Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/fGmC6wu9XuM8wNwoejMhlLhAxUc.roa
File: fGmC6wu9XuM8wNwoejMhlLhAxUc.roa (raw, json)
Hash identifier: M8N94bCQ2Dx9lx8KavunkiU02m1n2qUD2dAF/l4u8Io=
Subject key identifier: 7C:69:82:EB:0B:BD:5E:E3:3C:C0:DC:28:7A:33:21:94:B8:40:C5:47
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0192BB014B3CA2BD51B823FE913D3D3DFB24
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/fGmC6wu9XuM8wNwoejMhlLhAxUc.roa
Signing time: Wed 23 Oct 2024 20:11:17 +0000
ROA not before: Wed 23 Oct 2024 20:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 5.172.160.0/20 maxlen: 24
5.172.170.0/24 maxlen: 24
81.2.64.0/18 maxlen: 24
81.187.0.0/16 maxlen: 24
81.187.161.0/24 maxlen: 24
90.155.0.0/18 maxlen: 24
90.155.64.0/19 maxlen: 20
90.155.96.0/20 maxlen: 20
178.238.144.0/20 maxlen: 20
194.4.172.0/22 maxlen: 24
217.169.0.0/19 maxlen: 24
2001:8b0::/32 maxlen: 63
2001:8b0:a::666/128 maxlen: 128
2001:8b6::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Nov 2024 21:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:01:4b:3c:a2:bd:51:b8:23:fe:91:3d:3d:3d:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Oct 23 20:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c6982eb0bbd5ee33cc0dc287a332194b840c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:e7:50:12:ba:7b:19:25:dd:0e:1a:78:08:
b3:53:48:d3:b5:fa:81:10:75:26:1a:f6:91:32:c9:
6d:b1:f7:32:34:7c:9b:5f:21:ab:02:51:b8:0b:35:
4d:9b:d8:ea:4d:86:46:4e:45:62:6d:b8:75:34:14:
fd:e8:d0:97:ca:26:1d:f7:5c:89:e8:02:b5:f5:ec:
52:7d:5b:19:71:26:ab:cb:f1:8c:f6:c8:16:b7:9b:
2d:c2:a9:a7:16:ed:6b:c3:c4:4a:27:ae:5e:b3:b7:
c6:8b:80:9c:5d:a8:f5:f6:63:79:c8:99:02:93:3d:
36:90:24:a0:00:da:0f:0f:86:70:be:95:b4:7b:6c:
f4:62:07:7c:3a:ff:82:66:bc:0b:32:6c:8e:bc:4e:
67:1b:47:a3:aa:b8:26:11:95:5d:7f:b9:cc:cf:c1:
ca:2b:43:03:c6:bc:f1:39:b1:60:f5:53:dc:5c:53:
e4:e0:9c:ec:28:b2:ec:cd:c6:ad:e1:37:86:ae:8a:
0f:a6:ac:ad:2f:9c:1a:90:b8:a6:c7:95:39:41:d3:
00:0b:a3:4f:f4:71:9e:fc:a8:17:e2:cb:36:91:97:
78:8f:f6:78:5d:3f:f2:f8:fb:d8:d3:b4:43:6d:6f:
4e:e0:dd:f2:2f:c0:ff:4e:68:28:1a:2c:16:c2:b9:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:82:EB:0B:BD:5E:E3:3C:C0:DC:28:7A:33:21:94:B8:40:C5:47
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/fGmC6wu9XuM8wNwoejMhlLhAxUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.160.0/20
81.2.64.0/18
81.187.0.0/16
90.155.0.0-90.155.111.255
178.238.144.0/20
194.4.172.0/22
217.169.0.0/19
IPv6:
2001:8b0::/32
2001:8b6::/32
Signature Algorithm: sha256WithRSAEncryption
4a:de:cd:c3:f2:62:45:3e:e4:d6:05:10:d2:70:d5:f0:e8:af:
73:19:60:74:94:6a:34:e5:1b:19:14:60:44:2f:43:5a:ca:9d:
2a:ea:c9:be:af:71:d3:c0:5c:4a:d2:3b:ef:4d:c6:e9:0d:b8:
3d:2e:08:a3:75:eb:2c:ab:3f:21:56:75:09:1a:eb:0f:19:07:
82:ae:27:05:18:9a:23:6e:ff:c5:56:31:c0:f5:c9:6a:9c:5f:
fe:d5:0f:4c:bc:a5:e8:52:8d:53:10:c1:bb:96:3f:88:55:b3:
1c:53:4e:3f:cc:7e:f5:d1:c7:b9:f7:97:f5:4d:81:22:ae:53:
5f:04:64:30:06:0f:7c:65:33:35:b1:58:73:a9:27:2d:84:90:
3c:6d:21:b3:71:af:c2:7a:4b:5b:e1:0b:32:ac:9a:12:58:a9:
da:cb:70:e8:a2:af:85:0f:bc:a4:a0:9b:77:f0:56:89:9e:41:
4e:d7:1b:c4:66:d8:24:eb:1a:07:30:f2:0d:16:47:d4:d0:72:
94:5b:8c:dd:d1:6b:36:64:e5:4d:0e:1b:01:7f:b9:f3:6d:f9:
18:f6:91:46:4c:04:56:8d:5c:75:73:f4:33:7c:d8:fc:f7:ee:
e0:19:25:14:82:c8:a1:a1:de:a8:aa:0c:46:87:39:bc:cb:25:
8d:0f:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:00 2025 by rpki-client