Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/2bIFB1la6rsBBbFfQneWeprcf50.roa
File: 2bIFB1la6rsBBbFfQneWeprcf50.roa (raw, json)
Hash identifier: pI3i7zDI+uU8x3/8kQPw1yX8F1J79KKfO8yX2DXFW6g=
Subject key identifier: D9:B2:05:07:59:5A:EA:BB:01:05:B1:5F:42:77:96:7A:9A:DC:7F:9D
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01949D64F46FCA176D12689B693E99DE7B8E
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/2bIFB1la6rsBBbFfQneWeprcf50.roa
Signing time: Sat 25 Jan 2025 12:17:06 +0000
ROA not before: Sat 25 Jan 2025 12:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 188.212.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 14:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:64:f4:6f:ca:17:6d:12:68:9b:69:3e:99:de:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 25 12:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9b20507595aeabb0105b15f4277967a9adc7f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:91:c0:fc:0d:d5:1b:78:e5:c4:08:83:95:
0a:46:4c:c8:e9:1c:e2:2b:42:b6:d7:96:a0:f0:c4:
1b:b8:69:8b:e8:53:2f:d7:6d:47:bf:ca:69:14:2b:
de:9b:7c:e2:b2:5a:e2:ab:8d:76:f2:14:83:81:15:
21:21:c4:53:c3:6d:05:50:1b:a4:52:c4:7a:48:e2:
77:32:92:6a:44:31:df:27:8c:49:b5:56:bb:9d:de:
98:ab:e5:a6:15:4b:7f:b3:62:24:7a:92:a1:4c:6f:
34:ca:56:98:f9:ea:05:ba:b1:7c:dc:18:1c:99:c8:
76:08:4e:a1:74:1d:be:93:df:25:41:fe:91:a6:a3:
7e:27:28:3d:a6:e6:a6:0a:17:4a:d5:dd:c7:38:50:
f7:6f:06:e2:73:69:70:ec:7d:30:70:39:53:cf:ee:
1a:14:b6:9f:70:01:5c:0e:4c:b4:b6:12:ab:c3:ee:
f2:4f:2b:56:ad:10:fe:85:5c:5d:e0:06:f9:74:3d:
89:7e:43:f8:7c:01:2f:b3:69:23:8f:a9:9f:13:9d:
e3:c8:25:83:e6:21:85:4d:5d:60:f6:5d:88:88:b0:
14:c8:85:8a:42:dc:18:53:eb:cf:ce:5d:b4:d4:fa:
88:94:82:d9:93:82:05:7d:16:92:43:41:bf:f7:6a:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:05:07:59:5A:EA:BB:01:05:B1:5F:42:77:96:7A:9A:DC:7F:9D
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/2bIFB1la6rsBBbFfQneWeprcf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d7:37:07:f9:b5:3d:dd:f9:25:e4:13:50:cd:6b:b3:ee:03:
0f:52:28:53:7c:9e:60:9b:60:be:72:87:5c:58:bb:92:26:a8:
15:d6:64:8d:15:c9:b2:24:1f:a0:28:59:46:cd:28:90:42:b9:
e9:b8:69:8f:04:13:61:cf:0e:50:76:65:cb:b8:16:54:05:cf:
fc:46:b6:65:7c:a2:ff:e0:83:97:07:02:36:bb:d2:7f:06:77:
ff:99:e0:d1:bd:5b:b6:c1:59:fa:f0:4e:f5:9a:88:9b:91:84:
b8:ff:9c:f9:24:76:97:4d:d9:6f:14:c1:e8:7f:ce:ac:d6:c4:
88:8c:58:39:3f:34:66:ff:5c:e3:53:09:1e:8e:f5:66:34:5f:
e6:97:ea:29:25:99:c3:86:d9:4f:6d:c9:b2:d5:bd:ab:45:3c:
4d:66:0d:51:f6:b1:4c:69:6a:a5:6b:e9:6c:2b:72:fa:a0:cd:
fd:9b:fd:32:09:ba:d0:95:8b:33:4a:8c:ee:b4:3f:ff:a2:37:
4d:36:6e:f8:cf:2f:a4:1b:b5:8e:f7:ea:30:dd:65:81:ae:a3:
f3:ac:a6:4f:6a:f1:ab:16:6f:58:d9:5b:64:4b:44:d0:41:c2:
82:b6:ae:83:05:df:d8:70:b0:84:bd:64:ea:de:0b:ea:2d:74:
86:df:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:12:36 2025 by rpki-client