Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/IgXkgnmYJlfuBHPF4JQu3E-mOS0.roa
File: IgXkgnmYJlfuBHPF4JQu3E-mOS0.roa (raw, json)
Hash identifier: 6nI8LcNp527fV/fO/65m4tuXp1lvf0eXtsIwxnB9fNc=
Subject key identifier: 22:05:E4:82:79:98:26:57:EE:04:73:C5:E0:94:2E:DC:4F:A6:39:2D
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 018E41EA1B95F51AB0B35495D22AF58AB67B
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/IgXkgnmYJlfuBHPF4JQu3E-mOS0.roa
Signing time: Fri 15 Mar 2024 11:40:45 +0000
ROA not before: Fri 15 Mar 2024 11:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204260
IP address blocks: 185.109.8.0/22 maxlen: 22
185.109.8.0/23 maxlen: 23
185.109.8.0/24 maxlen: 24
185.109.9.0/24 maxlen: 24
185.109.10.0/23 maxlen: 23
185.109.10.0/24 maxlen: 24
185.109.11.0/24 maxlen: 24
194.34.0.0/21 maxlen: 21
194.34.0.0/22 maxlen: 22
194.34.0.0/24 maxlen: 24
194.34.1.0/24 maxlen: 24
194.34.2.0/24 maxlen: 24
194.34.3.0/24 maxlen: 24
194.34.4.0/22 maxlen: 22
194.34.4.0/24 maxlen: 24
194.34.5.0/24 maxlen: 24
194.34.6.0/24 maxlen: 24
194.34.7.0/24 maxlen: 24
2a02:e600::/30 maxlen: 30
2a02:e600::/48 maxlen: 48
2a02:e600:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:ea:1b:95:f5:1a:b0:b3:54:95:d2:2a:f5:8a:b6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Mar 15 11:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2205e48279982657ee0473c5e0942edc4fa6392d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:5b:4c:13:6a:ba:1c:e5:4e:d4:0d:3e:8b:
ce:82:31:5d:8b:18:49:62:ac:d6:90:05:6c:c0:60:
cb:9b:02:b4:e8:39:bf:c2:b0:c7:a4:8d:8f:b9:41:
5a:36:2f:7c:5b:b3:3f:03:c1:64:7c:de:82:96:86:
56:db:86:c7:ae:83:8b:3b:c3:46:c5:28:4e:da:5f:
5f:e2:5a:76:30:2f:4b:24:dc:8b:b6:81:44:6a:33:
03:70:ff:c8:3d:e7:f9:32:0a:60:14:f8:d8:4a:4e:
f0:aa:17:d1:1f:87:9e:92:f6:1a:ef:e9:8a:65:a3:
4c:45:8b:45:a9:50:9c:e8:c2:3d:5f:f2:fd:d2:30:
c3:c0:08:86:b4:b3:a2:4b:17:95:87:2c:6d:67:9e:
6d:83:05:11:c6:d1:71:68:b4:53:d9:5d:dc:36:66:
61:d3:ed:d1:d2:01:98:0b:34:62:05:6d:65:bc:b0:
73:f0:03:ab:5d:82:cc:73:06:2e:9e:af:8e:32:8b:
4a:2f:c7:ff:cf:ae:aa:9c:27:16:9f:df:86:df:78:
91:bd:92:b6:2b:61:24:b8:4a:72:95:af:6c:de:c3:
19:41:00:3b:71:f0:f7:55:0b:62:c1:f2:dc:cb:44:
8f:d3:a2:2d:0e:84:e9:71:56:c3:ed:e0:31:ed:11:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:E4:82:79:98:26:57:EE:04:73:C5:E0:94:2E:DC:4F:A6:39:2D
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/IgXkgnmYJlfuBHPF4JQu3E-mOS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.8.0/22
194.34.0.0/21
IPv6:
2a02:e600::/30
Signature Algorithm: sha256WithRSAEncryption
84:8c:0b:5c:b4:c7:45:cd:84:41:b0:2b:b1:41:56:1a:bb:5c:
d4:5f:94:b9:17:13:30:9d:6b:b7:7f:ea:fb:f3:03:c9:38:44:
24:f8:39:3c:a5:39:54:cf:99:d5:96:77:b1:8b:ab:49:d4:99:
72:ef:11:b1:e0:6e:e7:48:55:bb:1c:2b:8b:4f:4c:8f:ac:a0:
03:a5:2f:ec:fc:22:bc:b6:4c:dc:36:86:59:8b:bf:77:d5:ff:
57:c2:e7:b7:c7:c2:d5:c8:a8:52:e3:6d:55:20:c1:a2:3e:d7:
4e:91:f7:5a:e7:fb:a3:20:52:86:0a:b1:0c:0e:3d:4d:9e:af:
c0:9e:e2:08:98:f1:a1:48:fa:e2:3c:40:7a:ce:9e:8f:cc:de:
22:0f:a8:de:52:97:ed:94:c5:94:a2:5a:b5:2a:15:21:55:06:
a7:7e:59:30:96:80:f6:69:f2:50:6e:7b:36:12:58:27:db:04:
d7:fa:01:a6:1a:1e:92:4e:8b:ca:77:9a:ef:a7:08:f7:ba:a6:
ce:a6:33:40:d4:b0:2d:24:51:df:1b:a0:56:05:9d:b8:f0:6c:
f4:36:88:06:74:16:fc:a6:9a:4e:0a:4f:37:34:24:59:bf:69:
01:1e:15:06:8d:46:de:8e:fb:9f:7d:a7:4f:fa:b9:5a:e7:59:
98:71:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:29:22 2025 by rpki-client