Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/0QlGCQ0qQwOnUHSj6fC_k1QFKc0.roa
File: 0QlGCQ0qQwOnUHSj6fC_k1QFKc0.roa (raw, json)
Hash identifier: 5Hh2eSJO3k/1yyxXh4f9gn4feVjU/qbkm20Y3mHAms0=
Subject key identifier: D1:09:46:09:0D:2A:43:03:A7:50:74:A3:E9:F0:BF:93:54:05:29:CD
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0193E9420C1FC2BEC4D0005628773ACA475C
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/0QlGCQ0qQwOnUHSj6fC_k1QFKc0.roa
Signing time: Sat 21 Dec 2024 12:47:20 +0000
ROA not before: Sat 21 Dec 2024 12:47:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206192
IP address blocks: 185.21.4.0/24 maxlen: 24
185.33.61.0/24 maxlen: 24
185.93.249.0/24 maxlen: 24
185.193.4.0/23 maxlen: 23
185.193.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 21 Dec 2024 12:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:42:0c:1f:c2:be:c4:d0:00:56:28:77:3a:ca:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Dec 21 12:47:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d10946090d2a4303a75074a3e9f0bf93540529cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:7d:95:5b:56:cb:58:ee:05:aa:27:50:45:
40:55:e7:ce:16:4b:e8:2a:23:6b:2a:dd:db:6e:d4:
f8:70:47:e4:11:2f:52:fe:e5:b3:3f:63:fe:32:51:
fe:ec:d8:7a:2a:e0:a4:db:53:f2:0a:32:6e:0f:7f:
8e:b1:79:ac:c0:ed:7e:1d:ba:cb:60:98:b0:f5:f2:
68:4e:61:8f:30:9b:40:f9:90:ff:a5:72:6b:eb:47:
09:e9:81:46:8a:68:7f:02:21:93:86:b9:5f:63:f9:
8c:1b:c7:f1:4a:2c:82:01:79:61:d0:bf:6f:35:7f:
05:89:0c:f3:f1:e1:23:fd:9e:1e:c7:07:3e:d2:87:
f9:f3:fa:c3:52:00:48:6f:5c:28:4c:ef:2f:fb:69:
0b:47:32:6b:df:a5:03:62:46:7f:e8:f4:b9:5a:c3:
10:41:c0:2b:9f:f8:f5:b0:d6:6f:8a:d9:87:0b:72:
50:fe:79:b0:40:09:a3:9b:f3:82:78:07:9e:03:63:
86:9b:8a:46:af:be:f2:5c:ce:51:c3:a3:e1:99:f7:
6a:e5:cb:cf:63:fc:68:6d:ae:00:cf:35:06:60:68:
ae:eb:5b:d4:67:1b:4b:a3:31:96:4e:e5:94:18:f2:
1b:b4:fc:cb:cc:3c:b4:a7:c9:a9:9c:e1:c8:09:54:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:46:09:0D:2A:43:03:A7:50:74:A3:E9:F0:BF:93:54:05:29:CD
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/0QlGCQ0qQwOnUHSj6fC_k1QFKc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.4.0/24
185.33.61.0/24
185.93.249.0/24
185.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:fd:36:fe:d2:f0:2f:6b:6a:65:4c:35:04:0a:be:c6:e3:3c:
8b:d2:37:98:7b:3b:98:1f:bc:39:81:e3:11:98:cf:6a:80:8a:
85:ed:3b:f7:8e:80:47:41:e8:86:6f:24:f7:04:b5:5f:35:6c:
54:f1:56:45:2e:d1:be:4b:30:41:f1:04:17:b9:45:28:dc:a9:
90:59:59:81:8e:49:b7:14:72:fb:17:5a:e4:f1:56:90:1a:31:
29:6d:d4:70:bb:19:3b:17:d0:38:6b:45:22:7b:80:3d:3e:da:
e6:87:fd:10:c5:42:22:7a:fd:02:fe:64:d4:13:ff:b8:a9:e7:
35:ad:66:bc:01:3f:2b:eb:cd:8c:d1:bf:d7:c7:20:a1:22:25:
08:a3:a8:b9:11:9e:0b:f0:6c:13:bc:af:0a:71:d3:57:1f:96:
d9:d2:f5:a5:d9:ad:fe:ea:b4:bd:9e:44:29:79:d5:7e:b3:ed:
dc:17:00:97:43:01:f5:f3:ee:bd:cf:c8:10:cf:f5:5e:7f:91:
1c:e7:a0:6e:8b:15:ec:c0:c2:92:b1:75:09:50:8f:38:5a:5e:
49:03:5d:89:f8:e6:bb:aa:23:76:14:e6:1b:b3:5a:db:36:9d:
b5:23:16:9d:74:ec:ab:0d:47:33:1f:c1:14:c3:6d:f5:5a:a4:
6e:29:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:39:35 2025 by rpki-client