Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/iuDnezv4KkvoFbF9SNsn_JmxioI.roa
File: iuDnezv4KkvoFbF9SNsn_JmxioI.roa (raw, json)
Hash identifier: Tsu/ox7vpQsbiBqQioubsiUAXjGH6a3BLzoYClWWdMs=
Subject key identifier: 8A:E0:E7:7B:3B:F8:2A:4B:E8:15:B1:7D:48:DB:27:FC:99:B1:8A:82
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 018CC94DBC578C622640FB78CD0795DA4407
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/iuDnezv4KkvoFbF9SNsn_JmxioI.roa
Signing time: Tue 02 Jan 2024 08:32:43 +0000
ROA not before: Tue 02 Jan 2024 08:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 149.62.144.0/21 maxlen: 21
178.238.32.0/20 maxlen: 20
77.93.192.0/19 maxlen: 19
83.167.224.0/19 maxlen: 19
80.79.16.0/20 maxlen: 20
81.31.32.0/20 maxlen: 20
185.58.40.0/22 maxlen: 22
85.118.128.0/21 maxlen: 21
89.185.224.0/19 maxlen: 19
2a01:430::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:bc:57:8c:62:26:40:fb:78:cd:07:95:da:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jan 2 08:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ae0e77b3bf82a4be815b17d48db27fc99b18a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b8:54:dd:01:ee:65:12:f1:73:b0:40:8a:fa:
ad:4d:31:6f:1c:99:c4:b3:ac:a5:68:50:c0:f2:b8:
01:44:dd:3c:c0:b3:1a:9f:e4:11:f4:f0:01:45:18:
a4:b7:dc:67:97:b1:64:09:7c:08:98:fc:71:55:9f:
b6:55:7a:33:75:61:59:29:c3:26:3b:ee:71:b1:2d:
67:25:bb:8c:d6:71:95:af:a8:94:0f:56:e3:7a:e6:
f9:5d:12:87:5b:02:72:bb:3b:04:fb:5c:a7:2e:95:
45:f9:d1:fe:22:fc:40:b9:7a:97:54:4f:03:7d:20:
31:31:14:03:82:d7:56:56:08:01:58:e6:dd:f1:b5:
8a:28:cb:41:7b:86:d9:f1:c3:03:61:0a:e2:31:c8:
2d:35:70:79:7e:27:28:7f:22:4b:ee:84:48:27:f4:
56:3d:fd:db:a2:6a:0c:a5:01:5c:c1:9e:c5:66:0f:
5d:cd:ba:33:60:a9:47:6d:f3:2e:67:72:e4:98:8b:
ce:85:ca:cd:c3:1e:32:99:19:60:85:60:db:06:cf:
74:74:05:c2:3c:49:b8:07:7e:c3:3e:62:28:cb:6a:
a2:e9:5d:e5:6c:02:c7:e7:7b:b6:53:aa:25:41:18:
61:12:ce:71:21:54:4a:b1:71:30:db:23:65:99:6a:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:E7:7B:3B:F8:2A:4B:E8:15:B1:7D:48:DB:27:FC:99:B1:8A:82
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/iuDnezv4KkvoFbF9SNsn_JmxioI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.192.0/19
80.79.16.0/20
81.31.32.0/20
83.167.224.0/19
85.118.128.0/21
89.185.224.0/19
149.62.144.0/21
178.238.32.0/20
185.58.40.0/22
IPv6:
2a01:430::/32
Signature Algorithm: sha256WithRSAEncryption
86:39:00:20:c0:1c:d0:50:d6:38:17:40:ba:8f:37:a7:35:94:
54:56:e6:a3:d0:69:aa:68:59:0c:be:54:f1:69:f7:f7:95:85:
7e:b1:0d:4a:e9:b3:8d:80:a3:3a:1c:67:58:16:ec:e8:d4:6f:
f8:e2:d6:6d:14:cc:ac:bb:0b:06:3b:58:bc:d6:b1:c6:ee:ef:
5a:87:21:c8:df:a0:c3:ed:ae:69:d0:9d:46:96:a5:81:70:3d:
56:91:10:6e:c8:e0:b3:c4:96:f3:9f:65:0a:bf:29:43:23:54:
d4:7b:00:2b:25:ff:72:a3:e7:85:36:e0:35:29:a6:9b:46:ad:
48:9b:ad:93:b8:48:68:f2:f8:d5:80:8d:a7:c5:5e:8b:da:9a:
a7:5f:38:91:76:da:fd:63:97:db:31:bb:ef:68:98:26:37:a0:
43:be:aa:fd:79:0d:d0:d6:30:03:f7:43:9b:06:b0:10:4d:9d:
62:2f:e1:52:c0:f3:65:a7:9e:f0:80:40:11:db:7c:e9:6f:98:
29:9f:5f:75:03:8a:a6:21:be:b5:f7:a0:05:e2:5f:57:0e:7b:
d2:6f:69:c7:41:64:33:62:f0:68:bd:76:a9:24:2c:65:1a:a1:
15:4a:70:a1:8f:c4:0c:60:94:79:18:5e:0e:38:27:e4:47:f2:
18:ac:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:07 2025 by rpki-client