Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/8HmTPI5E_ujKosdWsKQ1qIoIWgo.roa
File: 8HmTPI5E_ujKosdWsKQ1qIoIWgo.roa (raw, json)
Hash identifier: v2WNVIgorQ+sy+g/7B6/XBHM4VQhdCDcvBWognkt3Lo=
Subject key identifier: F0:79:93:3C:8E:44:FE:E8:CA:A2:C7:56:B0:A4:35:A8:8A:08:5A:0A
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 018D20FB3A23DB451932029A6C4436F6C394
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/8HmTPI5E_ujKosdWsKQ1qIoIWgo.roa
Signing time: Fri 19 Jan 2024 09:09:11 +0000
ROA not before: Fri 19 Jan 2024 09:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49025
IP address blocks: 95.173.200.0/21 maxlen: 21
95.173.204.0/22 maxlen: 22
95.173.208.0/21 maxlen: 21
95.173.216.0/21 maxlen: 21
185.2.40.0/22 maxlen: 22
185.111.108.0/24 maxlen: 24
185.111.109.0/24 maxlen: 24
185.111.111.0/24 maxlen: 24
2a02:a48:f000::/36 maxlen: 36
2a06:5d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Jan 2024 10:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:fb:3a:23:db:45:19:32:02:9a:6c:44:36:f6:c3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Jan 19 09:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f079933c8e44fee8caa2c756b0a435a88a085a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:ea:e2:93:9e:92:d0:e0:59:0f:37:b2:95:
be:24:9c:ff:1a:47:6e:31:dd:85:76:d8:4e:b9:2d:
94:e3:bd:f4:c8:16:20:79:ae:74:b4:30:5b:96:5e:
45:ed:03:c4:3f:3a:64:98:c4:06:91:93:8f:b9:55:
8f:a1:a6:25:c3:b9:44:ef:c5:e7:3c:84:0b:f0:ed:
97:7b:37:71:2d:e4:16:c3:09:f5:34:37:1d:44:19:
6d:f4:c9:8a:3d:f6:72:37:55:07:2a:82:24:ec:45:
67:33:5c:b7:61:40:f7:72:8e:c9:df:7a:83:11:c8:
f8:29:bc:8d:91:4a:e9:de:59:c8:7b:f3:14:9d:ad:
dd:2c:5a:ca:84:6c:42:3a:31:b9:8b:16:50:e1:a8:
5e:32:b8:33:04:2f:10:c2:25:08:64:42:b1:34:83:
a2:48:58:bb:8a:5a:9a:30:36:9d:5c:e1:77:cd:af:
c5:40:8e:cb:91:fd:ee:07:f9:e5:5f:2b:aa:a8:62:
79:66:b9:64:28:4a:2b:9b:7d:71:4a:a5:68:14:e8:
9b:38:b6:df:b3:f2:71:ee:61:77:9f:ee:33:94:5e:
56:5a:c8:c6:7d:20:22:5b:b5:49:b6:b5:66:50:0c:
4a:6f:e3:99:2f:70:25:9d:98:87:41:46:7c:e4:8b:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:93:3C:8E:44:FE:E8:CA:A2:C7:56:B0:A4:35:A8:8A:08:5A:0A
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/8HmTPI5E_ujKosdWsKQ1qIoIWgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.200.0-95.173.223.255
185.2.40.0/22
185.111.108.0/23
185.111.111.0/24
IPv6:
2a02:a48:f000::/36
2a06:5d80::/32
Signature Algorithm: sha256WithRSAEncryption
96:b4:d3:b4:b4:9e:70:5a:4f:ff:30:05:e1:40:30:19:82:84:
bc:60:be:61:c2:fa:fd:77:fb:5d:4d:ec:44:52:81:13:21:13:
32:a6:fd:bd:37:5a:dd:12:8f:66:13:0e:59:ed:51:2f:b6:6d:
77:4d:c0:23:ad:f3:a2:d4:5d:bf:78:65:20:a4:95:67:54:11:
da:05:50:21:83:d6:ca:83:31:be:92:ce:87:1f:ec:0b:b7:d7:
0c:65:f7:32:0c:b6:3c:e0:4d:13:85:d7:a4:e3:59:ac:bb:c5:
4c:20:53:a7:7d:6b:83:a3:a3:11:f7:09:fb:9b:1f:de:67:2b:
34:72:d9:4f:90:70:1c:e5:5d:da:9e:45:5c:22:c0:6a:55:38:
f3:24:71:64:30:48:f0:22:8f:b7:69:cd:18:0b:03:4f:81:55:
26:08:ea:c3:f9:1a:5d:86:94:e6:8f:39:91:2f:c1:21:4d:55:
4d:c2:6a:91:26:35:a1:36:da:0a:da:7f:59:05:fa:06:ff:27:
cb:eb:04:b9:34:0e:b4:7a:0e:5d:e2:67:90:28:ec:0d:94:57:
d9:e1:44:4e:75:c8:6a:b0:d2:fb:bd:42:d6:48:8f:a8:31:b2:
43:2f:de:84:fb:7b:bd:0f:95:0d:4b:87:a0:fa:4d:d8:77:6c:
ce:d4:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org