Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/hEIgD18GJdmgS6J8gOsgNtqzYug.roa
File: hEIgD18GJdmgS6J8gOsgNtqzYug.roa (raw, json)
Hash identifier: IzxKFHWGq1NgzXol8F+KDfmDx88kRTpP8Dy57p6P0BA=
Subject key identifier: 84:42:20:0F:5F:06:25:D9:A0:4B:A2:7C:80:EB:20:36:DA:B3:62:E8
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 018CC64B618E0CDEE81BA67D32082AE760F4
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/hEIgD18GJdmgS6J8gOsgNtqzYug.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50957
IP address blocks: 78.31.104.0/21 maxlen: 21
185.98.196.0/22 maxlen: 22
5.153.248.0/21 maxlen: 21
213.170.0.0/19 maxlen: 19
31.25.184.0/21 maxlen: 21
37.128.128.0/21 maxlen: 21
89.200.136.0/21 maxlen: 21
77.73.0.0/21 maxlen: 21
2a02:24e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:61:8e:0c:de:e8:1b:a6:7d:32:08:2a:e7:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8442200f5f0625d9a04ba27c80eb2036dab362e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:81:b3:37:73:a5:f1:42:32:13:d1:b3:c9:
f2:27:b4:0b:be:95:90:d9:d5:2c:84:50:fd:f3:72:
96:e8:79:d0:66:47:66:0d:c1:13:f6:e9:96:f8:54:
2b:0d:a6:14:b0:8b:b7:9d:fe:71:9d:ef:f2:9b:24:
30:ad:13:5f:23:db:63:4e:6d:89:82:75:77:bc:1d:
a1:4a:19:43:03:54:ac:22:1f:01:90:64:e9:a7:a6:
a0:72:23:73:3e:09:2c:91:13:0e:8b:3c:f5:41:ab:
39:b2:b1:76:1a:a5:d3:6b:82:fb:a8:41:50:1c:4b:
ac:55:a9:a9:4b:be:33:ce:9a:bb:98:e5:29:41:9c:
c0:0c:18:74:a8:37:06:77:8c:48:83:53:5c:fd:17:
ef:e2:6f:ef:29:58:84:e5:69:db:18:e9:1f:5c:51:
fb:8a:1b:26:ca:e9:61:44:bc:ea:e5:d1:9d:75:9b:
2a:6b:62:c2:93:f7:d8:a5:1c:71:5c:88:e3:83:c1:
36:5e:56:2d:0e:dd:c6:11:da:1e:0c:80:56:dc:7d:
f6:43:6f:1f:77:87:6b:59:e6:ef:76:2f:22:13:3c:
e5:f7:11:44:60:9a:d0:7b:b8:87:61:0c:cd:53:3d:
f3:53:29:e8:9c:28:9c:d0:ce:f3:3a:a3:8a:b0:cb:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:20:0F:5F:06:25:D9:A0:4B:A2:7C:80:EB:20:36:DA:B3:62:E8
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/hEIgD18GJdmgS6J8gOsgNtqzYug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.248.0/21
31.25.184.0/21
37.128.128.0/21
77.73.0.0/21
78.31.104.0/21
89.200.136.0/21
185.98.196.0/22
213.170.0.0/19
IPv6:
2a02:24e0::/32
Signature Algorithm: sha256WithRSAEncryption
62:31:a9:3b:dc:aa:a8:08:cd:72:b0:96:fd:cb:82:45:f2:db:
78:1b:e2:66:89:6f:ea:aa:92:ca:8f:fd:9d:37:f3:37:19:af:
4e:fa:42:c6:c5:6d:cd:33:14:9a:ef:66:37:a1:4b:6c:b6:3a:
2f:83:12:27:87:36:26:3a:e2:60:9b:98:08:62:81:70:45:86:
3a:86:6b:42:9d:26:11:aa:9d:56:df:56:c9:be:34:3e:de:3d:
b5:5b:c9:65:23:5a:5e:e9:c7:c6:67:e2:16:ad:9e:58:ce:b9:
ff:d0:b4:28:81:d4:1b:d1:1e:69:5f:93:2c:51:70:60:15:94:
66:11:86:42:50:b8:60:c6:d4:f1:a0:3b:21:73:8e:8c:1e:eb:
60:04:0f:96:4a:4f:88:e0:d6:9d:1a:d9:c6:35:03:74:17:d7:
df:2d:53:1f:80:1c:97:fb:80:17:15:95:14:f6:89:52:13:03:
71:c8:d6:9d:b9:9a:bf:9d:70:80:5f:ba:95:23:fc:5a:7f:fa:
3d:3d:46:da:8a:3a:fe:5a:f2:25:2a:07:da:86:37:83:62:e9:
e8:87:9c:1e:14:7e:ab:e1:e9:60:73:7c:b3:63:29:f3:c4:89:
79:47:e7:1c:a0:b3:1e:cd:2b:9e:09:f3:7e:da:de:d6:4b:d4:
76:45:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:42 2025 by rpki-client