Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/2Ge36p7C8D5t14md3_BocR9v6YY.roa
File: 2Ge36p7C8D5t14md3_BocR9v6YY.roa (raw, json)
Hash identifier: hTHMnUIjrH+Xw2yhixTg/BwEqNx5tY13GoejWt93G+A=
Subject key identifier: D8:67:B7:EA:9E:C2:F0:3E:6D:D7:89:9D:DF:F0:68:71:1F:6F:E9:86
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01963936BB7F88AE64574562BFAEDF697E32
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/2Ge36p7C8D5t14md3_BocR9v6YY.roa
Signing time: Tue 15 Apr 2025 11:30:10 +0000
ROA not before: Tue 15 Apr 2025 11:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 195.66.32.0/19 maxlen: 19
213.112.0.0/14 maxlen: 14
213.163.128.0/19 maxlen: 19
2a02:1400::/26 maxlen: 26
Validation: Failed, certificate revoked on Wed 16 Apr 2025 07:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:36:bb:7f:88:ae:64:57:45:62:bf:ae:df:69:7e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Apr 15 11:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d867b7ea9ec2f03e6dd7899ddff068711f6fe986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:bd:22:10:70:e6:2a:c5:b5:ac:4a:0f:19:
2a:84:ca:af:8b:93:f6:70:4e:d5:a0:77:ad:21:4d:
e2:23:07:0b:bb:6b:9f:b7:a3:70:91:51:8a:44:be:
02:c2:6d:ee:fa:b4:f2:83:01:f6:38:a0:1f:4f:66:
d3:74:a5:6c:d6:fd:23:21:47:39:6b:1b:a8:f9:92:
59:7b:48:b6:37:15:e9:3f:c4:8b:83:eb:64:03:df:
85:50:81:55:e7:a8:67:56:7c:98:84:dc:f9:d0:96:
67:55:8c:c5:c5:9c:ff:c4:8b:dc:a2:f5:67:a8:61:
8f:3b:9a:36:60:95:db:22:fe:e8:02:0a:6c:f0:b6:
59:0a:da:78:d7:f4:1f:1b:d8:39:60:62:98:2c:5d:
53:2b:c5:b2:84:40:66:ad:d6:b4:ad:2a:51:72:16:
3e:5a:70:f8:e7:da:21:c3:b1:b9:04:e6:a6:94:10:
fa:96:f4:28:f0:b2:ee:90:ee:77:d2:15:4a:13:0a:
83:c1:f2:79:dd:f6:30:e4:14:59:7b:48:58:34:0f:
40:2b:e9:15:87:9c:24:b4:ef:4c:a9:3b:0c:33:70:
1a:6c:7a:ea:42:17:ce:8e:84:d5:48:20:4d:a9:86:
bf:35:83:17:e5:1c:ce:df:f5:a7:32:90:99:73:69:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:B7:EA:9E:C2:F0:3E:6D:D7:89:9D:DF:F0:68:71:1F:6F:E9:86
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/2Ge36p7C8D5t14md3_BocR9v6YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.32.0/19
213.112.0.0/14
213.163.128.0/19
IPv6:
2a02:1400::/26
Signature Algorithm: sha256WithRSAEncryption
1b:0d:4c:63:c9:dc:f2:5b:01:7b:9e:29:39:bf:18:b3:9e:6d:
6c:d4:6a:63:02:7f:9d:e2:9c:d6:2c:b1:43:3b:b6:fa:9c:d4:
93:0b:11:9a:f2:ab:75:b0:bb:02:39:8f:d2:0f:ed:44:02:98:
d3:c0:8b:71:1c:3f:d4:b1:75:bc:64:34:f5:e6:d0:8f:1c:c4:
0d:5f:98:82:71:79:9d:0f:f2:4a:ba:3e:29:06:0c:c9:df:60:
a0:e0:5b:3f:79:bb:4e:4b:99:70:1e:37:43:41:73:bf:28:bc:
82:40:be:a8:36:1c:4c:23:9a:88:a8:b8:e4:5b:d8:7c:79:b3:
42:07:26:7c:fd:9d:ce:99:39:5c:39:f6:6a:59:8c:92:a5:22:
4a:ca:c0:56:1a:42:46:47:8f:70:07:16:c5:fa:4f:ab:df:b6:
be:7f:b7:ec:f9:4e:be:56:ce:18:ea:d8:47:e9:6d:a6:b3:fd:
5e:6c:1a:c1:6e:23:ec:2a:97:29:48:ea:eb:7c:63:e9:79:9b:
35:01:20:1f:0e:f8:1a:90:0c:32:c5:ed:32:0e:f0:ca:36:19:
de:8a:0b:8c:90:c4:a3:c2:5a:df:e6:26:ad:37:56:87:78:b9:
fc:4f:4f:c2:2a:98:81:12:3b:9d:e0:18:4b:16:f2:f7:00:e5:
82:a6:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:40:30 2025 by rpki-client