Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/I8GepQlxJBxNPdWpWm8TvzDSx7g.roa
File: I8GepQlxJBxNPdWpWm8TvzDSx7g.roa (raw, json)
Hash identifier: eo1IAkuCswfjmWmIl904Ll5/Z6DQdXPOY+qTCvS7Fcc=
Subject key identifier: 23:C1:9E:A5:09:71:24:1C:4D:3D:D5:A9:5A:6F:13:BF:30:D2:C7:B8
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 01934E4785A44D1C36F752BB6D61B4E4391E
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/I8GepQlxJBxNPdWpWm8TvzDSx7g.roa
Signing time: Thu 21 Nov 2024 10:32:10 +0000
ROA not before: Thu 21 Nov 2024 10:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196752
IP address blocks: 37.252.120.0/21 maxlen: 24
46.19.32.0/21 maxlen: 24
46.19.36.0/22 maxlen: 24
84.22.96.0/19 maxlen: 24
84.22.96.0/22 maxlen: 24
84.22.100.0/23 maxlen: 24
84.22.118.0/23 maxlen: 24
84.22.122.0/24 maxlen: 24
91.213.195.0/24 maxlen: 24
164.138.24.0/21 maxlen: 24
164.138.30.0/23 maxlen: 24
185.24.220.0/22 maxlen: 24
2a02:2770::/32 maxlen: 32
2a02:2770::/48 maxlen: 48
2a02:2770:1::/48 maxlen: 48
2a02:2770:2::/48 maxlen: 48
2a02:2770:3::/48 maxlen: 48
2a02:2770:5::/48 maxlen: 48
2a02:2770:6::/48 maxlen: 48
2a02:2770:7::/48 maxlen: 48
2a02:2770:8::/48 maxlen: 48
2a02:2770:9::/48 maxlen: 48
2a02:2770:10::/48 maxlen: 48
2a02:2770:11::/48 maxlen: 48
2a02:2770:12::/48 maxlen: 48
2a02:2770:13::/48 maxlen: 48
2a02:2770:15::/48 maxlen: 48
2a02:2770:16::/48 maxlen: 48
2a02:2770:17::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:47:85:a4:4d:1c:36:f7:52:bb:6d:61:b4:e4:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Nov 21 10:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23c19ea50971241c4d3dd5a95a6f13bf30d2c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:c3:02:30:91:4f:a2:88:d9:d0:b6:c1:44:
ce:4c:26:e6:c8:95:34:3f:37:e3:58:bb:08:07:7e:
a8:e8:d0:f9:c0:bb:ac:32:fd:67:78:a5:50:68:0c:
3a:95:ec:10:7d:17:d5:0b:98:3a:8e:57:04:5f:3f:
d8:ac:47:8e:7b:db:9d:55:3c:86:e2:97:4d:c2:18:
0c:24:6e:11:e5:ed:75:7b:89:bb:8c:66:fb:1f:0b:
1c:8c:b7:99:3a:13:a7:42:1b:be:b4:ff:eb:63:ce:
5f:9a:62:2a:a0:32:b3:6d:65:33:26:e2:f0:64:8e:
ed:f0:3b:b7:b3:b8:71:1e:3a:bc:00:bb:53:ef:fa:
16:37:a6:03:cf:2b:a5:8b:d1:54:39:96:34:ac:61:
51:19:19:2a:5d:29:ef:db:55:96:2a:be:87:04:1f:
da:d2:60:50:3a:17:ca:f3:41:57:83:c4:58:af:e5:
0a:3f:a0:46:b7:58:69:8a:fc:53:e6:65:b5:18:00:
3d:7f:1e:c0:1a:4a:1d:0a:25:e0:b9:72:23:13:86:
9e:76:f6:d3:60:9f:be:4f:4d:09:a3:a1:47:11:7f:
27:8a:a4:1b:53:76:33:b5:9a:55:6c:5d:6d:d1:7a:
5d:f2:45:57:ff:a6:02:35:58:3b:39:64:88:1c:58:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:9E:A5:09:71:24:1C:4D:3D:D5:A9:5A:6F:13:BF:30:D2:C7:B8
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/I8GepQlxJBxNPdWpWm8TvzDSx7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.120.0/21
46.19.32.0/21
84.22.96.0/19
91.213.195.0/24
164.138.24.0/21
185.24.220.0/22
IPv6:
2a02:2770::/32
Signature Algorithm: sha256WithRSAEncryption
4a:76:04:c5:cb:55:6c:d1:df:d0:df:20:49:54:a7:2e:b1:87:
02:b1:e2:d5:20:60:72:f6:cb:c8:13:1e:7d:08:f5:96:12:f5:
af:b7:d7:b1:de:e4:80:9d:60:b4:67:30:61:ab:5a:89:e9:06:
56:d6:42:cb:29:56:d8:92:3a:8e:07:48:6a:e4:de:d6:96:42:
ff:c0:78:d2:f5:77:b9:91:be:75:15:fe:0b:5a:d0:cf:36:6a:
fd:97:2e:c0:72:8f:10:bf:ee:cb:86:9a:88:3b:26:76:f6:c5:
e8:62:18:c9:ad:ee:36:29:85:33:9c:bd:f4:eb:14:66:8d:41:
07:0c:70:f0:3f:ee:46:61:d0:da:87:e7:9b:d3:10:1a:c5:cd:
31:71:0b:74:db:cf:19:aa:25:d3:b9:69:9a:ab:48:74:8a:c7:
ce:e8:67:53:fa:a5:62:2c:e2:f1:b7:e3:d6:d1:b1:cc:ac:62:
c6:fb:ee:50:20:25:85:18:c7:eb:56:93:58:53:53:eb:e1:92:
2f:49:e6:d4:68:0f:a5:73:f7:c7:f3:40:ab:5e:48:66:13:b3:
34:72:d9:75:7a:3b:cb:67:f6:e4:ef:10:6b:6b:14:b8:22:20:
8c:c3:99:2e:fd:0f:15:b9:93:62:bd:e5:46:8c:2b:25:ef:fc:
eb:68:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:23 2025 by rpki-client