Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/iWFGxpQK2CFWGfX5X8lidsmUtqQ.roa
File: iWFGxpQK2CFWGfX5X8lidsmUtqQ.roa (raw, json)
Hash identifier: B9RGFY6CC4Hwgr4SDFeBziWT8r8YnOSy5PD4CCgQ8nI=
Subject key identifier: 89:61:46:C6:94:0A:D8:21:56:19:F5:F9:5F:C9:62:76:C9:94:B6:A4
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 01936E5478F8E690448481DB1150EC1D8BBA
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/iWFGxpQK2CFWGfX5X8lidsmUtqQ.roa
Signing time: Wed 27 Nov 2024 15:54:10 +0000
ROA not before: Wed 27 Nov 2024 15:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 62.76.251.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
212.193.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 07:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:54:78:f8:e6:90:44:84:81:db:11:50:ec:1d:8b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Nov 27 15:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=896146c6940ad8215619f5f95fc96276c994b6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:87:78:6f:ab:8f:90:ef:b2:9e:58:d3:f2:
0e:d4:58:a3:92:c1:e4:c6:b7:e3:7d:e3:2a:ee:57:
c9:ce:2f:1d:2f:d7:bf:c7:09:35:2d:f0:5e:9f:14:
ef:2c:cd:e4:4e:a4:28:9f:e8:28:d8:69:12:3f:c7:
31:65:56:ad:46:4e:ac:c4:3a:31:d6:a5:c7:60:31:
d3:60:c6:51:6c:aa:78:5a:7b:b7:46:a1:a7:e6:d6:
f8:58:00:14:2c:29:7d:eb:96:b9:ba:ae:3c:ed:dc:
49:3a:ca:20:a8:36:8c:8d:1b:48:5d:11:96:92:1d:
e8:5d:0f:cb:16:f1:c0:82:f7:6c:2f:01:c5:a0:9e:
5c:e5:7d:a0:f5:06:90:04:c5:25:54:16:91:4a:73:
a1:68:9c:a0:3e:fa:1c:7a:dc:3b:f0:64:3f:1c:85:
9d:26:17:e6:14:e2:7c:a6:38:9e:56:3c:5b:77:a7:
4e:97:c5:db:09:c7:fb:f8:98:d1:44:05:85:08:fc:
02:4b:1d:a4:c2:70:b1:46:90:47:e2:9e:99:11:d3:
fe:10:a4:22:e2:ff:cb:fc:0f:ae:d9:42:36:32:49:
e6:dc:24:bf:99:1b:95:81:d2:35:ee:43:cc:a7:3d:
6f:e2:91:c0:34:30:2d:81:62:58:b9:81:b4:c2:f8:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:46:C6:94:0A:D8:21:56:19:F5:F9:5F:C9:62:76:C9:94:B6:A4
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/iWFGxpQK2CFWGfX5X8lidsmUtqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.251.0/24
194.85.31.0/24
212.193.118.0/24
212.193.123.0/24
Signature Algorithm: sha256WithRSAEncryption
54:52:01:0b:06:1b:e0:78:cb:ac:95:4b:da:34:fd:97:fc:45:
bd:75:e0:c0:37:17:ed:23:fc:c1:a7:cc:91:a0:b6:18:75:a8:
2d:63:e5:a9:42:84:67:4e:8e:53:c4:26:c7:71:3f:54:04:4b:
a6:f4:dc:68:cb:3d:c0:3a:de:54:14:06:88:39:76:f4:a4:9b:
8d:8c:4f:f0:c0:e9:e0:f5:d4:d5:72:df:92:05:00:82:d0:dc:
e7:0e:0a:8c:fb:5f:95:f4:84:2c:7b:2d:e3:9e:68:1f:d7:41:
e7:a5:4a:1f:3e:49:67:c1:e7:6e:90:cd:24:93:57:0f:2d:b9:
bf:d5:e6:68:33:91:c4:fb:11:c8:38:7e:ff:fe:d0:49:07:24:
4c:50:51:52:26:ed:a6:52:c3:6e:65:4a:85:45:cb:28:bf:9d:
f5:81:67:8d:bc:f0:92:38:5e:36:f3:77:92:4e:79:d6:5b:c9:
4a:16:61:16:5e:20:89:ff:ed:89:64:65:77:e3:41:af:06:3d:
49:43:7c:dc:09:ab:01:c0:be:4c:44:81:18:68:e3:f5:91:95:
0e:ed:93:78:ca:d2:e3:34:7d:53:5a:b5:26:44:11:3d:c9:eb:
18:66:04:fa:58:d3:96:b4:3f:a7:d2:2d:9e:93:1a:ae:27:94:
26:3d:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:14:09 2025 by rpki-client