Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/omIxSwUHttU9iEZETiZ-ptvnbes.roa
File: omIxSwUHttU9iEZETiZ-ptvnbes.roa (raw, json)
Hash identifier: swFrSl9LXKS2XrpRqD6zhb01xVSlufCNYhNRiHnPzVk=
Subject key identifier: A2:62:31:4B:05:07:B6:D5:3D:88:46:44:4E:26:7E:A6:DB:E7:6D:EB
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01962927DA32C6F1B4AEF803B92ABB9A0F5B
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/omIxSwUHttU9iEZETiZ-ptvnbes.roa
Signing time: Sat 12 Apr 2025 08:39:59 +0000
ROA not before: Sat 12 Apr 2025 08:39:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 147.185.196.0/24 maxlen: 24
193.168.202.0/24 maxlen: 24
207.244.208.0/24 maxlen: 24
207.244.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 00:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:27:da:32:c6:f1:b4:ae:f8:03:b9:2a:bb:9a:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 12 08:39:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a262314b0507b6d53d8846444e267ea6dbe76deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:11:94:42:e2:e0:32:82:a9:2d:78:14:b6:
92:91:a2:09:ef:bb:45:c8:ca:8f:93:25:50:ff:02:
08:a4:52:d1:4d:db:fa:0b:1e:b7:8a:17:ff:0e:96:
ae:9d:76:89:1f:64:0a:c1:4d:bd:d1:9a:17:28:8d:
a4:40:1f:60:52:54:65:32:b3:3f:15:4e:a6:9b:3b:
ad:2a:38:50:6f:4f:62:44:65:d6:b3:aa:0c:4c:41:
04:9f:9c:a1:c3:cb:31:26:90:4e:1b:12:fa:d4:75:
f8:f2:2c:66:9e:de:2b:25:ca:d1:b3:85:43:bf:32:
d2:1f:1c:b6:cc:27:be:db:c3:12:54:69:aa:19:02:
fb:27:d6:26:41:e6:03:fe:22:eb:73:6c:0e:6f:a2:
65:54:cd:f0:62:2d:6b:58:c1:e4:85:10:61:98:83:
eb:4f:4f:01:b2:3f:e7:0f:20:48:b6:18:64:a7:2e:
e5:db:14:67:39:d4:39:82:bf:a6:a6:34:df:a7:14:
87:78:69:3f:0d:37:54:a0:d6:8f:75:b3:63:5a:9a:
32:89:11:5c:ec:e7:0e:3a:7b:48:bb:cd:89:b5:20:
4e:c7:e1:72:20:41:d5:94:aa:2e:69:98:f1:e8:a5:
da:8d:78:74:dc:d4:0f:08:c5:c6:61:d8:3f:b6:37:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:31:4B:05:07:B6:D5:3D:88:46:44:4E:26:7E:A6:DB:E7:6D:EB
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/omIxSwUHttU9iEZETiZ-ptvnbes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.196.0/24
193.168.202.0/24
207.244.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2f:0a:76:d2:fb:9c:d4:80:02:e1:41:76:42:25:e4:b8:a4:
51:33:52:38:14:86:c5:2f:68:35:45:83:ff:e0:b4:5c:4c:67:
33:07:ac:c9:9b:5e:c5:4f:eb:c6:ce:05:e6:0f:b6:4d:e6:01:
28:79:33:7b:42:d1:fb:c0:b3:76:54:36:08:85:74:d4:d4:fa:
c7:22:bf:00:37:20:51:69:b0:24:f5:d4:f0:9b:bc:c2:65:11:
8c:d3:f8:5f:48:19:c4:70:07:f0:f7:c8:eb:00:87:39:ab:8d:
cb:69:11:f4:23:99:2c:9e:7b:ee:a1:05:86:61:cf:fd:c2:a5:
17:0d:bf:0a:e4:21:20:4a:2b:1f:8a:d4:a7:f8:a9:72:b1:31:
13:02:94:6a:48:d6:8a:68:94:56:51:99:44:e4:ac:b3:86:21:
88:db:fa:bb:76:26:0b:67:2d:e2:d2:4e:99:c2:46:21:8c:fd:
3e:1a:b0:aa:0d:f1:1f:d5:99:3f:4b:4e:54:35:4a:d0:dd:15:
e6:72:93:67:a7:8c:5b:7e:6f:14:02:71:0a:65:07:02:6a:ad:
86:bd:b4:d7:49:78:2d:cb:bd:7f:7d:24:cd:19:b1:bc:33:6e:
13:c5:84:fc:83:4c:c3:7c:ea:52:81:8b:17:95:4a:8d:ed:4d:
63:16:08:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:12:50 2025 by rpki-client