Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/cY_WH3hZ7nzTPHRH8exYoMTrq2A.roa
File: cY_WH3hZ7nzTPHRH8exYoMTrq2A.roa (raw, json)
Hash identifier: BpO00f4gi6w9ZpT4AZ1LbKb2ce4JSwNHW1wcfOv2u9w=
Subject key identifier: 71:8F:D6:1F:78:59:EE:7C:D3:3C:74:47:F1:EC:58:A0:C4:EB:AB:60
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 018CC2DB48B1564EB509C3789410E02783AC
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/cY_WH3hZ7nzTPHRH8exYoMTrq2A.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204260
IP address blocks: 194.34.0.0/24 maxlen: 24
194.34.0.0/22 maxlen: 22
194.34.0.0/21 maxlen: 21
194.34.1.0/24 maxlen: 24
194.34.2.0/24 maxlen: 24
194.34.3.0/24 maxlen: 24
194.34.4.0/22 maxlen: 22
194.34.4.0/24 maxlen: 24
194.34.7.0/24 maxlen: 24
194.34.5.0/24 maxlen: 24
194.34.6.0/24 maxlen: 24
185.109.8.0/22 maxlen: 22
185.109.8.0/24 maxlen: 24
185.109.8.0/23 maxlen: 23
185.109.9.0/24 maxlen: 24
185.109.10.0/23 maxlen: 23
185.109.10.0/24 maxlen: 24
185.109.11.0/24 maxlen: 24
2a02:e600::/30 maxlen: 30
Validation: Failed, certificate revoked on Fri 15 Mar 2024 11:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:48:b1:56:4e:b5:09:c3:78:94:10:e0:27:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=718fd61f7859ee7cd33c7447f1ec58a0c4ebab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:d5:7e:c1:9f:cf:55:c1:b0:a0:c9:11:6d:
c3:67:cb:dc:b6:c4:2f:8e:4e:93:53:46:f1:f8:6c:
ff:6f:f8:de:7f:40:e3:88:de:e4:2f:9d:42:26:b7:
b9:42:70:a7:2c:60:71:c6:93:28:6c:61:57:9c:79:
6b:cc:63:f6:fc:93:2d:32:52:46:b1:1d:3a:bf:c6:
a5:a0:03:37:b5:6c:da:b1:bd:f5:c4:f0:1c:62:03:
a9:0b:62:1d:16:e2:fa:c0:11:09:4b:cd:73:43:1e:
00:37:ea:9e:42:b4:7b:e1:90:85:11:32:24:54:c6:
33:71:b8:3d:34:09:50:4d:6b:dd:56:71:36:f9:99:
8e:a0:b2:45:14:be:c6:3f:2b:dd:e7:63:fc:ab:6b:
ea:c8:88:c4:a3:65:2d:52:8f:60:e2:ec:a4:f5:4e:
ee:da:f5:56:a5:fc:13:66:18:97:bf:fa:2a:34:3a:
39:03:7d:45:b1:79:2c:b6:8b:f6:6d:82:b2:42:27:
9e:eb:d9:18:1f:bb:3e:33:a0:53:2c:31:28:24:7f:
6a:b4:d5:ed:7a:dd:93:45:26:6e:31:ee:43:29:e8:
be:3c:8c:ad:c8:41:9c:ad:93:40:27:ea:63:cf:aa:
cd:0d:2a:c4:76:81:29:3e:8b:0f:7c:bf:7b:9b:34:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:D6:1F:78:59:EE:7C:D3:3C:74:47:F1:EC:58:A0:C4:EB:AB:60
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/cY_WH3hZ7nzTPHRH8exYoMTrq2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.8.0/22
194.34.0.0/21
IPv6:
2a02:e600::/30
Signature Algorithm: sha256WithRSAEncryption
8a:b1:d4:ba:60:f2:e6:55:88:cd:f4:1a:1c:fd:28:2f:49:ef:
eb:3a:e5:21:22:77:05:41:11:c1:ba:32:53:1d:90:2f:b0:58:
9a:4d:c0:f0:18:2c:e2:16:da:dc:71:c5:9a:f2:fa:d4:81:38:
b5:3e:7a:64:cb:31:6b:bd:c4:08:3e:69:59:94:ba:85:eb:1f:
e7:6b:dd:76:ce:98:95:ad:1f:ba:f8:41:71:8d:50:ec:81:a4:
f3:46:97:ff:f6:67:8f:41:57:c0:a4:5b:a4:31:03:b0:3f:33:
6d:5a:8c:b3:56:95:f4:c7:c5:8a:37:e8:6b:11:3c:c8:c7:e2:
ec:c3:df:16:34:6c:16:09:29:48:54:05:86:89:a8:81:46:71:
1a:c1:7e:d8:20:82:29:f0:55:ce:a2:69:ff:e8:c1:ec:e7:4c:
a9:02:51:38:a8:70:32:63:eb:46:09:f4:ce:f0:c5:33:a1:c6:
85:bb:73:2f:11:f5:10:76:88:fb:1f:53:26:a2:b4:78:95:d7:
00:db:e5:d5:69:09:1b:2d:f2:66:f1:de:75:23:d3:5c:d4:54:
c8:2a:40:d0:50:e4:fc:4d:0e:04:07:9b:15:66:de:bc:d4:9e:
80:51:c8:d3:4e:74:e3:94:ed:79:3d:b9:36:e5:ff:5b:45:e3:
e5:2e:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:48 2025 by rpki-client