Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IXA6Linl8Nx1MslqNLT2l31mVvg.roa
File: IXA6Linl8Nx1MslqNLT2l31mVvg.roa (raw, json)
Hash identifier: pl7WaVcYuMQvdvo9KX+sNEYbTwU9FAbxLVcXdO2FXsw=
Subject key identifier: 21:70:3A:2E:29:E5:F0:DC:75:32:C9:6A:34:B4:F6:97:7D:66:56:F8
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC793533588F66B8A73BBE60054BAE5FC
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IXA6Linl8Nx1MslqNLT2l31mVvg.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 195.180.224.0/22 maxlen: 22
194.163.192.0/20 maxlen: 20
195.180.196.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Mar 2024 15:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:53:35:88:f6:6b:8a:73:bb:e6:00:54:ba:e5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21703a2e29e5f0dc7532c96a34b4f6977d6656f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:2c:2b:68:29:82:fe:6c:77:a7:3b:85:69:
f9:f0:67:f2:a4:24:1a:13:ed:99:a7:29:32:88:db:
b1:2e:b9:cd:d6:7e:86:38:93:af:87:47:11:2d:1b:
22:d3:fe:f3:f2:c8:a3:f5:3e:b5:7a:d9:d3:a5:6c:
fa:7e:23:4e:ff:b0:15:be:f7:ce:20:71:38:8a:21:
f8:60:6b:81:5f:33:3b:f6:14:af:5b:22:ed:44:b4:
9d:3b:ca:ee:f9:3c:40:ea:a9:56:85:61:09:15:af:
de:e5:c9:09:62:2c:5d:92:23:6b:f8:f3:7e:95:54:
d2:39:e6:ca:85:8a:ee:ea:41:e3:c1:3d:08:5c:4d:
c2:17:1d:bc:ed:b2:37:13:09:34:78:0a:35:34:45:
37:87:39:bd:25:9c:dd:0d:7f:21:9c:ad:a7:c9:df:
91:98:bd:15:40:bb:7d:9e:ac:af:c9:24:25:ac:d5:
e2:09:53:e0:99:e5:11:f8:c6:8e:91:f5:35:17:8b:
61:70:f7:27:84:8b:17:cc:36:98:f9:3b:4e:1d:6a:
f5:1f:7b:74:81:47:02:36:10:8f:4c:22:25:7d:28:
d2:c7:5f:73:78:d1:22:7f:48:54:d7:5b:b8:dd:45:
2c:93:30:37:45:23:8f:3a:b1:a5:e3:cf:3d:c4:1a:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:3A:2E:29:E5:F0:DC:75:32:C9:6A:34:B4:F6:97:7D:66:56:F8
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IXA6Linl8Nx1MslqNLT2l31mVvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.152.0/22
194.163.192.0/20
195.180.196.0/22
195.180.224.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d1:26:2f:ad:f7:53:71:10:1d:17:08:a2:bd:ae:01:dc:37:
11:06:9b:8f:86:4d:82:65:ec:3c:1d:ea:78:db:a6:56:6a:44:
64:70:c3:8e:72:d5:5f:b0:c4:f7:96:30:e0:4f:af:25:8c:6a:
42:4a:1c:4a:27:83:69:82:af:b3:0a:91:9f:40:e6:35:5f:95:
62:19:bd:74:46:5c:5c:6b:f8:03:84:a8:79:5f:6e:d6:10:b4:
a9:0f:7d:d7:4c:50:9a:e0:cb:09:e3:bf:72:f4:e1:88:ea:3f:
2d:4f:fb:bb:6b:41:e4:fc:04:7b:86:3b:66:fe:e8:1e:c0:69:
2d:4c:6b:19:2b:ab:60:61:e9:15:da:ed:d4:e1:fe:9d:a8:8a:
3d:5e:c1:33:51:dd:be:a9:e8:96:a6:08:bd:77:c2:40:f4:40:
2a:39:e0:78:16:aa:53:6e:ea:a8:9f:b0:be:7a:02:a9:dc:e9:
4f:40:34:56:82:3f:d5:35:ee:9d:cc:1e:a5:d7:44:5d:70:1f:
22:4b:f8:2d:b9:b3:2f:ff:98:e1:1c:b3:43:b2:4b:ce:b6:a9:
91:b6:4d:0c:b4:08:97:fe:bc:b1:78:ef:43:25:32:97:3b:34:
40:ad:64:22:90:6e:11:f8:29:be:05:27:aa:64:ce:40:78:e4:
83:96:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:50 2025 by rpki-client