Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/hGgnXVTDcWJ3NLjUIqKQfOH_YVY.roa
File: hGgnXVTDcWJ3NLjUIqKQfOH_YVY.roa (raw, json)
Hash identifier: ljJ8zcRLCmo/7Rf4H72LpLnXUXMk08kZyHdxGmuaKmE=
Subject key identifier: 84:68:27:5D:54:C3:71:62:77:34:B8:D4:22:A2:90:7C:E1:FF:61:56
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0192A04125D6EF4C3E78677F26D69E2790E8
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/hGgnXVTDcWJ3NLjUIqKQfOH_YVY.roa
Signing time: Fri 18 Oct 2024 15:31:16 +0000
ROA not before: Fri 18 Oct 2024 15:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196755
IP address blocks: 80.251.108.0/22 maxlen: 22
80.251.108.0/23 maxlen: 23
80.251.110.0/23 maxlen: 23
157.143.248.0/21 maxlen: 21
178.157.18.0/23 maxlen: 23
178.157.20.0/22 maxlen: 22
178.157.24.0/23 maxlen: 23
178.157.26.0/23 maxlen: 23
178.157.28.0/22 maxlen: 22
178.157.40.0/22 maxlen: 22
178.157.44.0/22 maxlen: 22
178.174.106.0/23 maxlen: 23
178.174.108.0/23 maxlen: 23
217.181.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 25 Oct 2024 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a0:41:25:d6:ef:4c:3e:78:67:7f:26:d6:9e:27:90:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Oct 18 15:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8468275d54c371627734b8d422a2907ce1ff6156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:2f:9f:77:fc:f4:3f:53:ef:cb:a5:a3:d4:
49:9f:0c:ce:41:a5:b4:1f:4c:fc:ac:48:68:16:0f:
bf:ea:b4:06:27:83:59:54:5b:97:d4:25:d9:c7:c3:
2e:b9:b0:2f:9f:c0:d4:20:bf:78:31:19:a9:45:cd:
07:b4:6a:60:79:75:0b:88:b5:37:31:7e:5e:e1:4f:
9a:6d:e9:65:75:62:58:39:92:08:6e:06:cc:bd:9c:
df:e3:0e:17:ee:8e:2b:d0:5e:2e:5b:1b:61:a2:3e:
90:88:36:2e:c2:c7:20:fc:51:b6:d9:07:b8:6d:a1:
bf:43:6a:72:37:87:1a:2f:c0:f4:bb:12:a2:6c:11:
35:af:5a:56:d6:82:cf:c2:0a:ec:9a:34:d6:b4:34:
85:1e:e5:f5:35:60:11:49:29:b9:a0:15:e5:cd:12:
d5:1c:ea:7c:8a:50:be:12:52:c1:fb:8f:d8:4e:23:
c0:a9:34:1f:77:af:2d:12:62:ec:04:67:55:b8:fc:
0d:99:4c:87:6e:be:30:9d:d0:a0:5a:c0:f7:7a:36:
b9:0e:2c:39:59:e3:14:34:ab:72:a7:89:25:56:4e:
55:47:96:c3:71:78:94:98:5b:4b:36:df:4d:d2:32:
91:64:a1:54:11:e3:96:60:5e:a1:58:44:70:bb:25:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:27:5D:54:C3:71:62:77:34:B8:D4:22:A2:90:7C:E1:FF:61:56
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/hGgnXVTDcWJ3NLjUIqKQfOH_YVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.108.0/22
157.143.248.0/21
178.157.18.0-178.157.31.255
178.157.40.0/21
178.174.106.0-178.174.109.255
217.181.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:1e:a0:0a:d6:5b:71:c5:27:d7:f1:12:e1:99:0b:69:bb:b6:
81:59:65:3b:6c:54:60:e1:a4:ea:18:47:85:02:de:72:fb:81:
7a:6b:7a:4a:52:6a:f5:13:e1:6b:76:86:c6:1a:0f:31:9e:1a:
82:b4:50:8c:f6:eb:4e:36:98:a6:fd:00:ac:01:3c:b9:7f:68:
6a:50:92:98:42:68:5e:a6:ba:15:51:f3:74:72:c0:ff:67:9c:
03:f5:d3:33:b9:19:64:16:3f:17:f5:24:04:26:f7:35:a7:a7:
97:db:db:c1:80:09:52:b6:b9:58:90:6e:b5:8b:cd:3f:9d:a8:
21:a7:22:a6:a3:ff:ea:7f:bf:29:7c:5f:bf:cd:0a:78:25:45:
05:b9:0d:54:64:29:d4:42:c6:16:c2:35:f5:6f:7c:6c:7c:19:
5d:8e:62:6f:16:21:1a:94:ec:84:10:80:f3:52:bf:b7:85:60:
8a:7b:6e:cf:47:f1:a7:f3:ab:06:d6:6e:06:49:6e:d0:37:32:
98:4f:7d:cb:98:51:7a:1b:df:76:34:f6:2c:3c:1a:43:67:91:
97:88:b6:a1:fb:98:78:e3:15:41:b1:fa:df:ee:34:0d:5f:14:
96:8c:65:12:1d:80:5e:22:1e:8e:50:e7:5c:3a:03:29:6a:15:
89:df:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:59:10 2025 by rpki-client