Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/0pg36zf9HNqa0luocHAOfFvD5eQ.roa
File: 0pg36zf9HNqa0luocHAOfFvD5eQ.roa (raw, json)
Hash identifier: rHlxuLeL2cBAVp8TsZ0ibgYb/MBD0nB3ffAOr2Csakc=
Subject key identifier: D2:98:37:EB:37:FD:1C:DA:9A:D2:5B:A8:70:70:0E:7C:5B:C3:E5:E4
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01965DFD1A01AA2709CA68A9AF8E77579B58
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/0pg36zf9HNqa0luocHAOfFvD5eQ.roa
Signing time: Tue 22 Apr 2025 14:53:10 +0000
ROA not before: Tue 22 Apr 2025 14:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
2a14:6781::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Apr 2025 10:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:fd:1a:01:aa:27:09:ca:68:a9:af:8e:77:57:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 22 14:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d29837eb37fd1cda9ad25ba870700e7c5bc3e5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:31:69:89:de:41:9e:4e:1c:70:f4:f7:7e:
1b:2b:ee:53:32:6d:21:91:ab:f4:13:ca:fe:75:2c:
62:c5:f2:83:4c:76:94:5d:00:2a:25:ab:28:13:a2:
25:1f:cc:92:1e:5b:d4:e3:2d:a9:bd:4f:8f:1f:dd:
97:b8:fc:30:4b:1e:9e:94:4d:0f:ea:ab:45:da:34:
52:c5:9f:3b:2a:bb:18:ae:66:0a:68:27:45:70:d5:
52:81:37:bc:c1:ab:b8:81:11:d7:7b:e0:cb:c3:92:
c4:41:fa:b9:15:0a:a2:11:df:b4:e8:04:4c:c9:36:
59:2b:d9:b9:5b:7c:d3:d3:74:c0:4f:3f:9d:cc:d3:
73:ad:bd:c8:c5:81:2d:62:db:64:49:4d:72:72:e3:
8c:12:82:55:d9:05:71:6c:fe:4f:fc:77:d7:c8:62:
7c:4a:38:4b:dc:69:ff:cd:7d:89:b4:13:28:c8:53:
3f:e1:7a:bb:87:d9:9c:3f:5a:25:7c:d5:2e:5e:a6:
1d:b5:a3:5b:e2:c1:8d:5a:de:70:05:21:a7:71:d3:
ba:65:53:64:1a:83:d7:79:75:03:fd:b0:6a:1b:b0:
a5:5a:68:4f:45:a6:29:62:77:e4:cb:76:99:cc:ca:
c9:12:d1:c3:8b:aa:b8:b9:91:66:af:f2:f6:5c:ed:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:37:EB:37:FD:1C:DA:9A:D2:5B:A8:70:70:0E:7C:5B:C3:E5:E4
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/0pg36zf9HNqa0luocHAOfFvD5eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
89.36.35.0/24
185.144.70.0/24
212.232.18.0/24
IPv6:
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
97:f8:8e:85:d4:1b:1b:65:15:57:10:df:a8:9e:38:02:bb:a3:
18:e0:c1:47:ee:55:20:7e:c3:08:3a:b7:0f:45:b7:51:58:ed:
b2:4d:47:1c:be:8d:5c:3a:a4:7c:d9:78:63:06:22:9e:77:9d:
f4:49:da:29:37:11:14:65:71:79:a1:56:43:d9:82:3a:97:3b:
9f:16:c5:b9:bd:b9:4d:09:5b:03:73:1d:6f:67:70:5a:b4:a9:
cf:9d:64:12:16:d8:77:77:0c:ed:c4:47:95:69:c9:22:ec:b9:
bc:40:6b:b6:01:37:90:a8:3b:9b:d3:a7:8b:67:5c:a9:e5:9f:
13:d2:35:1e:b3:49:e5:16:dd:5c:30:a5:1c:ed:6f:6d:c2:c4:
80:be:cf:2c:a5:81:a4:d6:23:94:17:74:4d:bc:a2:e2:12:e7:
ce:1f:9a:10:d3:be:11:72:2d:8e:72:9d:eb:27:72:4f:47:bf:
53:2d:06:cc:c2:be:75:ac:67:b5:93:e5:28:e7:3d:2d:40:da:
bb:61:85:3e:e6:8b:b8:84:26:49:60:c1:19:21:30:0e:9e:64:
89:82:87:46:58:3a:fd:d7:15:c7:99:38:56:93:98:58:b8:5f:
83:de:e1:e8:93:68:e0:6d:e6:a1:c5:40:6e:29:59:a3:71:3c:
64:f3:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:55:04 2025 by rpki-client