Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/VI9Xzl4DUrOdh2pjBASqgCfWSf8.roa
File: VI9Xzl4DUrOdh2pjBASqgCfWSf8.roa (raw, json)
Hash identifier: apNvgjURYYBwVd1ArJeQrMh1O+y8Y5XczGLEhnmA56c=
Subject key identifier: 54:8F:57:CE:5E:03:52:B3:9D:87:6A:63:04:04:AA:80:27:D6:49:FF
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0193B2AE38995AAF454DB6C9CA14C4E3714F
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/VI9Xzl4DUrOdh2pjBASqgCfWSf8.roa
Signing time: Tue 10 Dec 2024 22:26:22 +0000
ROA not before: Tue 10 Dec 2024 22:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:3d1::/48 maxlen: 48
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:2800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
2a14:3f87:9800::/38 maxlen: 38
2a14:3f87:fc00::/38 maxlen: 38
Validation: Failed, certificate revoked on Mon 16 Dec 2024 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:ae:38:99:5a:af:45:4d:b6:c9:ca:14:c4:e3:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Dec 10 22:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=548f57ce5e0352b39d876a630404aa8027d649ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:af:2f:51:aa:d8:85:80:3f:47:5e:35:d0:
1d:55:a4:f6:bd:e3:98:93:32:a8:84:71:9d:17:3e:
37:16:4b:48:69:4c:c3:70:18:50:d3:17:8c:d7:23:
88:0c:64:b1:32:56:53:31:28:f3:22:1c:5f:59:5a:
2e:3a:b4:bb:ab:a9:27:c9:ab:e2:bb:8b:cc:f3:90:
20:b0:89:ca:a8:ab:bd:c4:c1:51:a6:f4:b7:d1:c9:
b1:a6:26:de:b9:d4:f9:06:04:29:12:20:56:c5:43:
a5:d9:09:32:9f:b5:6f:29:53:05:17:36:e5:a5:44:
aa:62:47:8d:dc:d0:3b:13:83:ea:63:d8:7f:19:ae:
7f:ea:ff:0f:f7:01:48:30:98:40:e1:8d:f0:1a:c9:
68:2d:92:ae:a8:8b:20:a9:35:65:0e:fe:bb:fa:80:
05:a1:e6:f8:c5:79:83:02:a0:bb:ab:b6:78:04:4f:
f3:2f:48:2d:ba:ec:4d:69:d3:da:2f:49:8c:bb:1e:
fd:2a:78:7a:0d:8a:d0:d0:50:ea:a1:80:3d:d4:b3:
2b:3c:09:89:50:e6:cc:85:21:28:d0:f9:92:cb:0b:
af:fc:f1:a7:a0:8e:3e:21:a4:94:d7:b4:20:1e:bb:
eb:b9:11:bb:c9:68:6b:40:f1:82:9b:04:f7:8f:ed:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:57:CE:5E:03:52:B3:9D:87:6A:63:04:04:AA:80:27:D6:49:FF
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/VI9Xzl4DUrOdh2pjBASqgCfWSf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:3d1::/48
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:2800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
2a14:3f87:9800::/38
2a14:3f87:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
98:41:b4:7f:8a:cd:8f:42:7d:93:a5:7b:e8:65:ef:15:ff:06:
97:a2:f2:88:73:12:e1:3e:0c:fa:16:97:c8:f5:7a:a5:e2:60:
3d:e7:ca:46:90:23:72:4f:56:d6:84:ca:8f:80:ab:56:00:ac:
c0:08:24:77:0e:08:f8:b4:31:65:4a:fa:96:93:f2:3c:e3:75:
e3:1f:06:a6:c6:29:21:dc:76:fb:1f:30:ac:ad:18:d4:fc:c1:
46:24:1e:ba:21:fa:c5:8e:a6:f3:e4:e3:33:8b:18:d7:e6:13:
42:32:0a:df:90:e5:df:43:a2:7e:4f:a9:09:26:d4:83:ad:5a:
3a:db:51:9b:cf:1b:c4:ed:02:02:3e:01:fa:1b:7e:e2:94:57:
54:ca:ff:04:01:48:81:6f:49:98:3b:d4:7c:47:91:f1:6e:42:
b7:7a:ac:91:8d:09:50:34:45:ba:bd:34:0b:87:c8:26:0b:6a:
51:c9:78:0c:96:68:fb:28:34:bc:2e:82:75:e5:0e:e0:f6:fb:
5c:dd:9d:06:f6:91:2c:23:69:f6:98:3d:81:e7:19:f2:e8:d7:
ca:c6:c6:74:bd:7c:cc:23:d0:7e:ea:a1:03:56:83:5e:03:5d:
62:a5:10:bb:fa:5d:fc:1f:5b:30:52:ab:42:a9:65:c4:d2:9d:
43:d6:a9:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:08 2025 by rpki-client