Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa
File: LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa (raw, json)
Hash identifier: pwTodIZuuYqTvbBnaCVRMWAvMtiWCyRaBs4RZ/skCs0=
Subject key identifier: 2C:08:58:77:17:DA:33:A6:6C:F8:7A:17:23:56:B7:51:B3:D7:E3:11
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 018D075F93A85DA1C5F1E9FBEEB1CB7A7BFD
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa
Signing time: Sun 14 Jan 2024 09:48:40 +0000
ROA not before: Sun 14 Jan 2024 09:48:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 204.154.201.0/24 maxlen: 24
204.154.200.0/24 maxlen: 24
185.244.178.0/24 maxlen: 24
185.244.179.0/24 maxlen: 24
185.240.18.0/24 maxlen: 24
185.240.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:5f:93:a8:5d:a1:c5:f1:e9:fb:ee:b1:cb:7a:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jan 14 09:48:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c08587717da33a66cf87a172356b751b3d7e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:52:95:26:18:19:c4:53:fc:84:15:94:22:
d5:c4:e6:df:4f:1a:ec:1b:97:3a:44:47:83:67:cd:
ba:33:56:8c:8d:d9:97:dd:9e:ef:96:46:a1:6c:08:
63:fb:5a:5e:18:05:6d:ea:ad:97:f3:63:e0:5b:df:
e6:11:19:c2:c4:56:a0:29:10:18:4a:76:5c:4c:1b:
0e:4e:76:4a:bc:79:f7:e7:05:52:98:43:b1:66:a2:
cb:10:23:2b:23:93:92:f7:f8:da:dc:65:fa:b6:17:
f4:43:61:50:5a:f0:56:da:c9:33:98:54:1b:14:30:
36:2a:90:45:dd:4a:39:d5:d4:ee:23:56:cb:c6:85:
f7:6e:eb:26:38:ee:54:52:36:5c:32:e8:c9:e6:18:
26:4e:96:38:21:c2:36:de:15:28:88:ea:91:8f:0f:
af:d0:21:8c:f1:c5:21:bb:4a:36:0c:84:75:e0:60:
6c:ca:e7:d3:ee:90:15:42:aa:82:d4:e5:34:08:1d:
c8:ad:75:c2:5a:9c:27:7b:b6:8a:55:5e:85:a4:90:
e0:37:5b:93:73:7f:3d:15:b8:45:07:9d:94:08:83:
e3:8c:f5:9f:f6:e2:ce:39:48:b4:19:b0:44:49:8b:
04:b4:d6:95:f1:fa:b0:f2:4f:23:9b:ea:9f:14:78:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:58:77:17:DA:33:A6:6C:F8:7A:17:23:56:B7:51:B3:D7:E3:11
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.18.0/23
185.244.178.0/23
204.154.200.0/23
Signature Algorithm: sha256WithRSAEncryption
75:78:e5:29:2b:f9:e5:2f:e5:d8:4d:ec:58:87:e1:a6:70:20:
0f:7d:eb:dd:36:4a:8c:0b:fb:00:36:6a:9a:ee:99:83:7a:69:
6a:01:55:04:96:fe:93:40:6a:62:7b:4c:b9:fe:18:ee:64:83:
56:9c:4f:11:22:6a:75:f6:93:38:51:9a:e4:9b:68:0f:c1:2c:
34:4d:72:48:cd:0c:1d:8b:f0:41:ca:3e:83:01:a0:46:f7:9d:
e6:73:95:93:bb:af:9a:d4:15:e8:3b:fc:71:8b:d7:00:d4:ab:
b6:95:d8:df:f4:76:c2:d7:70:ba:e2:85:11:43:97:45:5f:b7:
7e:b6:33:8d:5e:61:19:16:45:e9:da:ad:4f:0f:64:18:70:8b:
8b:b3:c3:b8:3e:56:20:cf:ef:c5:e5:5f:2b:a4:93:2c:e3:8c:
ed:e1:fe:6a:d7:e3:24:eb:65:43:5a:cc:f3:3b:39:b1:75:e4:
5a:f7:b0:8f:68:8b:ac:33:c5:ae:e5:6c:8b:0e:33:f2:e8:86:
ba:b7:f3:77:bf:3b:c5:63:0a:fb:fe:9c:a1:dc:d3:77:2e:a6:
f7:c7:ac:b8:98:ec:35:99:e3:73:93:e2:87:56:05:af:45:51:
85:af:b6:be:60:5e:e6:03:0f:1c:d2:0f:24:62:b8:fc:db:7c:
16:29:97:88
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY0HX5OoXaHF8en77rHLenv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm
ZmQ4ZDcwHhcNMjQwMTE0MDk0ODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzA4NTg3NzE3ZGEzM2E2NmNmODdhMTcyMzU2Yjc1MWIzZDdlMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilVSlSYYGcRT/IQVlCLVxObfTxrs
G5c6REeDZ826M1aMjdmX3Z7vlkahbAhj+1peGAVt6q2X82PgW9/mERnCxFagKRAY
SnZcTBsOTnZKvHn35wVSmEOxZqLLECMrI5OS9/ja3GX6thf0Q2FQWvBW2skzmFQb
FDA2KpBF3Uo51dTuI1bLxoX3busmOO5UUjZcMujJ5hgmTpY4IcI23hUoiOqRjw+v
0CGM8cUhu0o2DIR14GBsyufT7pAVQqqC1OU0CB3IrXXCWpwne7aKVV6FpJDgN1uT
c389FbhFB52UCIPjjPWf9uLOOUi0GbBESYsEtNaV8fqw8k8jm+qfFHiU2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCwIWHcX2jOmbPh6FyNWt1Gz1+MRMB8GA1UdIwQY
MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt
NmRlMDVhMzE2MjM5LzEvTEFoWWR4ZmFNNlpzLUhvWEkxYTNVYlBYNHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5
LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBufASAwQB
ufSyAwQBzJrIMA0GCSqGSIb3DQEBCwUAA4IBAQB1eOUpK/nlL+XYTexYh+GmcCAP
fevdNkqMC/sANmqa7pmDemlqAVUElv6TQGpie0y5/hjuZINWnE8RImp19pM4UZrk
m2gPwSw0TXJIzQwdi/BByj6DAaBG953mc5WTu6+a1BXoO/xxi9cA1Ku2ldjf9HbC
13C64oURQ5dFX7d+tjONXmEZFkXp2q1PD2QYcIuLs8O4PlYgz+/F5V8rpJMs44zt
4f5q1+Mk62VDWszzOzmxdeRa97CPaIusM8Wu5WyLDjPy6Ia6t/N3vzvFYwr7/pyh
3NN3Lqb3x6y4mOw1meNzk+KHVgWvRVGFr7a+YF7mAw8c0g8kYrj823wWKZeI
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:10 2025 by rpki-client