Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Skl2pcA8tSHqWKR6s8xFJwyWA8M.roa
File: Skl2pcA8tSHqWKR6s8xFJwyWA8M.roa (raw, json)
Hash identifier: hudvd4ehnfxk5lZ3WO8m1ytKO1PomHQrFKNz193iN7E=
Subject key identifier: 4A:49:76:A5:C0:3C:B5:21:EA:58:A4:7A:B3:CC:45:27:0C:96:03:C3
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0196A4F79355013A8D2ABDFC69B190F474D1
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Skl2pcA8tSHqWKR6s8xFJwyWA8M.roa
Signing time: Tue 06 May 2025 09:40:10 +0000
ROA not before: Tue 06 May 2025 09:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 77.95.120.0/21 maxlen: 21
85.118.216.0/21 maxlen: 21
185.63.150.0/23 maxlen: 23
212.103.64.0/19 maxlen: 19
212.103.64.0/24 maxlen: 24
212.103.65.0/24 maxlen: 24
217.11.208.0/20 maxlen: 20
217.146.160.0/20 maxlen: 20
217.146.165.0/24 maxlen: 24
2a00:c38::/32 maxlen: 32
2a00:c38:1a5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 May 2025 12:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:f7:93:55:01:3a:8d:2a:bd:fc:69:b1:90:f4:74:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: May 6 09:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a4976a5c03cb521ea58a47ab3cc45270c9603c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:cf:49:c8:d6:4c:d8:51:a2:a9:2c:f9:bd:
0d:cf:b9:2d:6f:94:08:73:2f:3b:cd:10:4f:52:e9:
fb:e3:89:c1:55:6b:4c:01:f0:f3:fa:46:f1:6e:8f:
b9:1b:c5:ad:5d:ec:7b:c3:29:65:8d:61:7a:7d:48:
07:f2:40:86:79:21:5d:24:49:cd:2f:be:4f:65:f5:
54:32:32:c9:07:2c:dd:bd:1f:ac:0d:88:6f:1c:b7:
b6:77:0c:ca:95:76:5a:8c:86:01:01:b7:75:a9:82:
2c:8f:51:59:44:81:90:54:90:a2:72:d6:73:b1:52:
a7:04:c1:a2:d2:48:bb:2d:ba:a1:9e:12:92:3c:1f:
b8:28:91:e3:4b:71:e9:5a:6a:82:52:97:98:6c:a5:
75:76:1c:7e:2f:05:e3:8b:92:99:5d:34:e1:0a:ce:
f6:a9:e0:44:d9:18:d2:c0:fe:3c:c5:03:d1:01:7c:
16:8f:02:9c:66:6d:37:7c:3a:bb:65:9c:f3:c1:9d:
a0:56:57:c0:a0:c6:cb:f8:3b:2d:5e:d8:16:5c:91:
4f:83:f2:d9:e9:eb:d6:8c:21:b6:e7:42:a1:70:b6:
ea:82:ef:1d:85:20:e4:39:b1:c7:5f:b3:19:4a:9c:
f1:20:bd:4e:5c:62:e8:ed:04:dd:3c:7c:a6:cc:ba:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:76:A5:C0:3C:B5:21:EA:58:A4:7A:B3:CC:45:27:0C:96:03:C3
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Skl2pcA8tSHqWKR6s8xFJwyWA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/21
85.118.216.0/21
185.63.150.0/23
212.103.64.0/19
217.11.208.0/20
217.146.160.0/20
IPv6:
2a00:c38::/32
Signature Algorithm: sha256WithRSAEncryption
45:5d:2b:41:61:67:93:1e:1f:05:10:52:af:cf:f2:22:2f:cf:
fc:8e:9a:1a:14:39:19:45:fa:a6:c3:98:b7:44:95:a6:60:dd:
d6:6d:5c:07:e6:ef:4f:02:a4:74:5a:aa:d7:ff:f5:1d:61:6f:
af:c4:ed:b0:57:90:d8:a3:ca:ad:40:bc:b6:dd:74:0d:de:04:
72:4a:4a:a6:9b:d6:7c:d6:13:83:84:56:ba:bb:5e:bc:0c:ea:
e9:4b:ec:81:4a:8e:e1:f3:3b:a6:6f:c4:64:a5:93:a8:a7:bb:
7f:29:91:0a:38:e0:8b:14:c5:ce:41:a7:e1:79:f8:ec:92:4c:
f8:40:ba:b4:19:f0:3c:0b:00:7b:a5:7e:2b:96:ea:9e:be:83:
34:36:57:0f:0f:f0:9f:e8:1b:6e:36:06:15:5c:29:4b:a6:e0:
d8:17:8d:49:c1:de:26:05:c7:14:12:fd:18:c0:83:10:51:f5:
83:60:a6:77:b8:6f:26:ee:94:3a:ad:11:22:82:97:4c:c8:3c:
6c:e2:44:88:cd:2a:09:e1:4e:07:13:24:10:06:bf:34:7d:d4:
26:e1:6f:01:43:b9:28:59:cb:84:3d:d7:11:2d:fd:f3:b0:85:
30:fe:a7:34:e3:c3:b8:1e:31:db:73:5c:6d:8e:de:c5:89:07:
07:01:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:54 2025 by rpki-client