Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/h27sQnM8hH3hXtyuqV74vtc3pgk.roa
File: h27sQnM8hH3hXtyuqV74vtc3pgk.roa (raw, json)
Hash identifier: TxyIpNh+HbS+rsVegJZ39AZcs/TCUUQeeA+g48bsOaY=
Subject key identifier: 87:6E:EC:42:73:3C:84:7D:E1:5E:DC:AE:A9:5E:F8:BE:D7:37:A6:09
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 018CC2DAEE4481B150DAF328A63ACDC7E23A
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/h27sQnM8hH3hXtyuqV74vtc3pgk.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197036
IP address blocks: 195.28.218.0/24 maxlen: 24
178.23.152.0/21 maxlen: 21
195.28.192.0/19 maxlen: 19
185.228.20.0/22 maxlen: 22
185.19.240.0/22 maxlen: 22
213.173.51.0/24 maxlen: 24
213.173.48.0/22 maxlen: 22
2a09:2600::/29 maxlen: 29
2a02:21e8:71::/48 maxlen: 48
2a0c:e600::/29 maxlen: 29
2a0c:e9c0::/29 maxlen: 29
2a0d:d040::/29 maxlen: 29
2a02:21e8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jan 2024 08:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ee:44:81:b1:50:da:f3:28:a6:3a:cd:c7:e2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=876eec42733c847de15edcaea95ef8bed737a609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:b9:da:79:34:20:53:70:d9:08:2c:68:3f:
54:d1:8b:eb:16:ca:22:81:be:d0:4e:06:c0:37:05:
ef:18:a3:0b:c5:5f:d8:eb:64:b1:8b:8e:9d:5e:74:
67:1c:2d:94:78:ee:1a:37:d2:48:80:2a:00:74:20:
33:35:75:46:de:b4:32:18:01:ae:d8:34:32:ca:ea:
41:ec:f5:32:1a:aa:df:c6:66:a4:6e:7d:5d:a9:97:
b4:2f:1f:f5:97:1c:bf:b6:4b:eb:6e:1f:e6:9b:bd:
f4:a0:25:f7:4a:84:9f:06:8f:a9:95:27:f9:61:e4:
77:83:1a:e5:ea:32:a8:37:b3:dd:b7:81:3f:18:60:
13:7c:39:d1:f8:87:f2:28:7a:71:c6:48:a3:d6:26:
fb:99:b8:4d:ad:de:f7:cc:4b:48:09:95:c1:0e:71:
22:8a:78:f3:1c:28:7d:7e:26:19:01:fe:b3:ce:58:
4c:df:95:5d:8b:db:7b:0c:6c:fe:cc:e4:74:21:38:
fb:98:2e:3a:85:96:5b:35:21:13:e3:1e:4f:23:e1:
6c:cb:1d:4d:3a:b3:9f:99:9d:e8:86:c5:e0:7a:55:
08:10:9e:78:a6:e0:da:ed:c5:3d:cf:d5:bc:2a:c6:
6c:89:32:5f:c2:32:4c:d7:b8:db:e0:e6:9a:c8:bf:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:EC:42:73:3C:84:7D:E1:5E:DC:AE:A9:5E:F8:BE:D7:37:A6:09
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/h27sQnM8hH3hXtyuqV74vtc3pgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.152.0/21
185.19.240.0/22
185.228.20.0/22
195.28.192.0/19
213.173.48.0/22
IPv6:
2a02:21e8::/32
2a09:2600::/29
2a0c:e600::/29
2a0c:e9c0::/29
2a0d:d040::/29
Signature Algorithm: sha256WithRSAEncryption
41:44:5c:63:69:1a:90:4a:32:1b:e7:23:46:9b:93:a2:5d:56:
7f:a2:39:22:12:f6:bc:d9:a4:ed:75:7a:89:33:8f:52:c0:69:
98:ef:00:2a:39:21:92:46:42:21:80:68:b6:f0:18:04:2d:0a:
4d:47:6f:d9:41:2b:f8:d0:6d:4a:2f:77:dd:4d:a6:8a:eb:e2:
24:ee:74:3b:0d:58:45:49:26:0f:f3:88:a0:0a:1c:30:8a:30:
30:3e:3c:62:f6:1f:05:76:c3:04:8a:41:8b:0d:cb:91:e4:c7:
58:30:51:77:8b:cf:7f:ee:85:7f:f5:26:a9:d5:c6:04:0a:b5:
75:c1:aa:51:f6:6e:f9:13:e2:4e:b2:22:a9:4e:07:51:d3:02:
4b:4a:a2:99:f1:aa:07:ef:fd:26:7f:c3:dd:a8:be:e5:41:b6:
74:56:f5:e7:29:5e:e9:bd:cc:20:3b:1d:4c:58:23:34:fb:1f:
05:70:9a:33:09:1b:b7:4c:1f:34:03:6a:73:06:65:d8:2d:6a:
f2:35:04:10:a6:27:77:eb:8d:ca:c5:80:54:33:ed:1a:00:14:
1e:a4:aa:4f:8f:1e:3b:85:48:1a:83:3a:31:c1:88:97:c1:df:
40:52:a6:c5:bc:ac:a9:84:75:6e:fb:4f:95:83:b6:f5:87:b3:
99:3f:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:22 2025 by rpki-client