Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/vh7v6KazqCf780_avPw0Hy5mNS8.roa
File: vh7v6KazqCf780_avPw0Hy5mNS8.roa (raw, json)
Hash identifier: tJX78omMAW39P5etuwXAKnknvpLfYBKLV8dKnnXe1DQ=
Subject key identifier: BE:1E:EF:E8:A6:B3:A8:27:FB:F3:4F:DA:BC:FC:34:1F:2E:66:35:2F
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01938BEB8B5EB8CC919B0D38C83D3D4593D4
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/vh7v6KazqCf780_avPw0Hy5mNS8.roa
Signing time: Tue 03 Dec 2024 09:48:09 +0000
ROA not before: Tue 03 Dec 2024 09:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42065
IP address blocks: 91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.248.0/21 maxlen: 21
185.51.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 10:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:eb:8b:5e:b8:cc:91:9b:0d:38:c8:3d:3d:45:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Dec 3 09:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be1eefe8a6b3a827fbf34fdabcfc341f2e66352f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:c8:1d:64:df:0c:d7:4a:b8:12:eb:89:f1:
31:a7:1e:02:74:82:a0:92:a3:c9:ca:66:6b:57:d3:
46:8d:83:0b:38:cb:2c:5e:2c:bf:c7:28:24:da:ef:
60:ce:82:35:29:3f:68:0f:6a:69:5b:f2:d3:93:ef:
e1:f5:3d:58:20:ec:1b:6f:b4:8e:d2:ea:f6:07:8c:
ab:ec:37:79:12:40:3e:1e:e9:3d:dd:47:a7:12:ee:
54:85:b0:48:00:48:23:9c:57:d4:eb:4d:72:b1:20:
51:db:9a:fc:79:26:b4:89:c4:ae:9f:55:bd:89:0e:
84:f2:e7:00:28:6e:90:37:94:ad:64:e8:b0:7a:ac:
a9:c6:97:89:b3:7f:24:30:06:0a:bd:ea:91:6e:25:
ec:da:2f:06:34:c6:ca:2d:41:02:1a:bc:d3:29:9c:
87:81:7b:d3:53:3a:07:13:db:26:8c:49:fb:30:2c:
5d:68:39:87:8f:92:53:81:ec:df:a5:00:35:ac:30:
c9:12:6f:f5:43:56:33:12:63:46:d5:c4:78:66:2b:
39:63:e8:86:60:ce:2a:10:c0:78:e3:4e:32:4b:b4:
c0:eb:3a:7b:35:68:a4:c6:42:92:37:e8:5c:3a:b2:
e9:2b:6b:d6:13:74:9d:9b:6c:3d:4c:1f:55:a4:1d:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1E:EF:E8:A6:B3:A8:27:FB:F3:4F:DA:BC:FC:34:1F:2E:66:35:2F
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/vh7v6KazqCf780_avPw0Hy5mNS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
94.124.176.0/22
95.140.92.0/24
95.140.94.0/24
95.161.88.0/22
95.161.96.0/23
95.161.102.0-95.161.105.255
95.161.248.0/21
185.51.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:e6:f9:90:eb:7d:db:96:75:37:74:dc:69:4a:7a:ab:fb:50:
2c:68:bf:ba:f6:74:2c:b3:73:0e:cd:c9:0d:e6:48:13:61:aa:
ea:1b:78:58:25:44:1e:ac:cc:09:6c:8b:fb:91:d7:c8:e3:d3:
61:6a:90:96:c4:87:5d:d7:1f:72:f3:bb:92:dd:3d:c8:db:33:
5b:ee:50:fc:22:9a:e7:3b:de:41:7a:92:14:a8:09:4d:57:c2:
b7:2f:d4:56:a8:5c:44:0a:56:46:fa:f7:81:7d:59:c1:00:77:
d9:4e:49:7c:95:f2:61:dc:bb:19:39:cf:72:b0:a4:f5:ef:08:
87:61:75:94:7d:42:76:29:b1:b3:91:36:54:90:2e:4a:b1:a7:
c3:87:66:c8:2d:93:16:1c:fc:f8:d5:76:40:9d:95:5d:90:77:
2b:ee:a9:a7:e3:86:50:08:09:19:a3:83:5b:4e:a0:ae:46:74:
6b:3a:0a:ef:36:37:03:9d:8e:07:c4:d1:ff:9a:4e:4f:5c:ee:
df:b5:2e:f6:91:de:ec:df:30:db:87:1a:b2:af:e1:26:cb:b3:
47:a5:80:ef:35:8b:8e:f8:74:77:ec:ec:86:a3:e5:6b:60:e5:
99:9e:2a:50:74:bc:e5:50:0f:74:0b:6a:bd:80:03:2f:61:e8:
8b:17:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:26:17 2025 by rpki-client