Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/6LomDFRh2bGOh1DSObY7QABU4c0.roa
File: 6LomDFRh2bGOh1DSObY7QABU4c0.roa (raw, json)
Hash identifier: 4DJqXRPdv0I242fB53r3tf2W7TTJYrQgrMyyjH6lMYg=
Subject key identifier: E8:BA:26:0C:54:61:D9:B1:8E:87:50:D2:39:B6:3B:40:00:54:E1:CD
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0195195DA64B7CB6542CF04E655BA095C29C
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/6LomDFRh2bGOh1DSObY7QABU4c0.roa
Signing time: Tue 18 Feb 2025 14:02:02 +0000
ROA not before: Tue 18 Feb 2025 14:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 31.24.224.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
46.23.64.0/21 maxlen: 21
46.23.72.0/22 maxlen: 24
46.23.76.0/22 maxlen: 24
77.92.64.0/19 maxlen: 23
82.163.72.0/21 maxlen: 24
83.170.64.0/18 maxlen: 24
88.202.176.0/20 maxlen: 24
88.202.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 24
109.123.64.0/18 maxlen: 24
176.67.160.0/21 maxlen: 21
176.67.169.0/24 maxlen: 24
176.67.171.0/24 maxlen: 24
176.67.172.0/22 maxlen: 24
185.7.224.0/22 maxlen: 24
2a02:2498::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Feb 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:5d:a6:4b:7c:b6:54:2c:f0:4e:65:5b:a0:95:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Feb 18 14:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ba260c5461d9b18e8750d239b63b400054e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:b1:b6:93:1b:0b:1c:84:27:56:ba:d8:31:
5c:33:f3:78:ca:80:0d:a2:30:d9:87:e2:ce:1c:36:
87:ee:8a:29:18:61:71:10:71:e5:28:f3:1e:ed:2e:
74:68:97:d0:ef:90:2e:5c:7b:ca:35:f2:2e:2f:50:
40:e9:89:f5:e4:ae:6d:77:6a:e3:c1:2d:cf:e7:66:
f0:26:4a:32:01:03:e3:b3:95:c3:3d:07:47:68:6d:
c5:f5:76:21:5c:49:b4:e9:84:65:a5:58:34:bb:52:
16:c3:95:96:e5:a0:9d:ce:b6:9b:1c:80:56:8a:d0:
96:4a:d1:91:35:9a:0b:71:88:02:3a:8d:90:2b:95:
de:d7:82:04:45:12:60:1b:d3:77:55:0b:60:5b:93:
f4:4e:54:4b:b4:ef:af:4e:e0:46:5b:5b:a1:9b:ca:
78:3a:f1:9b:bb:3f:a3:91:74:5d:28:01:2e:0c:98:
71:09:c3:3a:e4:ab:99:2c:3c:2f:a4:e1:e6:ce:41:
89:9a:2f:59:dc:d2:c5:38:da:5b:f6:b2:be:9c:77:
9b:0e:13:fe:c3:07:81:48:c8:2c:af:6e:6a:92:3b:
7d:85:26:b1:8b:ee:f9:9d:dc:23:ae:65:da:6f:4c:
61:b2:b7:e0:31:0d:d8:68:27:37:8d:06:b2:9e:ca:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:26:0C:54:61:D9:B1:8E:87:50:D2:39:B6:3B:40:00:54:E1:CD
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/6LomDFRh2bGOh1DSObY7QABU4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/21
176.67.169.0/24
176.67.171.0-176.67.175.255
185.7.224.0/22
IPv6:
2a02:2498::/32
Signature Algorithm: sha256WithRSAEncryption
36:3c:2c:34:dd:a5:98:2b:24:1a:a1:8b:e8:79:4d:cd:75:b6:
b9:71:d2:95:15:ee:83:f8:27:04:42:64:b1:f6:dc:2e:c3:a1:
9c:5f:5f:db:59:5c:1d:d1:39:d3:e0:7c:bc:19:42:d6:9f:71:
d5:7c:4a:2d:83:6b:cb:ab:fc:21:54:de:30:69:e3:50:87:13:
ea:2e:34:e5:6a:b2:8c:c8:8d:c7:b2:3f:bc:1f:42:fa:f3:39:
52:cf:aa:23:74:a0:5e:e0:16:07:da:fd:7d:de:30:a8:f8:05:
e2:a9:3a:fc:e3:f5:a8:42:af:38:18:c7:10:24:3c:43:33:ac:
28:2c:3b:71:28:84:ea:77:1f:8e:24:7e:d6:0c:9b:0f:e3:c7:
59:d6:4e:3d:e1:b0:de:76:93:38:ff:b6:66:6a:58:5c:f4:8d:
d8:ee:9a:fb:a1:81:8c:0e:ef:d5:6f:82:b2:b8:8c:3c:bb:a8:
d8:8e:f6:07:e5:6d:5c:37:ac:ce:e8:8c:33:61:85:ac:04:43:
97:2a:a6:7b:a9:1d:32:a5:23:89:50:56:35:9f:5a:38:c1:40:
6b:9a:61:28:67:7d:85:00:49:32:49:3c:ae:65:bf:fe:21:9a:
ee:cb:f0:91:58:b8:85:8d:a6:76:9b:24:5e:2f:1c:c6:21:2d:
1b:12:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:39 2025 by rpki-client