Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/fiVqrUkkcXRrhiqL0etXIIss7uE.roa
File: fiVqrUkkcXRrhiqL0etXIIss7uE.roa (raw, json)
Hash identifier: 6LHKpgfQhyJ3dzyrGbOl4hWvjjAXTjTUrModCJzlrJY=
Subject key identifier: 7E:25:6A:AD:49:24:71:74:6B:86:2A:8B:D1:EB:57:20:8B:2C:EE:E1
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019154C1E7E3BAEF1387ABC5F3F29D8C8613
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/fiVqrUkkcXRrhiqL0etXIIss7uE.roa
Signing time: Thu 15 Aug 2024 06:37:59 +0000
ROA not before: Thu 15 Aug 2024 06:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 2.56.255.0/24 maxlen: 24
2.59.151.0/24 maxlen: 24
5.181.219.0/24 maxlen: 24
31.40.214.0/24 maxlen: 24
45.12.88.0/24 maxlen: 24
45.12.90.0/24 maxlen: 24
45.67.223.0/24 maxlen: 24
185.183.84.0/24 maxlen: 24
185.186.146.0/23 maxlen: 23
185.194.148.0/24 maxlen: 24
185.201.226.0/24 maxlen: 24
185.201.227.0/24 maxlen: 24
185.238.248.0/24 maxlen: 24
185.238.250.0/24 maxlen: 24
193.9.44.0/24 maxlen: 24
193.9.46.0/24 maxlen: 24
193.9.47.0/24 maxlen: 24
193.22.152.0/24 maxlen: 24
212.103.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 08:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:c1:e7:e3:ba:ef:13:87:ab:c5:f3:f2:9d:8c:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Aug 15 06:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e256aad492471746b862a8bd1eb57208b2ceee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:33:54:e8:43:9f:2a:f4:ef:11:3d:3b:41:
8a:06:af:54:bd:62:04:a5:a6:f6:02:07:ce:bb:55:
92:b5:36:6d:0b:31:11:7a:9e:30:30:fd:82:a1:25:
07:ab:c8:d7:49:d4:1a:a2:0c:13:7d:5c:88:fc:e4:
e4:c9:8e:ed:5a:7e:e0:f5:9d:0d:d3:8b:5a:31:3c:
21:ba:a9:98:f3:2e:95:4f:ef:a2:7e:81:06:ef:1d:
c1:90:0c:0a:1b:e6:3b:9f:f3:f8:8e:a4:ea:3f:23:
d2:2b:19:38:87:83:2d:04:5d:3f:e3:c6:17:32:82:
ce:20:1c:b1:36:38:2f:cb:bd:7c:b0:77:ac:c2:bf:
ad:ba:c6:a7:aa:7d:28:9d:86:2f:16:64:1e:c9:33:
99:34:db:9e:68:b0:bc:02:0a:74:9e:04:22:67:61:
eb:a8:7e:52:9e:9a:53:38:7b:11:71:09:af:cf:76:
aa:a9:c1:a3:d7:1e:d6:e3:69:60:ea:aa:a9:86:bc:
b8:5f:f7:24:4e:fb:ec:f5:05:0a:09:c6:f3:76:02:
f1:12:1d:dc:8b:6e:ac:4f:19:6b:9e:25:7b:bc:02:
5b:27:c4:ef:b3:12:25:6f:a8:cf:b0:2d:15:6e:32:
2e:e2:9d:5a:84:9f:ca:47:c2:68:98:46:f0:9b:62:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:25:6A:AD:49:24:71:74:6B:86:2A:8B:D1:EB:57:20:8B:2C:EE:E1
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/fiVqrUkkcXRrhiqL0etXIIss7uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.255.0/24
2.59.151.0/24
5.181.219.0/24
31.40.214.0/24
45.12.88.0/24
45.12.90.0/24
45.67.223.0/24
185.183.84.0/24
185.186.146.0/23
185.194.148.0/24
185.201.226.0/23
185.238.248.0/24
185.238.250.0/24
193.9.44.0/24
193.9.46.0/23
193.22.152.0/24
212.103.62.0/24
Signature Algorithm: sha256WithRSAEncryption
37:31:53:ec:a8:00:b3:fd:b6:10:d4:63:7a:ca:35:06:28:22:
e2:11:ad:ee:9a:b5:04:46:78:83:8b:86:44:f4:4f:be:cd:e4:
10:ed:d1:80:50:a8:b5:a2:a2:0f:41:0e:08:df:bc:72:05:43:
76:15:3d:33:0d:33:7a:1d:c4:7b:aa:5e:23:b5:b7:c2:e9:c2:
bc:f7:f7:6f:c8:1f:18:86:49:1c:6d:17:42:b0:12:1e:20:6d:
52:d6:e0:77:c7:40:36:d9:2a:05:d4:4f:e1:e7:72:6b:3e:ba:
30:76:60:44:50:45:16:2a:1c:e1:ab:65:38:4b:fa:7c:79:dc:
17:86:3d:08:54:c8:cd:3e:52:ff:9b:69:7d:0d:d7:cf:d1:f3:
20:c4:bf:0b:0d:57:f7:ca:39:e4:3d:56:92:77:d4:0f:4f:e0:
62:b9:a1:7d:3c:5e:69:3c:7f:4f:5c:f7:20:ea:97:84:f8:ae:
8b:c4:00:0a:58:74:a7:90:b6:4d:dd:a2:ea:50:39:7f:d0:59:
c1:f8:96:c3:3f:f4:bf:0a:28:ba:eb:2d:ba:28:93:b8:f9:75:
72:42:87:ea:f2:59:e1:4f:c3:64:c8:22:aa:da:d0:4b:b9:15:
aa:a2:10:6c:7b:61:0d:b1:f4:ee:c7:90:e9:b4:b0:d6:ef:9d:
49:e0:a1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:53:46 2025 by rpki-client