Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/r_l3VLHOYYxhOByowkdjhoBNIjs.roa
File: r_l3VLHOYYxhOByowkdjhoBNIjs.roa (raw, json)
Hash identifier: LtC2dO94mj2zOGNNtjHO58Asvg9O0QAJ2Y70Gv6wBYE=
Subject key identifier: AF:F9:77:54:B1:CE:61:8C:61:38:1C:A8:C2:47:63:86:80:4D:22:3B
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0194B60C9A5AD9D1EDB13366CE78F7DB445A
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/r_l3VLHOYYxhOByowkdjhoBNIjs.roa
Signing time: Thu 30 Jan 2025 07:11:06 +0000
ROA not before: Thu 30 Jan 2025 07:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60388
IP address blocks: 185.31.108.0/22 maxlen: 32
212.73.96.0/19 maxlen: 32
212.73.99.0/24 maxlen: 24
212.73.102.0/24 maxlen: 24
212.73.103.0/24 maxlen: 24
2a00:b4a0::/32 maxlen: 128
2a00:b4a0:fe09::/48 maxlen: 48
2a01:70c0::/32 maxlen: 128
Validation: Failed, certificate revoked on Thu 30 Jan 2025 07:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:0c:9a:5a:d9:d1:ed:b1:33:66:ce:78:f7:db:44:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Jan 30 07:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff97754b1ce618c61381ca8c2476386804d223b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:d0:35:09:b3:86:bb:26:56:61:da:1e:d3:
80:7f:92:5d:04:44:75:26:38:b6:9c:5f:1f:49:40:
b8:5a:65:66:0c:71:5e:f0:85:d9:01:77:66:72:08:
26:43:47:ee:d0:95:48:09:60:6a:ce:97:78:df:e4:
90:80:b7:9d:d5:59:44:0b:5c:57:ef:76:2c:ed:55:
b9:b0:03:86:7b:bd:c2:5c:ae:b1:27:6e:67:60:9a:
0c:08:7e:72:fa:4a:3e:6b:bc:ba:9e:33:93:28:ae:
16:4b:1e:64:88:5c:b6:4f:14:8c:19:ea:a9:62:24:
66:11:db:ac:d5:9f:62:70:3b:9f:9d:e5:ee:98:e6:
74:06:b0:21:2b:4c:be:5b:9a:a3:9e:27:56:e8:65:
86:c5:56:ed:47:cc:7b:b4:b8:62:7e:8f:b9:c2:9c:
ff:e0:54:6d:95:3e:39:07:a1:e4:9a:88:4c:a1:fa:
45:22:eb:3b:4c:f1:82:0f:a6:95:cd:b3:df:e0:ff:
69:54:7b:df:7b:0e:14:68:34:9c:58:ed:ea:0e:98:
68:15:67:6a:42:b8:05:46:b8:0d:43:b4:8d:d5:bc:
e4:30:8f:40:43:cd:b4:bb:bd:e2:39:6f:c0:ab:a7:
eb:8c:5a:d8:bc:83:8b:91:51:d0:d8:05:be:fe:43:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:77:54:B1:CE:61:8C:61:38:1C:A8:C2:47:63:86:80:4D:22:3B
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/r_l3VLHOYYxhOByowkdjhoBNIjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.108.0/22
212.73.96.0/19
IPv6:
2a00:b4a0::/32
2a01:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
12:4a:a3:8d:ef:f2:6c:b8:4c:da:bc:61:52:87:21:7b:0b:03:
9c:b2:91:eb:5b:23:5f:59:28:a6:b7:e3:34:c3:66:e3:e6:e5:
cf:ae:78:e5:8c:c1:34:a6:99:24:7f:be:46:4e:4d:d7:a4:4b:
e7:2f:5b:c7:c4:f3:5b:c1:ad:c7:de:8b:02:6f:06:45:c4:79:
b1:b7:53:c0:de:93:42:95:3b:5c:b1:5b:8b:cd:e7:3b:32:68:
f0:d5:e0:72:e5:a9:b3:e5:c0:5c:a0:1a:06:93:a5:6c:28:2d:
a3:3a:c9:50:15:ff:0a:1e:7d:ca:b0:0d:e2:f5:98:2a:f3:7f:
44:2c:c8:7b:35:2c:77:95:6a:26:81:5b:90:63:31:0b:e5:1c:
22:b8:83:1d:26:3c:a7:7b:6c:3a:6e:44:d6:ee:3d:bf:b4:6b:
23:a4:3e:1e:e3:1e:a3:a5:60:ca:f8:b1:75:95:22:51:b0:6f:
16:f9:fc:80:a7:91:79:d4:86:f0:e8:9b:5a:fa:02:88:01:ef:
74:bf:4d:10:33:ea:70:c7:67:7e:07:1a:ca:e7:e6:97:dd:0b:
ed:e0:6d:71:a9:26:64:ce:0b:86:62:23:a6:0f:c7:7a:c8:99:
84:f1:56:4f:ad:67:9b:06:b5:a4:16:9e:35:4f:a0:1f:2e:23:
f8:d8:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:55:10 2025 by rpki-client