Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/mtAQtCYwOc8biWun6G0pnILNaMQ.roa
File: mtAQtCYwOc8biWun6G0pnILNaMQ.roa (raw, json)
Hash identifier: fb9kO1NV/i3Edw/qFaz6kYnDEn8kprwtb6Ad5QiSdXs=
Subject key identifier: 9A:D0:10:B4:26:30:39:CF:1B:89:6B:A7:E8:6D:29:9C:82:CD:68:C4
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0194A67FE271D32EC8007D0F6A4A7BAEDB7C
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/mtAQtCYwOc8biWun6G0pnILNaMQ.roa
Signing time: Mon 27 Jan 2025 06:43:06 +0000
ROA not before: Mon 27 Jan 2025 06:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 5.159.216.0/24 maxlen: 24
5.159.217.0/24 maxlen: 24
5.159.218.0/24 maxlen: 24
93.93.50.0/24 maxlen: 24
93.93.53.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.122.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
95.128.127.0/24 maxlen: 24
109.71.160.0/24 maxlen: 24
109.71.162.0/24 maxlen: 24
109.71.163.0/24 maxlen: 24
109.71.164.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
185.13.88.0/24 maxlen: 24
185.13.89.0/24 maxlen: 24
185.13.90.0/24 maxlen: 24
185.13.91.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Jan 2025 06:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:7f:e2:71:d3:2e:c8:00:7d:0f:6a:4a:7b:ae:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jan 27 06:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ad010b4263039cf1b896ba7e86d299c82cd68c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:a8:2d:2c:c4:4b:2c:46:9c:e7:20:4f:73:
e9:0d:a4:d6:df:cf:01:31:a7:d6:da:3b:80:72:67:
8e:c9:ca:08:aa:08:46:f7:90:ea:a9:32:1e:b7:67:
aa:64:ed:47:8d:93:e6:39:26:6d:f3:5d:91:fb:9f:
18:76:97:2d:c7:69:93:ce:a0:ef:30:e2:9c:85:0e:
b1:2f:35:b2:3a:55:68:45:15:c5:4d:64:f7:92:46:
fd:a3:74:1f:0b:7d:11:ac:89:95:c0:8c:37:32:3e:
16:8d:46:5b:47:47:ec:30:ca:f3:e7:cb:3b:07:e6:
48:27:d7:fb:18:0a:47:20:e1:8a:fa:2c:f8:93:e4:
aa:7b:27:28:de:62:a4:f3:18:34:d2:e2:68:85:2b:
21:04:39:b5:07:43:7d:b4:bd:94:c5:c0:dc:fd:f6:
db:d4:d4:55:cf:53:a6:ef:60:15:54:e0:c2:0e:46:
8f:0b:95:a3:be:df:15:fe:36:b6:e2:2d:8b:07:c5:
80:09:86:60:60:e5:48:9e:92:db:5f:d0:b8:22:a3:
11:ff:6d:66:c1:60:bf:4a:3a:3c:e0:bc:da:51:59:
86:b6:b3:e9:02:6c:c3:9f:7e:62:6c:54:fd:e4:f0:
c6:ed:78:64:48:f6:44:3f:73:7a:8d:97:49:3f:83:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:10:B4:26:30:39:CF:1B:89:6B:A7:E8:6D:29:9C:82:CD:68:C4
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/mtAQtCYwOc8biWun6G0pnILNaMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0-5.159.218.255
93.93.50.0/24
93.93.53.0-93.93.54.255
95.128.120.0/21
109.71.160.0/24
109.71.162.0-109.71.167.255
185.13.88.0/22
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
2a03:9c40:1000::/48
Signature Algorithm: sha256WithRSAEncryption
4c:08:90:21:47:ce:dc:5d:16:63:34:4f:60:b0:71:29:97:f4:
6c:c2:b8:3b:12:ad:53:08:5c:7c:9b:fe:cf:7f:30:73:ab:d0:
e6:b0:cd:81:01:81:0f:65:82:e0:e5:92:6c:aa:49:5a:23:aa:
3f:7c:b0:6a:6d:c0:a0:73:d7:8c:db:be:c8:89:24:ec:b4:84:
b4:bc:ec:01:af:38:50:f8:af:05:ea:23:93:73:15:a7:d4:15:
8e:ec:c5:6d:4c:31:10:9c:9d:48:fa:2a:0d:1f:d2:45:4e:79:
29:4f:87:fa:ce:41:24:e1:a7:f6:4c:62:58:8e:82:4b:6a:09:
36:88:b5:78:21:52:1f:92:a0:6c:69:1b:14:b6:25:f1:1f:61:
a1:6b:04:79:84:a8:46:2d:dc:a7:2c:6b:c1:9d:64:85:e5:f2:
86:18:a4:b7:8e:26:99:26:ca:b9:69:e4:eb:2c:87:66:ea:7c:
ae:8b:42:3c:96:47:95:31:3a:73:1a:ff:0b:bd:58:5f:54:12:
d8:90:9c:cb:9d:59:ca:82:8b:61:cd:4c:f9:68:9c:48:a3:a3:
ac:47:6c:8a:db:30:9c:2e:3b:c6:8b:49:6a:5f:4c:86:9f:3b:
ed:25:0f:58:7b:29:8e:86:c9:6a:6d:9e:2d:b0:87:8a:0a:98:
20:02:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:04:47 2025 by rpki-client