d0:bc:2f:b3:0a:6e:d7:63:cc:e8:a7:d9:81:
a8:a0:2b:9e:64:5d:09:2b:97:f5:e3:83:f2:46:8f:
23:44:4b:ef:0e:48:40:e4:24:df:97:66:37:f7:13:
21:b2:0b:af:b2:ad:31:f8:15:e2:65:54:4a:92:36:
25:55:5a:82:18:80:7b:17:aa:69:b4:29:91:f0:bc:
ef:52:03:2d:22:bb:80:5f:e1:66:14:78:ea:53:ca:
bc:c4:37:82:02:32:39:6c:8a:a8:0c:19:17:52:40:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:28:A1:FE:B6:12:B9:08:51:0A:06:57:CD:5E:91:D5:F5:71:B5
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/b2Aoof62ErkIUQoGV81ekdX1cbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.92.0/23
46.29.122.0/23
94.158.182.0/24
185.161.45.0/24
185.161.47.0/24
185.252.156.0/24
185.252.158.0/23
194.213.30.0/24
195.74.80.0/24
IPv6:
2a10:5140::/29
Signature Algorithm: sha256WithRSAEncryption
0f:4e:b9:a3:9b:3b:b0:94:05:b9:57:de:4e:f1:6e:c6:d3:35:
ed:94:e2:c0:a2:b5:96:03:85:40:f9:a9:77:81:2e:16:b7:52:
f9:4a:70:cb:4f:26:12:1b:a9:40:cb:48:de:35:7f:a5:9f:59:
97:c7:4b:8e:72:37:e7:b8:8e:a6:aa:53:fb:72:4d:79:63:8c:
e7:7e:99:e1:d4:ad:64:ec:c2:d5:01:86:66:67:ad:ed:5f:21:
5f:0b:59:db:22:ca:2a:06:03:7a:1d:ba:00:3d:3d:2c:94:8b:
ff:49:7b:f3:31:82:4e:99:c0:3b:bd:c5:91:9d:a5:b7:63:37:
40:e1:ca:20:6e:18:59:1b:d9:7f:28:cc:51:63:26:49:52:21:
2c:f1:0a:da:63:8b:49:1d:3b:af:b6:34:dd:99:61:e5:ce:2e:
d8:0d:e1:3c:ac:9e:21:52:9e:a2:e5:9d:70:16:45:2d:87:6e:
17:21:c5:aa:15:db:17:3e:d8:f1:f3:2f:e9:bf:d2:36:a9:38:
61:af:d6:70:2e:92:44:fd:ef:7b:a3:1d:6d:dc:b7:70:03:43:
c5:be:02:d7:49:10:ee:8d:c5:01:59:18:31:d8:e5:a5:84:e0:
85:fa:70:8e:b4:33:17:98:8e:4e:b4:08:48:29:d2:f0:d8:ae:
69:2b:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:53:48 2025 by rpki-client