Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/CvSOLLMd7KLWqBdHkc9Y2hj56Rg.roa
File: CvSOLLMd7KLWqBdHkc9Y2hj56Rg.roa (raw, json)
Hash identifier: t1WtiitrYfBtGyTOQXYz3bszjJ4Bf1fN6MEkbxT0gNg=
Subject key identifier: 0A:F4:8E:2C:B3:1D:EC:A2:D6:A8:17:47:91:CF:58:DA:18:F9:E9:18
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 0195298B7F07A90D5DA86982526DA6D14AB2
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/CvSOLLMd7KLWqBdHkc9Y2hj56Rg.roa
Signing time: Fri 21 Feb 2025 17:26:02 +0000
ROA not before: Fri 21 Feb 2025 17:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 146.19.50.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
194.26.218.0/24 maxlen: 24
213.134.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 17:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:8b:7f:07:a9:0d:5d:a8:69:82:52:6d:a6:d1:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Feb 21 17:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af48e2cb31deca2d6a8174791cf58da18f9e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:7e:13:a2:11:9b:94:8d:d4:e5:dc:ed:8a:
2c:24:87:d0:ec:2c:cd:17:fc:78:99:47:eb:ac:ec:
07:54:76:f5:d3:5b:46:ce:19:45:9f:e6:0c:c9:e0:
a8:37:37:e5:89:9c:49:40:7c:56:2f:1b:06:c0:d9:
34:28:bd:37:a7:e8:9f:9b:ad:e4:16:74:03:3e:f5:
f5:64:22:39:c7:5b:f7:13:1a:54:a9:e1:50:c3:29:
82:72:92:35:54:78:df:85:50:c8:37:dd:ce:41:e9:
ff:df:d8:9a:17:ed:a0:ea:18:32:c2:c5:8f:01:62:
e5:e9:19:54:8e:ac:a7:f6:96:2b:ab:c4:d5:70:d3:
1c:e6:11:42:89:04:eb:d6:51:f1:5c:70:09:26:e8:
fe:15:fa:fc:8d:a0:63:dd:c7:e1:14:64:7f:bf:10:
55:03:83:be:ce:39:d0:d9:75:12:85:08:f0:60:62:
2f:59:3f:5b:a1:3d:84:e0:0e:42:55:ff:23:1b:d8:
51:e0:b6:22:57:2e:b3:84:6d:19:4a:aa:52:3c:9a:
3d:ad:94:72:3c:07:51:2c:11:f7:94:04:85:29:54:
a9:4c:9b:79:41:76:e3:1e:a6:e3:a2:dd:52:7a:19:
3d:b7:1f:ec:e4:de:20:d0:bb:25:1c:b8:b0:45:c6:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:8E:2C:B3:1D:EC:A2:D6:A8:17:47:91:CF:58:DA:18:F9:E9:18
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/CvSOLLMd7KLWqBdHkc9Y2hj56Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
185.214.166.0/24
194.26.218.0/24
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f4:3d:9b:63:70:eb:5c:d1:5d:8a:28:1e:3a:51:89:b6:83:
e4:de:f2:1c:cb:b2:5e:17:f8:40:7e:55:ca:f1:44:ec:32:5b:
b0:1b:b0:03:00:a2:05:11:80:73:e8:25:76:8f:8c:b7:14:6e:
d3:e8:87:a9:65:46:27:7f:2a:a5:e1:27:84:2e:88:e3:cf:60:
f9:17:4d:61:ba:c8:d9:66:19:4f:c0:50:f4:e9:1e:50:94:6d:
66:de:4b:26:1c:0a:af:94:30:2c:6c:5a:7b:64:00:ed:c0:10:
50:c4:27:56:00:93:60:d6:8a:04:d2:a5:84:37:50:8e:e1:f0:
ad:91:6b:09:e8:b9:36:ac:12:ac:ef:dd:3a:bd:b1:d7:29:95:
de:9e:38:90:aa:82:6b:13:b5:8e:01:17:3f:36:b5:c1:38:2b:
2a:56:e8:f5:99:e2:13:b9:a0:9f:77:c5:43:ad:1c:d0:f2:05:
80:39:8c:5e:02:1d:0e:7e:fc:56:59:da:a7:f3:c9:75:d9:f5:
4d:40:55:43:d8:4d:d8:c3:89:7a:78:3a:f8:e4:ac:12:92:ce:
94:e5:04:fc:ee:cb:81:2f:e1:e1:b0:e1:d2:16:37:f7:fd:1d:
e4:0b:64:65:99:ad:3d:a0:f8:d9:6e:5e:23:11:4d:74:6a:ce:
0d:b3:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:26:14 2025 by rpki-client