Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/B-8X3LZjcReCGdjeUYkUmNzNtig.roa
File: B-8X3LZjcReCGdjeUYkUmNzNtig.roa (raw, json)
Hash identifier: KH81xBIUnqycPS16H9mrO7JHaqrcA6RWhStpOtrKQvo=
Subject key identifier: 07:EF:17:DC:B6:63:71:17:82:19:D8:DE:51:89:14:98:DC:CD:B6:28
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01967B01B0792EF33194F83BBD9EC57EB771
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/B-8X3LZjcReCGdjeUYkUmNzNtig.roa
Signing time: Mon 28 Apr 2025 06:07:10 +0000
ROA not before: Mon 28 Apr 2025 06:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.109.45.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
193.168.203.0/24 maxlen: 24
207.244.197.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
207.244.208.0/24 maxlen: 24
207.244.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 15:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:01:b0:79:2e:f3:31:94:f8:3b:bd:9e:c5:7e:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 28 06:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ef17dcb66371178219d8de51891498dccdb628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:a6:12:8e:07:ed:d6:c3:4a:a7:7e:02:45:
fa:7a:6b:f0:32:12:35:76:83:d4:44:99:cc:f7:c5:
40:70:27:9a:3f:e6:6b:27:90:e2:68:89:9c:91:12:
3e:7d:82:e2:ec:05:31:52:37:55:fe:c6:fe:19:fd:
61:eb:9d:09:e9:f1:fa:d5:3e:0e:3e:5f:fe:f9:06:
a2:99:91:0b:40:7b:44:20:65:bb:a3:e6:13:55:98:
61:9a:1c:f8:14:10:27:c0:33:49:3f:94:c6:8f:99:
60:df:f4:d4:2b:00:b5:4a:e1:71:0e:f8:59:1a:79:
31:d1:71:05:a8:c4:39:35:da:41:d6:72:bc:7a:ab:
1b:cf:2a:21:dd:39:8c:9d:4c:3a:f6:07:ea:66:e5:
18:cd:35:f0:6a:d4:c9:05:b8:44:88:30:21:4e:49:
41:ea:4c:3d:61:fe:34:9b:b9:e3:d8:b0:28:2f:07:
5d:62:6b:bc:47:04:2a:3d:ef:77:9b:85:f2:e7:6c:
1b:4f:e6:5f:6c:14:3f:ab:40:dd:6c:33:98:11:83:
1b:07:25:c9:7c:c6:1f:90:19:17:f9:f9:fe:f3:87:
0b:6f:14:5a:a6:a1:a4:34:d9:ca:32:d7:83:ad:56:
f0:df:22:af:f8:8f:fe:50:51:e8:08:df:e8:82:bd:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EF:17:DC:B6:63:71:17:82:19:D8:DE:51:89:14:98:DC:CD:B6:28
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/B-8X3LZjcReCGdjeUYkUmNzNtig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.45.0-91.109.46.255
147.185.196.0/24
193.168.203.0/24
207.244.197.0-207.244.198.255
207.244.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:61:79:0b:e7:8c:65:0d:93:dd:7b:17:2b:46:e8:c3:c2:e0:
73:17:78:46:47:a4:d1:ba:24:1f:ce:15:0f:b9:63:00:e8:5f:
65:2c:c3:01:82:04:db:8a:65:b8:b0:15:6b:9b:21:79:fe:5f:
54:bd:d9:f7:21:c8:1e:2f:f5:9d:b3:c2:1c:64:bf:5f:e1:ca:
41:eb:a1:f5:6c:69:9b:4f:76:04:7c:bd:cc:53:33:91:85:04:
e4:41:83:71:e6:61:a0:fc:a6:c8:8d:c1:d0:74:2a:1f:99:8f:
7a:e9:96:34:bf:2f:37:8a:8f:9f:51:10:6f:da:56:57:ee:9c:
f5:1e:5d:95:9e:59:9e:c0:f5:5c:fe:9f:2c:90:9f:35:8e:a4:
ab:e3:c3:e8:c6:d1:ca:fc:a0:8a:b5:d1:3d:a8:96:6e:22:2d:
df:2b:03:1d:0b:07:b8:77:1e:d1:dd:d7:3e:bc:95:e5:92:67:
88:c9:c0:29:6b:49:73:94:3a:3e:9d:a1:1a:69:91:4a:da:80:
76:cd:aa:4d:bb:86:8b:c0:8a:1b:5e:00:43:e9:bd:9c:47:f2:
b7:8e:51:51:08:5a:75:3a:5e:60:38:6b:79:15:24:13:ee:e2:
56:c2:56:3a:24:fe:6b:7e:16:ce:00:b4:77:18:b8:05:45:fb:
37:83:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:57:04 2025 by rpki-client