Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JkH2bHjYP6ZWiPHnDHRcnaQ--bU.roa
File: JkH2bHjYP6ZWiPHnDHRcnaQ--bU.roa (raw, json)
Hash identifier: qU9yAnJ2WdHmh8Hh8EdCnzCo+/k/xabqjTlVgZwznvc=
Subject key identifier: 26:41:F6:6C:78:D8:3F:A6:56:88:F1:E7:0C:74:5C:9D:A4:3E:F9:B5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193E7A09122044AB6A714A947F591B59578
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JkH2bHjYP6ZWiPHnDHRcnaQ--bU.roa
Signing time: Sat 21 Dec 2024 05:11:20 +0000
ROA not before: Sat 21 Dec 2024 05:11:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 16:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e7:a0:91:22:04:4a:b6:a7:14:a9:47:f5:91:b5:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 21 05:11:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2641f66c78d83fa65688f1e70c745c9da43ef9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:e6:b7:e3:f6:34:68:1a:43:04:73:4a:5e:
28:e4:46:06:50:c4:e0:50:6a:01:2e:e1:7d:7b:14:
68:54:00:4a:a5:4c:4e:61:ed:40:25:3b:0e:a6:89:
d5:de:eb:c2:77:a0:1f:4a:39:57:57:93:71:1f:7d:
e4:fc:4a:20:c9:b7:c7:da:99:41:e1:1a:6e:27:c9:
37:07:13:8f:a3:b4:e9:48:10:06:88:49:97:73:d3:
78:97:bc:40:20:54:34:9a:3a:e2:89:ca:fb:30:68:
af:bf:ef:8b:88:dd:98:7d:c4:2b:15:47:ae:1e:14:
8a:c7:90:e6:8c:52:e4:4e:ac:0f:b0:c8:95:1c:d0:
f2:01:ca:83:d4:fe:b7:37:93:51:ea:6d:da:94:de:
0d:77:c4:7a:c5:f8:0c:44:2f:7c:c0:2d:b3:19:0e:
2d:2b:ab:f5:bc:d7:45:44:f8:77:4c:24:15:c9:4a:
e6:09:02:85:86:af:9b:ca:49:b0:60:93:c5:fd:3f:
68:d8:db:f7:77:fe:e6:c7:ef:8a:24:ce:14:d4:ca:
62:af:2f:df:a1:ea:6f:0c:e1:fd:1d:f2:32:0e:b7:
32:d0:05:35:c7:8e:ef:6c:9d:cc:30:db:e9:0f:20:
e1:b9:58:f0:13:aa:ad:f0:21:65:8b:5c:44:8c:b0:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:F6:6C:78:D8:3F:A6:56:88:F1:E7:0C:74:5C:9D:A4:3E:F9:B5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JkH2bHjYP6ZWiPHnDHRcnaQ--bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.163.0/24
94.249.138.0/24
94.249.148.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fd:41:4c:3e:33:6e:4a:c8:17:0b:48:dd:91:ea:67:97:c6:
51:52:ae:75:cc:6b:0a:06:e6:fc:8a:50:e2:90:8b:a0:ba:27:
39:2d:7c:a3:64:ee:d5:a3:dd:aa:93:3c:87:cf:c0:da:bb:7a:
f4:92:9e:f0:22:f5:78:2d:52:cd:84:8f:c4:e7:19:43:d9:57:
3b:5c:ad:79:36:85:b4:eb:c4:df:4a:44:43:63:ac:02:79:b7:
1d:d2:41:1a:f1:c9:2b:4f:45:e6:f1:b1:b1:25:3f:4d:d0:9c:
b4:da:31:f8:70:1e:4f:91:1e:7d:9a:4b:ad:5b:bc:65:be:cf:
82:1c:83:c4:18:a9:07:9a:ed:36:d2:bf:c0:fa:86:59:28:ef:
30:2b:d1:c0:e0:a1:fd:7c:fa:63:8a:86:92:17:7b:80:71:31:
ec:68:5f:45:75:74:42:1e:35:bb:8f:65:09:5f:71:18:96:e5:
48:6f:e3:7e:28:d4:74:69:7d:71:28:8d:4f:02:7e:7e:49:27:
3f:ec:d6:4c:2e:10:19:13:f1:0c:15:cf:a0:41:22:18:c9:ed:
ed:32:98:42:5a:9c:70:41:ca:d1:e5:2a:fa:5f:1e:30:d8:2d:
e3:26:2b:ac:67:75:81:e8:d0:8d:da:75:a1:a1:2e:9a:cd:8a:
d5:6f:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:36 2025 by rpki-client