Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/uUjO5tzwtfPlkCxUqVMPEb-t7Ak.roa
File: uUjO5tzwtfPlkCxUqVMPEb-t7Ak.roa (raw, json)
Hash identifier: rSXKRsSG2tuS9nXuWpc5bDgcVzezGXOJfgsox8KEP5c=
Subject key identifier: B9:48:CE:E6:DC:F0:B5:F3:E5:90:2C:54:A9:53:0F:11:BF:AD:EC:09
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019426D9CC38EF84231DC7ECE212D9C32DB5
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/uUjO5tzwtfPlkCxUqVMPEb-t7Ak.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20661
IP address blocks: 95.85.96.0/19 maxlen: 19
95.85.96.0/24 maxlen: 24
95.85.98.0/24 maxlen: 24
95.85.99.0/24 maxlen: 24
95.85.100.0/22 maxlen: 22
95.85.100.0/24 maxlen: 24
95.85.101.0/24 maxlen: 24
95.85.104.0/22 maxlen: 22
95.85.104.0/24 maxlen: 24
95.85.121.0/24 maxlen: 24
103.220.0.0/22 maxlen: 22
119.235.112.0/20 maxlen: 20
177.93.143.0/24 maxlen: 24
185.69.184.0/24 maxlen: 24
216.250.8.0/21 maxlen: 21
217.174.224.0/20 maxlen: 24
2a05:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 30 Jan 2025 11:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cc:38:ef:84:23:1d:c7:ec:e2:12:d9:c3:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b948cee6dcf0b5f3e5902c54a9530f11bfadec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:0d:de:0c:cb:7a:5b:b4:4c:62:a8:13:5a:
e9:69:82:9a:04:ce:4b:89:c8:81:ca:86:ae:8b:95:
c2:41:21:5c:12:16:06:c4:5a:b2:bd:d3:da:22:0d:
3e:93:08:44:9d:bf:6d:aa:ae:e5:3e:ab:f9:96:5a:
24:dd:7d:ba:58:15:52:89:46:9d:38:cf:ab:ba:9f:
67:f0:5d:10:88:d9:85:4e:e4:5f:e6:c6:cc:95:20:
0e:56:a9:73:3b:55:2e:5d:b2:35:a6:6c:81:ff:eb:
ca:e5:90:3c:07:43:8d:da:b4:10:07:c8:93:6d:23:
ec:62:23:a0:fb:6c:75:20:6b:87:7a:91:14:b7:39:
e9:a6:7b:e1:bb:e6:d5:8f:cf:66:0f:88:19:7f:12:
ed:55:73:09:87:ef:78:6a:43:5e:c7:25:3c:2b:e4:
b0:6e:1b:53:a9:bb:1c:7e:10:c4:36:41:3e:59:e0:
e0:4e:f9:4e:72:d6:de:fc:ca:95:20:2d:82:33:02:
cd:7c:99:15:da:19:97:ed:a8:17:98:3f:c8:8b:ee:
b2:b3:2d:7a:86:65:55:67:cf:b1:e0:55:ce:3f:7c:
2f:13:b4:db:8a:b1:06:3d:63:1e:03:02:33:44:4b:
ab:bc:33:17:b1:76:4c:65:8c:74:10:f1:14:04:52:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:48:CE:E6:DC:F0:B5:F3:E5:90:2C:54:A9:53:0F:11:BF:AD:EC:09
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/uUjO5tzwtfPlkCxUqVMPEb-t7Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.96.0/19
103.220.0.0/22
119.235.112.0/20
177.93.143.0/24
185.69.184.0/24
216.250.8.0/21
217.174.224.0/20
IPv6:
2a05:2180::/29
Signature Algorithm: sha256WithRSAEncryption
71:c5:c4:b8:74:ce:ab:40:44:ca:8a:0b:99:07:d1:f2:3d:93:
00:a9:85:5e:9c:2f:4a:b1:6c:d7:98:42:5e:41:42:78:98:50:
1d:1f:0d:e6:bf:dd:13:da:24:c2:bd:94:72:f0:8a:2c:cd:d7:
0c:db:c6:dc:b5:a3:d9:e3:94:33:51:d2:00:6e:7c:e4:c8:d5:
3c:91:5d:af:fc:02:54:17:ba:ef:96:72:ec:2f:3e:69:4d:c2:
0c:9f:51:d7:19:6e:0a:7e:37:ed:ed:2c:d1:e3:f5:6e:57:da:
92:65:d8:e0:b2:07:0f:77:33:a6:31:3b:dd:8b:58:a3:18:b3:
db:6e:ca:ac:10:a0:e6:cb:b7:ae:4a:0b:a2:3a:71:52:3c:f8:
11:04:a7:0c:f4:20:0e:b3:02:49:4f:83:1d:a1:53:0f:d7:c9:
ff:32:ef:07:0f:04:0d:e5:2d:9e:b0:f3:60:0d:0a:5d:f6:1d:
21:69:31:cb:86:c3:5e:dd:a4:23:b2:11:9a:5a:f1:e2:97:71:
26:13:ec:a7:86:35:81:2b:14:a0:06:67:cc:ee:62:32:36:a9:
be:3e:11:98:51:88:88:2b:cc:18:51:99:b2:62:cf:b6:43:42:
6a:2d:80:9b:c2:d6:c3:a6:03:1b:5d:3f:1c:82:0d:9e:6d:9e:
12:89:0a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:10 2025 by rpki-client