Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/77Kh32bENgkkwEA6DyZRm0Syg9k.roa
File: 77Kh32bENgkkwEA6DyZRm0Syg9k.roa (raw, json)
Hash identifier: dpS3sCOZao9X2jgtpdNu1Hnb2RG9o6ZNg3QIwfX3pjA=
Subject key identifier: EF:B2:A1:DF:66:C4:36:09:24:C0:40:3A:0F:26:51:9B:44:B2:83:D9
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 019425FCC7B3BAE212CE44DBF035F9BB1C51
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/77Kh32bENgkkwEA6DyZRm0Syg9k.roa
Signing time: Thu 02 Jan 2025 07:48:30 +0000
ROA not before: Thu 02 Jan 2025 07:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48926
IP address blocks: 37.143.112.0/21 maxlen: 21
94.142.232.0/21 maxlen: 21
178.248.248.0/21 maxlen: 21
185.75.116.0/22 maxlen: 22
2a03:a900::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 18 Jan 2025 10:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c7:b3:ba:e2:12:ce:44:db:f0:35:f9:bb:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb2a1df66c4360924c0403a0f26519b44b283d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:11:bf:8f:a0:0e:99:6f:fe:ff:88:e3:6a:
6c:61:1c:7f:db:bc:a2:66:7e:f5:f5:ea:41:fa:47:
57:5c:71:c2:da:37:ff:42:33:8b:8c:4b:b5:f0:f8:
d5:32:6e:89:55:6c:0f:b9:17:f0:85:a5:ca:d4:c5:
c0:a9:72:a7:96:98:47:36:4e:ec:1f:92:3f:fd:f1:
54:ab:8a:91:6e:ca:14:cb:28:a2:60:a6:4c:ec:d1:
10:74:63:2b:8b:48:51:90:74:5c:09:cd:f1:4d:36:
f9:fa:5b:2a:d3:35:39:4f:45:32:40:61:eb:9a:06:
d9:3b:95:51:56:9f:ae:5f:99:e6:85:02:d9:94:c5:
34:65:87:65:f2:72:2f:ea:70:fe:d2:e0:f3:df:ec:
01:e0:c8:4f:9f:5d:93:91:a7:56:c9:e4:86:f3:85:
df:dd:25:e1:9d:37:ab:b8:9a:eb:69:a8:8c:4d:7c:
d6:33:d1:e7:9f:77:08:d9:b4:fa:8a:0b:fa:df:64:
3e:1e:96:9e:55:e6:f3:57:22:cd:40:bd:f3:80:47:
97:af:02:6a:a3:d9:92:b6:38:7f:6e:8a:b1:ef:87:
ad:f1:3b:13:f6:60:5c:b4:e2:e4:8f:9e:a5:01:89:
0b:01:3f:dd:6e:31:91:c1:17:a2:5a:91:da:5d:ad:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:A1:DF:66:C4:36:09:24:C0:40:3A:0F:26:51:9B:44:B2:83:D9
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/77Kh32bENgkkwEA6DyZRm0Syg9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.112.0/21
94.142.232.0/21
178.248.248.0/21
185.75.116.0/22
IPv6:
2a03:a900::/32
Signature Algorithm: sha256WithRSAEncryption
ad:65:32:55:b5:c5:93:ff:42:e4:a3:3a:db:1d:0d:85:62:f4:
c8:8f:d8:12:ea:c2:ff:97:e1:a2:3f:e5:16:10:8f:c6:48:47:
22:83:28:89:8f:83:47:03:f3:9f:a9:dc:1d:4b:2a:18:d5:1f:
6f:fc:47:a5:b3:05:66:f6:b9:17:db:01:be:da:ca:93:9e:a8:
3d:a2:b6:f5:be:d9:0f:2b:60:b6:85:d8:d0:15:5e:33:cc:4c:
eb:d6:85:8d:73:6f:02:a1:e5:2b:20:91:1b:2f:39:c6:22:20:
5e:aa:36:dd:28:67:38:bb:e9:3e:50:b5:b2:27:e1:8f:97:56:
c8:da:23:62:e5:7c:6a:bb:76:88:a8:0b:b3:c7:fe:f3:39:11:
5a:23:c7:51:b6:70:f7:7c:3f:e8:be:db:60:99:27:9e:08:22:
5a:e3:4f:5a:41:69:8e:fe:6c:b2:5f:cd:3f:0f:17:2a:1e:7e:
d1:41:c8:26:b2:e8:d9:d6:9a:98:83:80:f5:69:e4:ed:31:11:
03:e0:fd:ed:3c:88:84:ad:db:d3:e4:a1:81:1b:a7:7a:6c:e3:
ca:f3:b9:99:cf:94:8b:7e:39:8b:e4:cb:8f:9d:05:04:ea:9f:
d6:c3:89:67:45:a3:c9:81:d6:66:6e:4c:ca:55:79:a6:d0:79:
fc:84:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:03:07 2025 by rpki-client