Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/Srp6mx1n9SnfDZzycYshlY38SKY.roa
File: Srp6mx1n9SnfDZzycYshlY38SKY.roa (raw, json)
Hash identifier: POXko7tznzi0QCFGGkG3qCGsOQc9FdYQmaxS7kyMQmI=
Subject key identifier: 4A:BA:7A:9B:1D:67:F5:29:DF:0D:9C:F2:71:8B:21:95:8D:FC:48:A6
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019425FC126CF31055837D0546F345938D81
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/Srp6mx1n9SnfDZzycYshlY38SKY.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12897
IP address blocks: 5.182.236.0/22 maxlen: 22
45.10.60.0/22 maxlen: 22
45.14.188.0/22 maxlen: 22
45.93.108.0/22 maxlen: 22
45.128.180.0/22 maxlen: 22
45.131.36.0/22 maxlen: 22
45.136.168.0/22 maxlen: 22
45.143.76.0/22 maxlen: 22
46.243.80.0/21 maxlen: 21
85.132.192.0/19 maxlen: 19
92.119.8.0/22 maxlen: 22
94.16.64.0/19 maxlen: 19
94.46.64.0/19 maxlen: 19
95.131.96.0/21 maxlen: 21
134.101.16.0/20 maxlen: 20
149.249.128.0/19 maxlen: 19
185.9.28.0/22 maxlen: 22
185.117.68.0/22 maxlen: 22
185.189.140.0/22 maxlen: 22
185.194.64.0/22 maxlen: 22
185.238.252.0/22 maxlen: 22
195.80.52.0/22 maxlen: 22
212.232.80.0/20 maxlen: 20
213.157.0.0/19 maxlen: 19
213.188.96.0/19 maxlen: 19
2a02:b98::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:12:6c:f3:10:55:83:7d:05:46:f3:45:93:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aba7a9b1d67f529df0d9cf2718b21958dfc48a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:7e:83:72:49:aa:c7:ea:40:c1:f2:6a:88:
ae:3d:5c:11:40:79:57:4c:23:7e:0d:2d:40:32:78:
a3:96:3a:a3:81:16:06:e5:27:d6:63:e1:7e:f0:5e:
83:3f:ee:63:c0:9e:ba:64:d3:7c:2c:2f:eb:ca:cd:
99:de:70:0f:a1:da:97:9e:3d:c1:34:8d:85:61:f9:
d1:d4:92:9d:46:7c:e5:59:89:86:25:90:32:40:fb:
47:78:a3:f7:d7:dc:6d:6a:fe:bd:0c:95:88:2b:39:
02:47:cf:f8:7b:e7:ac:66:ec:47:f4:cf:d7:3f:72:
4e:5d:33:98:82:33:e9:cd:9d:5f:2d:e3:70:d9:55:
14:13:af:b4:bd:1e:03:f4:9a:45:80:f8:7a:01:f6:
5e:86:36:a9:d5:30:b2:39:18:ff:40:26:d8:96:45:
cb:e3:83:54:77:c6:78:84:a4:94:40:09:c7:30:77:
45:a2:cc:40:af:c2:ac:4b:0c:f5:65:e0:7d:a1:5f:
99:32:fe:1f:81:92:a5:1f:f2:db:24:8b:e3:5e:6e:
05:30:47:61:12:b2:e1:9d:bc:a9:3f:3b:cd:c4:53:
31:a2:67:18:e8:f5:a6:8b:a0:10:09:b9:b4:96:8c:
0e:1a:bd:78:95:16:8d:93:dd:a2:e2:69:83:5e:e5:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BA:7A:9B:1D:67:F5:29:DF:0D:9C:F2:71:8B:21:95:8D:FC:48:A6
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/Srp6mx1n9SnfDZzycYshlY38SKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.236.0/22
45.10.60.0/22
45.14.188.0/22
45.93.108.0/22
45.128.180.0/22
45.131.36.0/22
45.136.168.0/22
45.143.76.0/22
46.243.80.0/21
85.132.192.0/19
92.119.8.0/22
94.16.64.0/19
94.46.64.0/19
95.131.96.0/21
134.101.16.0/20
149.249.128.0/19
185.9.28.0/22
185.117.68.0/22
185.189.140.0/22
185.194.64.0/22
185.238.252.0/22
195.80.52.0/22
212.232.80.0/20
213.157.0.0/19
213.188.96.0/19
IPv6:
2a02:b98::/32
Signature Algorithm: sha256WithRSAEncryption
78:4f:94:92:7d:11:fe:93:7a:fc:37:94:1c:b9:86:b1:3c:e4:
77:2f:a7:eb:9d:47:56:75:ca:a6:da:0e:bb:79:78:89:c1:88:
0e:3f:a0:1b:3d:48:75:76:77:6a:fc:37:a4:9f:9d:01:6c:dd:
e4:26:67:ab:68:24:b5:b8:a4:e8:9a:d4:8e:64:fc:a2:9a:c9:
8a:7c:31:eb:7f:c6:86:50:54:07:53:c1:fc:ed:63:3b:d6:d5:
05:16:e8:dc:47:26:91:7c:d6:07:26:b0:e3:95:4c:7a:86:0e:
b3:f1:1e:26:6e:2a:20:49:af:cf:e4:3e:10:a2:d9:89:d6:b4:
9a:83:3a:64:6e:28:17:48:57:a1:df:e4:57:0a:42:da:df:76:
f2:46:8a:e7:ba:60:35:30:e9:11:df:95:4d:14:9d:f5:77:89:
22:89:a2:f6:20:72:45:c0:f6:68:be:98:b9:50:1e:b5:d4:34:
d7:09:35:52:0a:05:41:b3:f2:19:04:74:3b:bb:ce:2e:d6:87:
b3:c2:e9:ae:30:71:7f:cf:ce:a2:f4:93:df:71:44:39:f5:a1:
7d:20:12:7f:11:e8:ab:26:0b:ba:af:a7:7a:c8:77:90:e3:52:
e5:c3:17:7e:4e:0d:a7:f4:90:28:6f:61:c3:db:9e:e2:26:f4:
61:eb:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:40:36 2025 by rpki-client