Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8G4sGIHmpN1GHrvufgHkOkok6qE.roa
File: 8G4sGIHmpN1GHrvufgHkOkok6qE.roa (raw, json)
Hash identifier: 5zw8FxYMeEpeIyR/IGxHKk9knuO38jZ/2R0plGqSKIQ=
Subject key identifier: F0:6E:2C:18:81:E6:A4:DD:46:1E:BB:EE:7E:01:E4:3A:4A:24:EA:A1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBC16CCFD02339880B75AA32EBE89
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8G4sGIHmpN1GHrvufgHkOkok6qE.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 62.106.84.0/24 maxlen: 24
89.21.85.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
91.226.59.0/24 maxlen: 24
176.97.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 15:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:16:cc:fd:02:33:98:80:b7:5a:a3:2e:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06e2c1881e6a4dd461ebbee7e01e43a4a24eaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:54:53:d5:a8:61:c7:36:31:ea:37:64:50:
e0:41:9f:8a:c9:48:a9:e1:3f:e7:a4:0a:a5:6d:bb:
ac:61:f5:41:4d:97:6b:c5:85:d0:9f:8f:bd:c3:6c:
b7:5e:5b:69:73:f8:7a:ba:46:a5:e9:a8:8b:1d:47:
07:04:a8:1d:71:52:c4:22:34:c9:4a:da:b8:8a:af:
56:12:e3:2a:c2:6d:76:0a:86:2a:b4:04:e2:f3:97:
ad:a9:65:cf:5c:f9:cd:5f:27:3c:b1:64:21:49:5a:
b6:91:70:e9:e4:95:6c:c5:1a:04:be:2f:56:ce:a7:
f3:60:34:9d:70:9c:ad:a1:8a:5a:60:b0:df:9d:27:
27:81:49:d6:ba:8f:d9:02:25:31:ec:1b:ce:62:04:
55:21:ec:a6:40:ca:eb:1f:7c:ad:55:27:9a:14:72:
e7:ce:12:fd:2e:6d:01:3f:12:34:94:78:d5:cd:b8:
24:b3:76:c3:66:5b:2e:91:b0:0f:7d:50:28:b4:38:
d3:f0:97:19:f7:2c:58:eb:fc:e3:5a:fb:c4:90:f5:
03:aa:e3:e0:89:48:5f:50:52:49:6c:62:bf:cd:ff:
d6:34:c2:a7:26:a9:75:65:06:3e:98:4d:51:a2:48:
1f:be:4b:14:f0:ad:39:b4:90:c0:28:88:d8:10:1d:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:2C:18:81:E6:A4:DD:46:1E:BB:EE:7E:01:E4:3A:4A:24:EA:A1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8G4sGIHmpN1GHrvufgHkOkok6qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
89.21.85.0/24
89.251.22.0/24
91.226.59.0/24
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
94:82:28:b7:33:3a:36:74:ca:48:af:39:98:de:21:2f:65:48:
8e:e9:fd:5a:60:03:a3:22:14:c9:ee:96:0a:97:dd:60:6e:3a:
81:aa:f3:ae:40:31:19:da:d8:be:eb:7d:82:a3:bf:39:d2:77:
17:22:b0:62:36:bb:7a:46:b2:4c:b1:ee:3e:8a:a6:a7:e2:02:
e1:78:26:62:82:5d:06:e9:fa:fb:c8:ce:2c:0d:04:5b:75:97:
2e:bd:de:56:03:8c:ec:20:87:e4:02:cf:f8:66:c5:26:5c:21:
bf:6e:8a:95:72:6b:5f:e0:4d:18:8e:82:86:ee:b0:2e:69:b5:
be:4e:21:18:e0:81:bb:ed:1c:52:6b:65:4e:3b:98:ff:53:c5:
3f:05:8e:a3:67:fe:4c:0f:b6:bd:8c:b7:04:44:0b:ed:f0:2e:
3e:3a:3d:8a:74:1e:5b:da:84:40:92:3b:18:84:e2:95:f2:6b:
93:93:e1:0e:66:39:f4:cc:ce:9e:cd:ca:3c:5c:bc:a9:de:e2:
5e:6a:9b:cb:39:ae:c2:00:c2:fa:8a:6c:d6:ff:13:90:60:28:
42:7f:f6:3b:42:8f:b2:63:6a:0e:3f:51:0f:98:2a:03:91:16:
3c:94:7e:fe:13:bd:08:8d:65:fa:4d:af:2d:b3:6e:63:5a:6d:
cc:2b:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:52:35 2025 by rpki-client