Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/r6SNOK3xi7CTJe4DNeZIqNJrKqw.roa
File: r6SNOK3xi7CTJe4DNeZIqNJrKqw.roa (raw, json)
Hash identifier: zHzqwiYLCMpPRUMsWTPrjkgHijjjiN2IpMoNmWCzBVg=
Subject key identifier: AF:A4:8D:38:AD:F1:8B:B0:93:25:EE:03:35:E6:48:A8:D2:6B:2A:AC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195370AB674975B9FCE53EDE6342C5FADB7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/r6SNOK3xi7CTJe4DNeZIqNJrKqw.roa
Signing time: Mon 24 Feb 2025 08:20:03 +0000
ROA not before: Mon 24 Feb 2025 08:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 192.36.87.0/24 maxlen: 24
192.36.92.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
192.121.63.0/24 maxlen: 24
193.181.71.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
193.182.156.0/24 maxlen: 24
193.182.159.0/24 maxlen: 24
194.14.242.0/24 maxlen: 24
194.68.3.0/24 maxlen: 24
194.103.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 12:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:0a:b6:74:97:5b:9f:ce:53:ed:e6:34:2c:5f:ad:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 08:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa48d38adf18bb09325ee0335e648a8d26b2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:33:5d:1e:2b:00:87:88:bc:ac:24:0b:a4:
f4:ac:05:f1:9b:e0:08:68:78:76:22:76:e3:86:d2:
03:70:47:50:cd:64:8d:c4:47:42:9d:4d:cc:0c:3d:
0a:9d:d8:0d:4c:da:7a:eb:f4:29:66:b0:56:0d:b1:
ea:22:5e:4d:5f:f0:c4:95:1b:cd:37:02:0f:06:0e:
b3:7b:c0:2a:8f:91:62:ca:1c:2b:cf:4d:a7:dc:13:
23:8a:f0:bd:26:ab:3b:fe:72:ef:fd:58:86:e0:6c:
e9:12:c3:81:00:c6:72:b6:33:f6:98:5c:53:25:ae:
b3:01:d6:36:e8:c0:92:47:bb:35:0a:43:07:51:ba:
85:42:88:b3:7f:8e:17:fd:6d:0e:52:a0:c3:0e:8e:
9d:40:c7:91:97:ea:07:b7:fb:ad:c0:ab:01:c7:63:
7b:8b:02:69:ef:34:0f:2d:71:37:3b:e5:b0:bc:14:
5a:09:99:db:51:f8:54:58:11:01:5a:3d:b7:6f:69:
94:f6:01:38:1d:4b:22:ae:22:3f:e3:05:9e:ae:7c:
b1:90:e6:1a:fe:46:60:a1:d4:50:0e:01:35:3f:22:
c7:a7:fe:96:5e:8f:d0:0f:ad:e1:ee:3b:b5:fe:29:
7e:40:c6:d0:50:a9:81:ac:f3:fe:8d:da:90:09:8e:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:8D:38:AD:F1:8B:B0:93:25:EE:03:35:E6:48:A8:D2:6B:2A:AC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/r6SNOK3xi7CTJe4DNeZIqNJrKqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.87.0/24
192.36.92.0/24
192.71.200.0/24
192.121.63.0/24
193.181.71.0/24
193.182.6.0/24
193.182.156.0/24
193.182.159.0/24
194.14.242.0/24
194.68.3.0/24
194.103.248.0/24
Signature Algorithm: sha256WithRSAEncryption
27:79:ea:1b:5e:85:9e:37:f8:c1:4b:4f:26:02:20:3c:3f:dc:
fb:a6:2a:c4:40:d9:2b:70:59:35:64:62:9d:38:19:ed:05:3a:
b4:98:aa:21:d8:f9:c8:53:47:9c:4f:11:cc:9f:53:ff:14:c6:
bd:7b:68:37:67:79:44:32:d8:01:eb:83:5b:14:23:91:8e:81:
0a:da:d0:f8:47:32:6d:7c:ed:f2:24:01:e4:3a:10:c8:b4:16:
63:79:40:e8:5f:5f:d4:9f:86:01:2f:c8:6a:50:3e:ce:79:8a:
1c:c6:1c:1e:ca:a0:f9:05:f3:2a:2d:38:5a:b1:85:82:68:7b:
29:55:b3:f5:5f:25:49:4b:68:62:01:79:01:82:07:a5:ee:9d:
f3:04:5f:76:63:f3:f7:e9:aa:3f:d3:48:ae:67:1d:35:0e:30:
46:b5:bf:16:87:9f:d8:8f:82:07:71:8e:6e:6a:f5:b7:b9:0a:
fa:c0:4a:6e:ea:5a:94:a2:6a:e8:e1:b7:66:6f:4a:bf:44:62:
e9:da:f1:d0:8e:6a:18:41:00:44:04:c5:8f:8f:31:dc:e1:c4:
21:8f:b0:e3:1f:4e:d7:c8:72:2d:d2:75:d6:25:67:f9:43:31:
43:8c:e5:cc:af:d4:e3:a6:5b:f7:db:51:d4:ba:18:1e:03:41:
25:c3:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:42 2025 by rpki-client