Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/HY6jLwUmsi0IK-Npds_G-DlWruU.roa
File: HY6jLwUmsi0IK-Npds_G-DlWruU.roa (raw, json)
Hash identifier: uLrWh6y1PicSV2icgT9N9pYhrw/9pvvI5/zA2LLN4S0=
Subject key identifier: 1D:8E:A3:2F:05:26:B2:2D:08:2B:E3:69:76:CF:C6:F8:39:56:AE:E5
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 01913261048F008246FD04BE47755B7335FB
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/HY6jLwUmsi0IK-Npds_G-DlWruU.roa
Signing time: Thu 08 Aug 2024 14:25:04 +0000
ROA not before: Thu 08 Aug 2024 14:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5385
IP address blocks: 80.75.224.0/20 maxlen: 20
194.183.128.0/19 maxlen: 19
194.183.128.0/24 maxlen: 24
194.183.129.0/24 maxlen: 24
194.183.130.0/24 maxlen: 24
194.183.131.0/24 maxlen: 24
194.183.132.0/24 maxlen: 24
194.183.133.0/24 maxlen: 24
194.183.134.0/24 maxlen: 24
194.183.136.0/24 maxlen: 24
194.183.137.0/24 maxlen: 24
194.183.138.0/24 maxlen: 24
194.183.140.0/24 maxlen: 24
194.183.143.0/24 maxlen: 24
194.183.146.0/24 maxlen: 24
194.183.147.0/24 maxlen: 24
194.183.148.0/24 maxlen: 24
194.183.151.0/24 maxlen: 24
194.183.152.0/24 maxlen: 24
194.183.153.0/24 maxlen: 24
194.208.0.0/17 maxlen: 17
194.208.1.0/24 maxlen: 24
194.208.7.0/24 maxlen: 24
194.208.10.0/24 maxlen: 24
194.208.11.0/24 maxlen: 24
194.208.12.0/24 maxlen: 24
194.208.13.0/24 maxlen: 24
194.208.15.0/24 maxlen: 24
194.208.17.0/24 maxlen: 24
194.208.18.0/24 maxlen: 24
194.208.23.0/24 maxlen: 24
194.208.25.0/24 maxlen: 24
194.208.40.0/24 maxlen: 24
194.208.41.0/24 maxlen: 24
194.208.42.0/24 maxlen: 24
194.208.43.0/24 maxlen: 24
194.208.45.0/24 maxlen: 24
194.208.46.0/24 maxlen: 24
194.208.49.0/24 maxlen: 24
194.208.51.0/24 maxlen: 24
194.208.52.0/24 maxlen: 24
194.208.56.0/24 maxlen: 24
194.208.60.0/24 maxlen: 24
194.208.61.0/24 maxlen: 24
194.208.62.0/24 maxlen: 24
194.208.63.0/24 maxlen: 24
194.208.64.0/24 maxlen: 24
194.208.68.0/24 maxlen: 24
194.208.72.0/24 maxlen: 24
194.208.74.0/24 maxlen: 24
194.208.76.0/24 maxlen: 24
194.208.77.0/24 maxlen: 24
194.208.78.0/24 maxlen: 24
194.208.79.0/24 maxlen: 24
194.208.80.0/24 maxlen: 24
194.208.81.0/24 maxlen: 24
194.208.82.0/24 maxlen: 24
194.208.83.0/24 maxlen: 24
194.208.89.0/24 maxlen: 24
194.208.92.0/24 maxlen: 24
194.208.93.0/24 maxlen: 24
194.208.94.0/24 maxlen: 24
194.208.96.0/23 maxlen: 23
194.208.102.0/24 maxlen: 24
194.208.104.0/24 maxlen: 24
194.208.105.0/24 maxlen: 24
194.208.107.0/24 maxlen: 24
194.208.108.0/24 maxlen: 24
194.208.116.0/24 maxlen: 24
194.208.117.0/24 maxlen: 24
194.208.120.0/24 maxlen: 24
194.208.121.0/24 maxlen: 24
194.208.127.0/24 maxlen: 24
194.208.160.0/20 maxlen: 20
194.208.184.0/21 maxlen: 21
194.208.186.0/24 maxlen: 24
194.208.187.0/24 maxlen: 24
194.208.192.0/18 maxlen: 18
194.208.207.0/24 maxlen: 24
194.208.243.0/24 maxlen: 24
194.208.245.0/24 maxlen: 24
2001:af8::/32 maxlen: 32
2001:af8:3::/48 maxlen: 48
2001:af8:6106::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Sep 2024 08:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:61:04:8f:00:82:46:fd:04:be:47:75:5b:73:35:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Aug 8 14:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d8ea32f0526b22d082be36976cfc6f83956aee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:0e:e9:05:89:bf:7d:ad:55:52:6c:d7:e1:
f1:c6:0b:35:53:a2:9a:b6:cc:61:4d:fa:aa:35:66:
91:fa:5e:72:a2:41:76:4e:84:dc:c4:62:29:87:2a:
84:5f:63:56:91:db:1d:2c:b4:68:a8:02:fc:9e:3f:
57:65:ba:11:ea:1f:b6:f3:af:c3:1c:a9:98:67:51:
b1:e3:15:7c:92:2b:2e:19:ab:16:13:64:86:ad:0c:
32:bb:1d:f8:7f:c2:6d:c3:a2:72:57:ca:da:87:e7:
c5:d9:64:d7:0d:0b:c5:9a:78:44:2d:1c:ff:ad:77:
e5:b4:9c:e3:81:f0:df:71:fb:13:d4:cc:68:53:be:
37:6a:02:bd:0d:79:5d:a5:4d:9c:43:57:38:67:7a:
ee:e9:49:95:49:b6:ca:10:84:e2:20:a2:f3:e0:df:
4a:76:9d:61:5d:90:92:c3:53:b7:00:2f:ac:a5:a1:
4a:e4:18:c0:c4:b3:9e:6c:66:fa:e4:aa:0d:07:64:
dc:f4:67:f2:81:c3:8f:b3:62:e4:d5:a1:ed:3f:a9:
c1:37:60:18:61:91:ec:6b:69:fe:79:bc:2b:86:24:
0c:c9:20:c0:7e:b0:99:3c:12:0c:87:17:6f:79:2d:
37:2a:1b:6e:d3:6e:25:51:ec:d5:b4:72:11:fc:d7:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:A3:2F:05:26:B2:2D:08:2B:E3:69:76:CF:C6:F8:39:56:AE:E5
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/HY6jLwUmsi0IK-Npds_G-DlWruU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
194.183.128.0/19
194.208.0.0/17
194.208.160.0/20
194.208.184.0-194.208.255.255
IPv6:
2001:af8::/32
Signature Algorithm: sha256WithRSAEncryption
1e:93:50:39:d1:54:2e:c8:7f:fb:30:91:c7:df:93:2f:15:a7:
40:3b:3b:38:a0:48:d2:21:31:f7:a8:31:3a:79:42:44:52:00:
46:c6:17:6a:6f:ae:ab:96:8c:d8:5c:ec:88:44:6d:fb:7d:01:
46:9e:a2:40:5b:2c:11:0f:89:aa:51:91:f0:3d:7f:54:db:89:
60:5e:b3:f5:bb:2a:de:1e:9a:d7:9a:dd:58:5e:09:c4:17:f1:
e7:f4:0b:94:84:85:71:7b:3b:5f:02:c3:1d:bf:6a:13:44:e4:
22:4b:dd:f9:26:4b:13:00:bd:b4:fe:34:9a:e6:fe:66:7a:e1:
2c:02:57:f6:d2:b8:90:f4:e7:a5:31:e8:42:3e:48:c8:7d:3b:
8b:11:22:18:d3:38:85:4b:f3:00:64:b2:bb:d7:76:f2:62:35:
dc:37:d1:14:e8:2c:59:22:b0:30:09:c7:c9:fe:c6:af:ae:7e:
4d:81:40:02:4b:f8:09:c8:03:d7:b7:b0:db:05:ca:5d:8b:ed:
48:86:ca:c9:ed:91:7a:7f:17:6e:ea:a3:c0:d3:42:76:f5:2b:
91:b4:ba:5d:fe:87:f5:df:d7:9c:41:d3:a3:4b:45:7c:ba:38:
b8:47:ec:76:78:85:f9:f2:28:01:c1:3c:de:41:d3:6d:58:29:
4b:8c:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:06 2025 by rpki-client