Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Fm4226eBIHKiPrHVoVDLDZ5L410.roa
File: Fm4226eBIHKiPrHVoVDLDZ5L410.roa (raw, json)
Hash identifier: dIgn8am47JWpQZMPVZr63B5bHcmb955DNl1qMBH3nV0=
Subject key identifier: 16:6E:36:DB:A7:81:20:72:A2:3E:B1:D5:A1:50:CB:0D:9E:4B:E3:5D
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0195A35A2951E4E67484AFF34E84714056DD
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Fm4226eBIHKiPrHVoVDLDZ5L410.roa
Signing time: Mon 17 Mar 2025 09:05:49 +0000
ROA not before: Mon 17 Mar 2025 09:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.64.0/18 maxlen: 22
37.98.114.0/24 maxlen: 24
93.117.176.0/20 maxlen: 24
93.119.208.0/20 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.4.0/24 maxlen: 24
178.131.64.0/19 maxlen: 22
178.131.104.0/21 maxlen: 22
178.131.112.0/20 maxlen: 22
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 17 Mar 2025 09:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:5a:29:51:e4:e6:74:84:af:f3:4e:84:71:40:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Mar 17 09:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=166e36dba7812072a23eb1d5a150cb0d9e4be35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:93:c4:e2:49:fc:6b:ad:4f:6c:5a:5e:38:
61:fc:ba:5e:96:6b:04:a3:08:f1:c5:69:aa:aa:dd:
5e:9e:ed:34:16:8e:5f:3f:fb:6a:38:bf:ab:7c:62:
2c:05:fb:f0:a8:fb:56:a2:78:6a:ec:c1:21:e8:ed:
0e:cd:d1:98:12:d8:fc:d2:58:ec:b2:9d:4f:07:14:
f3:eb:74:52:13:46:5d:8a:9b:80:9a:5a:a9:7a:76:
b8:cf:a2:b9:59:39:29:d4:79:8c:2f:cb:13:84:d1:
93:9b:89:31:d2:64:ef:12:69:95:82:34:b0:9a:10:
a8:60:6e:a6:e8:c9:2d:58:74:fa:d2:5a:b5:29:55:
ac:c9:7c:fc:a6:18:40:f6:eb:a1:51:df:31:1b:81:
ba:5e:c5:fd:55:fb:c9:65:d5:11:39:84:7b:d8:2a:
46:96:c7:49:c9:3a:ba:80:38:80:ed:9c:c1:2b:03:
22:78:d9:03:cb:ed:f6:80:a7:07:c2:b9:73:b9:5f:
6d:0d:28:7a:5d:0f:3a:a4:04:79:b6:0d:66:40:c6:
0e:bd:e6:67:1e:08:8e:a4:48:81:af:b4:1f:ee:28:
86:ec:b6:a5:9f:15:a6:70:1b:7e:f3:f4:83:cc:35:
ae:74:0e:18:64:42:47:46:56:da:d1:bf:f2:36:c6:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6E:36:DB:A7:81:20:72:A2:3E:B1:D5:A1:50:CB:0D:9E:4B:E3:5D
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Fm4226eBIHKiPrHVoVDLDZ5L410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
93.117.176.0/20
93.119.208.0/20
178.131.0.0-178.131.95.255
178.131.104.0-178.131.191.255
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
78:4c:94:48:a7:42:a6:87:5d:19:6c:7c:3b:3a:52:2e:d2:18:
e9:12:02:b9:1f:55:09:1e:af:e1:82:69:78:e0:59:df:68:d2:
b5:b4:0f:54:85:5d:50:6a:9e:66:df:01:5e:1b:c1:11:2e:5e:
63:e2:e7:a2:18:d9:f6:74:04:64:13:c6:68:a3:5e:ec:fb:b5:
3b:88:f0:78:a9:a8:c5:42:0b:f1:f3:36:59:e2:27:fd:41:45:
f6:17:d0:d7:41:aa:3a:ed:30:62:d9:96:3d:f6:27:74:4b:08:
57:04:f4:59:68:c6:67:d5:1d:8e:34:16:a1:dc:d7:82:72:3b:
77:24:7c:d7:fd:bb:f9:e0:1d:ce:d8:fb:99:b7:2c:a6:7a:a2:
ac:74:ad:3b:6c:6f:03:2e:3c:4e:bd:95:e2:94:b2:a5:b5:9f:
25:d3:5e:b0:28:23:f0:6a:59:26:8a:af:9f:e9:d8:b7:94:7c:
e5:1f:d5:a6:04:aa:f4:1a:00:fc:71:f8:1a:d3:c8:00:ba:73:
4f:a0:f9:4b:a3:5c:1d:9e:67:b3:fa:4d:69:f4:b4:d9:fe:ed:
6c:a0:4b:25:21:01:9c:64:89:bb:52:c4:d1:6b:62:f5:33:15:
b5:0d:48:ec:cb:21:da:db:ad:45:2d:db:35:04:b0:fd:fe:ee:
57:71:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:19:54 2025 by rpki-client