Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hX2DBMpSWf7mGbAWUdDazXjft8k.roa
File: hX2DBMpSWf7mGbAWUdDazXjft8k.roa (raw, json)
Hash identifier: 4vOLYvRS/qEXFN3yv5xznJY7sV7ktjcgT3X8Ab+GUDI=
Subject key identifier: 85:7D:83:04:CA:52:59:FE:E6:19:B0:16:51:D0:DA:CD:78:DF:B7:C9
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01943809446D40A1CA0AF938E5B0BC8BA843
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hX2DBMpSWf7mGbAWUdDazXjft8k.roa
Signing time: Sun 05 Jan 2025 19:55:18 +0000
ROA not before: Sun 05 Jan 2025 19:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 21:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:09:44:6d:40:a1:ca:0a:f9:38:e5:b0:bc:8b:a8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 5 19:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=857d8304ca5259fee619b01651d0dacd78dfb7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:0b:87:3b:74:a6:5e:b1:a7:b5:79:7a:99:
50:ab:10:32:f7:5d:68:06:ef:b4:b0:41:99:95:df:
39:36:dd:cd:2f:a0:41:62:1d:37:df:38:21:9e:a6:
e3:7d:29:8c:9a:2e:a9:cb:41:90:e0:5a:de:ac:10:
e5:90:06:c7:b7:33:84:89:55:d9:8c:40:65:79:31:
f5:b6:cd:16:87:81:d4:68:fd:6f:fe:8d:19:43:6e:
4e:49:5a:36:4f:d1:98:c1:42:55:73:a4:01:66:4a:
ec:38:db:f3:fb:d0:ff:df:71:61:ff:73:d8:6c:82:
ff:a8:8e:b1:9a:66:8d:cc:9d:d2:8b:6c:fe:8e:20:
92:4e:1b:8d:30:60:76:9a:a3:1a:2d:e8:f9:9a:3e:
bc:48:86:ad:76:28:b4:de:4c:0f:4d:10:79:62:72:
d7:13:3d:0b:2f:51:93:2b:cf:c9:6a:a6:2e:d2:ae:
f0:68:16:85:45:f1:6f:62:db:f8:d1:37:83:75:2c:
7d:01:7c:4b:cb:0b:36:05:28:05:ef:d2:5a:1c:e3:
32:f1:79:d4:70:4c:ae:51:76:42:64:ff:2c:0c:54:
10:bb:bc:bb:8a:38:7c:f4:59:a5:a9:61:2c:04:99:
3c:1b:1c:0f:1f:46:56:d3:07:c8:58:e8:34:23:7a:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:83:04:CA:52:59:FE:E6:19:B0:16:51:D0:DA:CD:78:DF:B7:C9
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hX2DBMpSWf7mGbAWUdDazXjft8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.45.0-89.43.46.255
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
58:69:ad:2f:bf:8e:de:03:fe:e2:08:95:0c:74:a8:39:68:7f:
9d:0b:58:92:c1:5e:ac:dd:aa:db:c3:50:9d:83:1a:fd:26:18:
90:3c:40:c9:33:7c:e9:c0:a7:56:d8:93:23:8a:20:72:15:8e:
a9:bf:b8:21:fd:79:07:d2:56:69:8c:2d:f2:93:c1:c5:2d:b3:
dd:cd:53:12:7c:1b:47:68:c9:fd:92:4f:b5:8b:2e:9b:8c:bf:
f8:db:ed:b4:67:50:97:59:7c:04:3a:e9:d4:9f:e4:7e:f5:28:
6b:77:69:47:81:c9:e1:0f:e3:91:eb:c5:29:2a:fc:63:6b:28:
0e:01:a7:a7:1b:69:26:70:4f:71:de:3c:c5:99:5b:77:86:a3:
03:d9:66:f9:ed:3d:3c:f6:c3:8b:9b:26:f9:03:50:76:fb:55:
6d:85:c4:94:07:ab:b6:a6:57:4f:40:7b:4f:f5:4d:41:66:c0:
c2:b6:be:4b:ad:00:f9:ac:e2:0a:f7:16:ae:8d:e6:09:ec:e6:
71:e2:c4:4e:c7:95:09:e1:13:94:95:23:b0:24:2d:00:ba:0a:
2b:81:3a:2b:9a:6a:f2:bc:d4:d4:8b:20:59:c6:39:c7:d9:d6:
44:d1:a3:a9:b4:77:9f:40:a4:82:fa:15:36:ab:af:bb:08:46:
1f:4f:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:47:01 2025 by rpki-client