Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/85rmH7WUIfOCis3ci1RUUjOCinE.roa
File: 85rmH7WUIfOCis3ci1RUUjOCinE.roa (raw, json)
Hash identifier: 8SePte5A/dNy6kecm10BOC9hzOSYIEMEYs+C6vAe3H4=
Subject key identifier: F3:9A:E6:1F:B5:94:21:F3:82:8A:CD:DC:8B:54:54:52:33:82:8A:71
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019384F2454008C4025B5B82B6AA47051968
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/85rmH7WUIfOCis3ci1RUUjOCinE.roa
Signing time: Mon 02 Dec 2024 01:18:10 +0000
ROA not before: Mon 02 Dec 2024 01:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 91.147.119.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 20:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:84:f2:45:40:08:c4:02:5b:5b:82:b6:aa:47:05:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Dec 2 01:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39ae61fb59421f3828acddc8b54545233828a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:c9:c8:b8:d4:a7:02:8f:98:8c:e5:89:7f:
bc:39:58:74:8e:ed:29:ca:f5:97:1f:ba:55:11:e9:
57:a6:ed:56:97:a3:c5:07:6d:cd:82:75:cf:b4:6a:
be:e3:91:6e:11:f3:db:b3:b9:d7:4f:6b:72:dd:be:
6c:93:d0:e6:fa:de:2d:3c:04:ef:bf:61:eb:e5:b9:
09:ab:cf:b4:9d:aa:9d:02:d5:0b:77:72:6e:41:1a:
ea:2e:dd:4e:ed:b3:24:f6:61:2d:db:bc:ae:c6:07:
df:1c:ed:79:e3:a3:40:42:bb:70:33:63:02:21:4c:
67:1e:2d:41:2e:a5:54:12:68:70:a9:18:2d:e8:41:
6b:31:dc:c3:04:16:99:18:43:93:67:8e:a6:4b:5a:
e7:3d:ec:cc:87:b6:55:f9:ec:46:6b:29:16:22:44:
c8:95:4b:c6:d4:e3:d8:06:1f:c6:73:a9:e3:1f:35:
79:5d:db:cc:bf:a8:06:c5:26:34:68:90:93:69:97:
85:a4:63:c5:1f:7c:ba:69:98:09:67:ab:9e:4d:b0:
3b:cd:5a:e4:27:c8:d0:c3:40:2b:a5:8d:f1:2f:99:
55:69:a0:9e:61:d2:58:b5:ed:41:46:ef:1c:a5:dc:
4f:dc:7e:00:9a:b9:7d:e2:ed:10:d5:60:6a:64:55:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:E6:1F:B5:94:21:F3:82:8A:CD:DC:8B:54:54:52:33:82:8A:71
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/85rmH7WUIfOCis3ci1RUUjOCinE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.123.0/24
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4e:b6:06:c5:f6:15:b0:fa:80:57:41:f0:e5:a9:93:d7:85:
45:a4:33:f6:e5:9d:05:31:77:4b:fd:be:00:50:df:56:28:d2:
45:9b:7b:c9:30:85:5c:50:65:46:5a:08:11:12:70:5e:e3:b7:
d8:8b:a6:d9:27:50:c9:11:61:b2:97:c1:0d:62:95:c0:2c:76:
b5:27:47:a8:91:2c:97:0d:5f:d3:49:b2:5e:83:25:7c:3f:aa:
a3:b9:ff:69:0c:f2:1b:8f:21:82:a9:88:d3:98:09:63:3a:04:
0c:32:6a:42:61:88:b2:74:d4:07:5c:df:39:c8:3b:8a:28:d1:
c1:17:9c:41:ba:02:ec:7a:3a:15:14:df:d3:0b:ae:1e:0a:7c:
30:40:01:fe:16:66:07:83:f1:3c:06:42:55:35:61:59:50:5d:
17:9f:f6:0b:18:e0:68:97:ea:ee:43:02:4f:11:c1:f1:40:21:
06:9f:91:bc:bb:c0:38:a7:5d:36:bd:88:0e:4a:6b:a4:d5:7f:
40:c5:10:91:15:a2:24:7a:96:c1:d5:cb:bc:d2:c9:a7:2b:c0:
9c:6f:af:b5:ac:56:f0:3b:dd:31:5f:7e:45:05:e4:93:b1:3c:
72:35:70:3e:ea:9d:fb:97:b3:3c:30:4f:c2:84:3a:f9:22:62:
3b:ac:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:10 2025 by rpki-client