Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/H1hqRoedM8Us0MuHTc1KUNPDQRU.roa
File: H1hqRoedM8Us0MuHTc1KUNPDQRU.roa (raw, json)
Hash identifier: QDYJXjwTrmfnPAm23AwuxFqDNF6dgd6k4QjEp/1NGNM=
Subject key identifier: 1F:58:6A:46:87:9D:33:C5:2C:D0:CB:87:4D:CD:4A:50:D3:C3:41:15
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 018CC425647D98B4B885231CFFA8FE1741E5
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/H1hqRoedM8Us0MuHTc1KUNPDQRU.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197637
IP address blocks: 31.25.152.0/21 maxlen: 21
153.92.32.0/21 maxlen: 21
185.62.88.0/22 maxlen: 22
185.68.76.0/22 maxlen: 22
37.123.120.0/21 maxlen: 21
2a04:6ec0::/32 maxlen: 32
2a04:6ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:64:7d:98:b4:b8:85:23:1c:ff:a8:fe:17:41:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f586a46879d33c52cd0cb874dcd4a50d3c34115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:24:64:89:24:96:13:11:0a:44:a9:5f:ee:
d3:0e:27:92:80:1c:7f:b4:93:f0:d5:00:19:56:42:
95:e3:a8:2d:7e:91:b8:8a:2e:6c:2f:03:30:88:08:
35:a6:21:0d:b4:ef:47:6b:9d:f5:cc:77:fa:90:b5:
fa:b3:82:a7:5f:2f:7b:ab:a2:a9:05:8a:8e:71:7f:
05:a7:b4:df:79:72:2e:b8:3b:df:03:ed:71:d4:95:
80:27:b1:47:d9:44:b2:2d:08:93:dc:65:12:55:18:
75:85:b3:46:09:5e:4a:61:ab:42:9e:8d:a2:1a:03:
87:20:19:f9:d7:e1:6c:4d:09:65:27:7a:da:42:5b:
21:3b:b4:41:bd:29:20:a1:be:64:46:23:7d:10:6a:
b8:94:54:e3:1f:ef:5d:82:e1:48:28:c7:da:8f:f2:
2e:e5:37:cf:c0:c4:e4:83:7a:7c:af:22:05:5e:b6:
72:32:7c:29:2f:30:ad:12:c0:67:f0:89:bb:f2:2a:
8c:4d:f9:6e:c9:60:16:18:29:4c:6f:db:b7:cf:09:
86:32:9b:7a:e3:4f:18:2c:93:15:75:ad:5c:6a:67:
00:e5:f4:68:77:26:12:9d:b7:b6:d7:6d:22:72:3d:
13:5c:fc:fa:61:0d:15:da:a7:2a:b9:8e:07:00:e3:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:6A:46:87:9D:33:C5:2C:D0:CB:87:4D:CD:4A:50:D3:C3:41:15
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/H1hqRoedM8Us0MuHTc1KUNPDQRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.152.0/21
37.123.120.0/21
153.92.32.0/21
185.62.88.0/22
185.68.76.0/22
IPv6:
2a04:6ec0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:15:d9:c2:8c:bd:fe:80:e4:98:49:0f:1e:b0:e5:20:95:ac:
50:e5:ff:57:40:34:f3:1d:35:fd:a7:9d:a4:9c:aa:26:f8:14:
76:88:2c:24:5c:bc:c3:36:08:91:7e:d0:df:3e:af:9a:e0:32:
17:0f:14:3a:87:4f:69:eb:8f:0e:65:b5:a1:86:91:f0:46:c4:
09:21:da:7d:e1:1a:dc:3f:9c:b5:ab:b5:50:0e:99:9e:a0:73:
2f:22:4c:4e:74:26:de:30:a5:63:1f:20:e6:5d:7b:ef:c9:6b:
27:68:19:a6:d2:4c:b4:70:23:a4:64:0b:b0:49:77:df:f2:4f:
47:96:d1:00:2a:31:65:4a:b2:ee:84:4a:be:84:bf:9d:6d:62:
4c:a9:35:e7:b8:92:81:4b:1b:f5:ec:6c:e8:de:26:f0:d0:57:
b7:c3:52:16:98:d8:92:57:9e:1e:c3:90:5a:0b:2d:7c:f9:86:
49:61:9c:b4:70:88:c5:47:d4:f1:35:ce:8d:47:07:8f:58:fd:
65:21:c6:76:82:5e:c0:ca:4d:73:39:c6:03:69:f7:c9:76:7e:
37:80:72:87:0e:de:4c:fa:97:4e:a5:b6:bb:5e:68:c8:84:9b:
a0:48:93:27:8b:72:7f:b8:f0:97:c6:d7:56:9c:e1:a2:ff:93:
d9:f6:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:43 2025 by rpki-client