Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/7q93Qtz0Joas6oXWoUqHs9WLTls.roa
File: 7q93Qtz0Joas6oXWoUqHs9WLTls.roa (raw, json)
Hash identifier: o3JPzwHLaYCS4V+PZ0mbQvY7XZBXYEA1GJltgBWA8l0=
Subject key identifier: EE:AF:77:42:DC:F4:26:86:AC:EA:85:D6:A1:4A:87:B3:D5:8B:4E:5B
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 018CC9BC0806F9CFF9A998C4E6CE77F82E90
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/7q93Qtz0Joas6oXWoUqHs9WLTls.roa
Signing time: Tue 02 Jan 2024 10:33:12 +0000
ROA not before: Tue 02 Jan 2024 10:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50446
IP address blocks: 109.69.186.0/24 maxlen: 24
109.69.185.0/24 maxlen: 24
109.69.184.0/21 maxlen: 24
109.69.190.0/24 maxlen: 24
109.69.188.0/24 maxlen: 24
185.73.52.0/22 maxlen: 22
2a03:ba80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:08:06:f9:cf:f9:a9:98:c4:e6:ce:77:f8:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Jan 2 10:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeaf7742dcf42686acea85d6a14a87b3d58b4e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:d5:ab:64:28:b2:59:0f:49:80:00:1b:7b:
ce:77:93:5f:cd:74:47:22:85:9f:52:2e:b3:ec:e7:
64:26:c7:2e:9e:e3:2d:36:e9:4e:5e:82:e1:83:ef:
01:9d:d7:4a:2c:45:eb:2c:aa:cb:74:08:58:42:73:
0f:be:b4:d3:c4:88:63:df:d4:91:4a:44:e0:92:b4:
f3:1a:f2:c1:5c:91:db:99:b7:e6:60:54:32:e3:25:
22:9e:b3:85:34:1e:86:69:9f:dc:f0:72:8f:6e:bb:
b7:80:6d:dc:16:aa:b6:4e:ad:e0:0a:3f:91:03:a0:
14:eb:12:d8:79:45:fa:92:c0:c0:cb:61:ec:21:63:
8b:f5:c7:02:2f:bd:db:e3:7d:6b:96:96:19:1b:ea:
28:72:cf:e7:7a:eb:89:4e:0e:41:af:b5:d4:f3:91:
a7:7d:04:9b:26:b5:63:40:27:f5:5a:3a:03:43:80:
b3:cb:f6:3c:2d:9d:99:f7:8d:43:41:d6:92:46:e0:
26:29:5f:f0:86:a7:22:df:5c:10:f4:0f:e0:4d:f3:
e9:87:22:e2:ba:ad:cd:41:74:ee:b0:99:eb:8d:62:
47:a2:d4:78:e1:33:de:53:9a:c1:1f:66:aa:cf:e2:
41:37:68:43:e5:c1:ef:b2:b3:a3:a9:8f:2c:f2:b9:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AF:77:42:DC:F4:26:86:AC:EA:85:D6:A1:4A:87:B3:D5:8B:4E:5B
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/7q93Qtz0Joas6oXWoUqHs9WLTls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.184.0/21
185.73.52.0/22
IPv6:
2a03:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
ac:1c:cf:bf:b1:bb:77:fd:11:e5:70:df:a3:1e:ea:de:6c:eb:
52:24:7f:2d:ee:d1:6e:00:aa:ea:79:50:0b:86:09:47:dc:8c:
7b:14:e8:26:dc:73:b3:fb:fb:c5:65:5d:34:ad:f1:91:68:dd:
ed:3e:fe:f0:1c:b4:6f:70:7d:2c:4a:a2:9f:2e:ec:1a:65:99:
1b:77:dc:81:9e:e6:cd:12:13:82:e0:3b:55:8f:4e:95:ae:6d:
47:9a:bc:89:eb:f5:a8:a4:3e:94:23:06:57:7b:5e:b1:9b:ec:
47:26:2e:5e:59:31:02:77:8a:74:38:2c:47:dc:0d:c1:55:40:
2e:a2:cb:00:16:55:be:95:76:82:1f:3a:11:0e:47:e0:02:bb:
60:67:2d:c4:fa:f1:c4:ce:63:2b:c8:a0:75:5d:15:a4:3b:b3:
ee:d8:e3:f6:27:f1:3a:0c:66:08:e6:5f:5e:6c:f2:e0:87:3e:
9a:07:29:2c:c2:67:8e:0b:ef:18:f8:7f:7d:dd:f4:eb:98:ad:
35:a3:84:20:a6:58:49:1c:21:14:4d:c6:a7:59:7a:17:ba:48:
f5:e2:56:0e:99:f6:ce:4b:b5:2e:77:41:43:de:9e:7a:b6:eb:
0e:0c:8a:d5:f6:81:80:15:aa:f3:b9:a4:f2:df:e5:70:fd:fa:
33:a7:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:29 2025 by rpki-client