Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/jSFRmszely4TfdSid_-wygZ0hWk.roa
File: jSFRmszely4TfdSid_-wygZ0hWk.roa (raw, json)
Hash identifier: 9Hwf3Dt5LGkgjLZPOWLn/V6ieqMXjkLfcBeC3Garis4=
Subject key identifier: 8D:21:51:9A:CC:DE:97:2E:13:7D:D4:A2:77:FF:B0:CA:06:74:85:69
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 018F571EA30C6D9D4E34775DAB68F58B68E2
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/jSFRmszely4TfdSid_-wygZ0hWk.roa
Signing time: Wed 08 May 2024 07:32:56 +0000
ROA not before: Wed 08 May 2024 07:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 5.23.112.0/21 maxlen: 21
95.130.56.0/21 maxlen: 21
95.130.56.0/24 maxlen: 24
95.130.57.0/24 maxlen: 24
95.130.58.0/24 maxlen: 24
95.130.59.0/24 maxlen: 24
95.130.60.0/24 maxlen: 24
95.130.61.0/24 maxlen: 24
95.130.62.0/24 maxlen: 24
95.130.63.0/24 maxlen: 24
109.72.192.0/20 maxlen: 20
109.72.192.0/21 maxlen: 21
109.72.192.0/24 maxlen: 24
109.72.193.0/24 maxlen: 24
109.72.194.0/24 maxlen: 24
109.72.195.0/24 maxlen: 24
109.72.196.0/24 maxlen: 24
109.72.197.0/24 maxlen: 24
109.72.198.0/24 maxlen: 24
109.72.199.0/24 maxlen: 24
109.72.200.0/21 maxlen: 21
109.72.200.0/24 maxlen: 24
109.72.201.0/24 maxlen: 24
109.72.202.0/24 maxlen: 24
109.72.203.0/24 maxlen: 24
109.72.204.0/24 maxlen: 24
109.72.205.0/24 maxlen: 24
109.72.206.0/24 maxlen: 24
109.72.207.0/24 maxlen: 24
109.238.176.0/20 maxlen: 20
109.238.184.0/24 maxlen: 24
176.67.64.0/20 maxlen: 20
185.11.176.0/22 maxlen: 22
185.246.4.0/22 maxlen: 22
2a02:d2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 May 2024 04:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:1e:a3:0c:6d:9d:4e:34:77:5d:ab:68:f5:8b:68:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: May 8 07:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d21519accde972e137dd4a277ffb0ca06748569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:1d:63:8d:75:76:6b:3a:de:78:ee:93:0f:
32:9c:e7:ea:ef:52:5d:3f:d4:24:c9:71:c9:fb:77:
3d:bf:60:a5:bf:01:a6:36:2e:e6:c4:90:19:f9:d6:
9e:f2:4b:6b:f7:96:5c:80:56:49:50:15:23:e8:04:
98:09:56:6c:04:8a:5f:fe:2b:4d:c6:a3:8b:06:b8:
b1:8a:47:1a:11:c2:1c:1f:54:1a:cd:61:8a:95:2a:
aa:ec:66:9b:4c:eb:5b:9d:33:a6:8d:cb:d8:d4:65:
d2:ec:38:7f:ce:44:17:85:d7:f6:a3:7c:ea:50:d7:
cb:08:90:d0:29:98:d9:5b:35:2d:1e:de:34:e8:c4:
a0:f3:ca:2f:9f:39:5a:34:c1:42:8e:ea:30:d6:12:
00:cd:cf:d1:16:e8:d1:fe:e8:43:62:56:7b:af:a1:
9b:b5:f0:db:13:68:d7:6e:8d:f7:41:d1:2a:8b:8e:
80:94:33:9b:bd:8f:d5:7b:b7:42:0c:a0:34:44:ca:
e1:a8:a0:ca:ac:ae:c4:c2:43:f6:d3:fd:69:ee:c8:
fd:6c:37:80:a4:77:d7:0e:f0:aa:84:53:21:46:e9:
51:69:9d:2d:de:ce:dd:0b:5d:1c:6d:54:ef:01:a6:
c8:4d:1e:b8:eb:35:a1:f7:81:bb:ca:ba:15:e7:ce:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:51:9A:CC:DE:97:2E:13:7D:D4:A2:77:FF:B0:CA:06:74:85:69
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/jSFRmszely4TfdSid_-wygZ0hWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.112.0/21
95.130.56.0/21
109.72.192.0/20
109.238.176.0/20
176.67.64.0/20
185.11.176.0/22
185.246.4.0/22
IPv6:
2a02:d2c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:65:7e:82:74:3b:5e:96:9e:38:be:88:ef:c1:a6:04:b9:cf:
62:59:d3:0f:01:c0:8a:90:0a:f5:f6:34:17:0f:db:c9:7d:b9:
11:3e:33:72:2b:53:57:f0:10:92:27:61:60:c5:d9:d0:e3:e8:
01:c6:40:7d:7c:59:0b:66:da:14:cd:1a:c7:72:36:28:24:c4:
7d:0e:72:0c:4a:98:e7:af:22:d5:97:a9:b4:1c:d9:9c:bc:b4:
13:c4:0c:da:d2:de:62:ee:0a:24:93:a3:68:68:e7:e4:d3:30:
19:4d:3d:6b:18:5e:31:de:1d:8a:34:5c:9f:6f:f2:24:8a:d5:
9d:03:e7:21:ad:41:f7:f6:9c:d6:b9:4e:03:de:04:ac:da:b3:
cd:ee:eb:da:08:5d:18:92:1a:8c:9c:e0:d9:82:17:a4:71:7f:
31:f4:8a:7d:70:97:1c:37:c8:e3:ec:3c:ca:6e:a7:0e:f5:9e:
ff:43:d9:e4:3a:5c:75:30:f9:1e:ec:32:56:58:f0:74:08:38:
7c:af:36:06:ce:a1:bd:25:49:fe:14:f8:1e:e5:80:4a:6f:68:
f4:6a:78:d9:f6:3f:63:62:80:6e:4f:93:25:7f:09:22:e4:0b:
d5:f0:9c:e9:7a:c4:4d:e1:9e:de:54:78:c9:40:af:f8:7c:c8:
a1:75:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:15 2025 by rpki-client