Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/dMHpUm8VZEZVdiC1RHvrnwWe1JY.roa
File: dMHpUm8VZEZVdiC1RHvrnwWe1JY.roa (raw, json)
Hash identifier: Of0wvORtLarxkVZANVpreqxiAHgzR72qblwvfzcbvnY=
Subject key identifier: 74:C1:E9:52:6F:15:64:46:55:76:20:B5:44:7B:EB:9F:05:9E:D4:96
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 018CC424FEAA0597A1C4FD95F272DFD14DA2
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/dMHpUm8VZEZVdiC1RHvrnwWe1JY.roa
Signing time: Mon 01 Jan 2024 08:30:08 +0000
ROA not before: Mon 01 Jan 2024 08:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39049
IP address blocks: 94.231.32.0/22 maxlen: 22
195.66.136.0/24 maxlen: 24
195.66.136.0/23 maxlen: 23
195.66.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:fe:aa:05:97:a1:c4:fd:95:f2:72:df:d1:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Jan 1 08:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74c1e9526f156446557620b5447beb9f059ed496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:ad:1a:3f:28:b1:09:2c:8e:fc:ec:99:46:
34:46:ac:ab:1a:c3:cd:db:e0:3f:6d:69:96:9c:22:
a5:19:ab:8d:0b:21:2c:42:67:3f:b9:f9:2a:50:69:
69:c6:23:f5:2c:e0:90:83:11:71:00:08:47:f3:81:
ce:c6:3e:fa:1f:d3:ff:52:08:9d:4f:03:49:1c:5b:
2f:6a:0a:51:9d:cf:d0:af:16:0f:1b:8a:31:f7:93:
58:4f:5e:a9:5c:88:94:d2:b3:d5:6d:40:e6:67:8c:
67:39:2b:8c:32:b5:10:9f:59:0d:ef:a2:82:f6:8e:
92:0b:ca:94:1f:29:3c:1e:00:0a:05:0e:3b:ab:f0:
a3:32:e0:97:af:c5:8f:fe:48:bf:1d:fa:d0:97:39:
eb:a2:9b:85:7b:54:4c:ce:f8:0b:15:58:e9:bc:3e:
dd:eb:f6:cc:90:cf:38:e3:c0:49:06:ca:44:49:7c:
a5:fb:c8:e0:ce:43:d1:56:63:1e:62:b7:cb:1a:ae:
c5:8a:61:11:ff:d2:55:13:15:0f:b3:5b:89:61:7d:
9e:02:8f:dd:e9:6d:f0:25:57:bb:3b:ee:09:ed:a4:
b2:3a:c2:f5:a9:62:12:42:be:04:41:b9:5b:37:60:
b0:9f:9b:83:9c:6c:e8:8f:c5:54:00:65:e6:02:43:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C1:E9:52:6F:15:64:46:55:76:20:B5:44:7B:EB:9F:05:9E:D4:96
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/dMHpUm8VZEZVdiC1RHvrnwWe1JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.32.0/22
195.66.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:4e:98:00:8a:2d:48:d7:14:ea:6a:e7:20:52:c2:1f:fc:d0:
88:b9:d0:af:4a:f3:55:3d:19:79:f9:1e:bb:c9:75:fa:a5:4f:
4d:5a:da:01:93:3a:8b:05:2e:f1:f4:1e:7a:5d:76:52:2c:90:
34:6c:15:07:89:f3:4e:99:45:15:ad:24:56:ba:72:e1:5b:8b:
8d:ec:04:fc:a9:fe:15:38:8d:9e:30:8d:16:48:64:1b:60:67:
88:6a:6a:7e:36:ec:a6:e1:cb:95:72:0d:e2:f3:a2:64:27:82:
e0:ed:a5:f9:c5:ba:bd:38:40:76:81:5b:9f:1e:57:af:53:27:
4c:3e:5f:8c:75:df:32:3c:e5:93:b7:b4:7a:4d:47:0f:80:3c:
bf:90:01:37:18:c1:39:68:cd:5e:cc:3c:f9:78:bc:01:7d:96:
2d:38:25:a2:06:3f:fa:44:88:b1:0e:74:2a:0d:af:24:2d:e1:
b6:16:fb:2f:87:90:0c:f1:ff:b0:b2:da:2f:35:37:cb:49:e0:
80:aa:b1:fd:ce:b8:c1:7c:9c:40:85:47:9a:d0:ef:11:20:c7:
11:b4:00:f5:5b:1c:dc:67:81:5d:e0:f6:5c:2c:7e:47:cd:82:
90:e5:51:ee:52:2e:d0:d0:28:1f:a4:57:ba:20:15:60:72:9a:
a4:8d:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:52:32 2025 by rpki-client