Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/T_0YKsL2mWzZW5ZRB6cVauboP1w.roa
File: T_0YKsL2mWzZW5ZRB6cVauboP1w.roa (raw, json)
Hash identifier: k2F8D7dqD2h8DS3gqBKZRuIIeIj7o+kuTjjgHy28nek=
Subject key identifier: 4F:FD:18:2A:C2:F6:99:6C:D9:5B:96:51:07:A7:15:6A:E6:E8:3F:5C
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 018E3869FC6D59AFAF29B1F03F94E3B4BF6D
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/T_0YKsL2mWzZW5ZRB6cVauboP1w.roa
Signing time: Wed 13 Mar 2024 15:24:13 +0000
ROA not before: Wed 13 Mar 2024 15:24:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58222
IP address blocks: 89.43.116.0/22 maxlen: 24
156.67.8.0/22 maxlen: 24
185.2.200.0/22 maxlen: 24
185.16.172.0/22 maxlen: 24
212.237.208.0/22 maxlen: 24
2a03:da40::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:69:fc:6d:59:af:af:29:b1:f0:3f:94:e3:b4:bf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Mar 13 15:24:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ffd182ac2f6996cd95b965107a7156ae6e83f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:ad:4a:1d:31:59:15:6c:d5:e1:57:62:f8:
c8:24:12:01:fd:3b:b6:91:05:34:a9:2d:72:cc:94:
06:3b:35:47:b8:57:ad:c4:f0:18:fd:9f:51:6a:0b:
ad:ef:2c:e1:2b:0f:41:b3:ef:10:ec:78:7c:a8:7a:
9b:38:5e:95:a8:30:d0:ef:39:c7:7a:c3:d7:45:6d:
a5:24:51:11:8f:21:bc:cf:1d:3c:a8:12:c0:02:a5:
18:04:93:11:ee:d4:6d:f5:d3:e8:58:0f:1b:72:f6:
c3:55:c2:d7:2e:9b:f5:0e:b6:37:77:31:e0:2e:33:
bd:e3:df:b7:c4:a4:48:b8:d7:96:4f:ee:18:1d:7b:
a1:7f:30:d4:ca:e7:95:55:16:65:bd:16:c0:c3:50:
01:94:53:87:c1:03:37:03:d6:2d:4f:2a:66:a3:2f:
e1:a4:59:64:14:69:5e:3a:53:d0:b5:ad:6a:cd:64:
a4:6f:72:72:a1:bd:80:1f:19:c0:29:fe:42:58:e4:
c8:f0:fc:43:08:bc:54:36:cb:2b:e4:d2:ec:aa:ab:
2a:c9:9e:90:23:5a:5f:39:36:ad:c1:90:e3:2e:1c:
ba:ef:15:2b:2c:26:17:7a:e2:91:2d:bd:89:a5:59:
e6:d1:ed:97:c2:0c:f4:57:94:12:cd:a6:8c:5e:08:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:18:2A:C2:F6:99:6C:D9:5B:96:51:07:A7:15:6A:E6:E8:3F:5C
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/T_0YKsL2mWzZW5ZRB6cVauboP1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.116.0/22
156.67.8.0/22
185.2.200.0/22
185.16.172.0/22
212.237.208.0/22
IPv6:
2a03:da40::/29
Signature Algorithm: sha256WithRSAEncryption
9c:5a:1e:c8:a9:26:f1:35:3e:4a:a1:ac:38:75:83:31:81:4b:
b3:3d:34:7c:1d:2d:d6:cb:d8:21:35:63:5a:d4:12:84:9d:13:
cf:58:10:94:1f:90:75:b2:3d:7c:62:30:4a:ed:59:e9:a7:bb:
7c:5a:1d:8d:05:f9:9d:08:fe:88:88:68:e1:56:df:b9:80:7b:
f1:f4:7c:c7:5a:7d:96:09:5f:3e:1f:83:ad:be:81:8f:5c:43:
7d:81:52:b5:e2:cb:c0:37:d7:32:b4:99:d9:f8:59:da:f6:e8:
f0:9d:0d:3e:d0:64:cc:e2:57:78:69:3d:9d:de:58:83:5c:1a:
1f:2b:46:cd:5a:4a:b8:52:e4:b3:f8:44:68:63:7b:8d:eb:6a:
14:10:ce:d2:46:46:43:36:db:86:9f:4e:8a:6e:4b:1b:48:a9:
9d:d9:2b:78:bf:91:55:30:1b:64:e1:f5:84:f6:28:70:67:fa:
fa:5c:f6:cf:15:be:cb:ac:b5:fa:a9:57:96:ab:e2:cc:f1:77:
0e:f7:ad:68:81:1c:38:9d:19:79:b5:37:5d:1a:07:8c:74:d3:
9e:dd:62:5b:b6:a7:fb:3e:24:b9:be:ae:86:58:2c:49:54:d4:
39:35:cd:47:1e:cf:2b:aa:e6:29:6a:c5:fe:a0:ea:82:3e:58:
49:e3:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:37 2025 by rpki-client