Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/P1ckiVHsy2aI1GMIwntOBDGO5cg.roa
File: P1ckiVHsy2aI1GMIwntOBDGO5cg.roa (raw, json)
Hash identifier: 95hf4WxG7u4vMm3lo8dzIv5zWggVtQOsj+c+12aYkpE=
Subject key identifier: 3F:57:24:89:51:EC:CB:66:88:D4:63:08:C2:7B:4E:04:31:8E:E5:C8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019542ACE9D26F2D8644A71348D4803811C2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/P1ckiVHsy2aI1GMIwntOBDGO5cg.roa
Signing time: Wed 26 Feb 2025 14:33:03 +0000
ROA not before: Wed 26 Feb 2025 14:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48803
IP address blocks: 193.183.148.0/22 maxlen: 22
193.183.192.0/22 maxlen: 24
193.183.212.0/22 maxlen: 22
193.183.250.0/23 maxlen: 23
193.234.72.0/22 maxlen: 22
193.234.108.0/22 maxlen: 22
194.68.117.0/24 maxlen: 24
194.132.224.0/22 maxlen: 22
194.132.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:ac:e9:d2:6f:2d:86:44:a7:13:48:d4:80:38:11:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 26 14:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f57248951eccb6688d46308c27b4e04318ee5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:ef:e3:56:05:d8:a5:48:5a:4d:c0:8f:d3:
84:5f:8f:78:86:b9:f2:a3:a4:be:36:64:d6:10:b4:
40:66:cb:7a:ce:3b:fd:7c:8d:42:12:b8:16:a0:97:
80:0c:c9:3c:db:2f:43:c9:86:c4:78:c0:fc:b8:fe:
66:29:9c:95:92:f6:19:e2:14:48:9d:b0:74:19:7a:
2b:22:fa:26:51:08:67:cc:f5:bf:83:ec:58:24:0e:
0c:e9:0f:cc:c6:f0:24:23:29:00:79:96:f7:fa:e5:
1c:27:0c:2d:cd:cd:42:36:85:88:b3:ea:d6:6a:5f:
78:5b:2c:4e:ae:e5:57:bd:ff:b1:75:0e:12:0b:2c:
80:e7:5d:ac:af:61:b8:11:52:6b:75:58:41:6a:1b:
7e:3c:7e:fd:96:aa:88:8a:5a:26:a3:91:b3:53:a8:
6c:79:8a:3b:76:16:b5:fd:83:1d:ab:72:ce:51:8f:
42:22:ce:bb:bc:be:3c:71:f7:14:cd:14:02:b0:7e:
f9:8d:8c:94:be:f5:d5:31:d1:3b:65:47:d2:95:85:
02:e0:72:92:8f:f8:15:ce:8c:b0:d7:46:b6:68:7d:
01:0b:6f:90:be:3e:18:5d:b9:ac:f6:ee:6e:86:e3:
a7:df:ee:73:82:98:d0:dc:dd:4a:cc:16:29:d5:c6:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:24:89:51:EC:CB:66:88:D4:63:08:C2:7B:4E:04:31:8E:E5:C8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/P1ckiVHsy2aI1GMIwntOBDGO5cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.148.0/22
193.183.192.0/22
193.183.212.0/22
193.183.250.0/23
193.234.72.0/22
193.234.108.0/22
194.68.117.0/24
194.132.224.0/21
Signature Algorithm: sha256WithRSAEncryption
85:5e:5d:b8:db:d0:d5:6a:b4:fc:b8:26:b1:46:9d:64:8f:b1:
a3:15:62:75:63:71:8a:9c:4c:2c:92:99:71:69:15:9d:aa:c9:
c8:86:db:22:77:ca:b2:7e:f4:30:ee:21:ec:e3:cb:c9:d8:a1:
e9:c9:9d:40:1b:f6:8b:45:f0:be:78:c8:13:83:f4:fb:5c:aa:
b0:b4:19:ca:44:55:04:8a:b5:f0:3f:9b:db:8f:f0:de:cb:e0:
2e:44:2c:9d:9b:40:9a:e4:00:3c:8f:87:fb:3e:78:d9:f8:09:
ac:4a:b1:9c:f4:aa:84:68:1e:9c:fc:70:36:26:43:9d:85:19:
d8:7e:78:0f:50:2b:8e:7a:88:63:f8:de:50:c7:26:14:93:14:
dd:28:5c:89:03:f1:14:d5:a8:46:07:7b:a7:19:b2:17:57:e3:
fb:05:a5:ba:fe:fe:4d:81:b0:65:7c:49:51:76:d5:da:ca:d6:
f8:3b:5f:11:bb:7d:c9:1d:b4:57:b5:5d:43:e4:16:7e:0c:04:
88:99:36:b8:70:90:95:f8:5f:6e:07:16:1d:ee:24:72:d5:7c:
6c:6a:00:3f:1a:22:e8:5c:31:47:09:f5:eb:f6:b7:37:bf:c2:
79:65:ad:38:9b:ab:ae:c3:6a:23:47:b1:f9:c1:4d:0c:50:0c:
6e:35:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:52:41 2025 by rpki-client