Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/f3-_NdHPBsBM3IcX8nW144SYtkQ.roa
File: f3-_NdHPBsBM3IcX8nW144SYtkQ.roa (raw, json)
Hash identifier: qL1rIWjqT8aTdoElJZBN17XUOjJQR5LrCGOze+EaS9Q=
Subject key identifier: 7F:7F:BF:35:D1:CF:06:C0:4C:DC:87:17:F2:75:B5:E3:84:98:B6:44
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019348FC896E2801A91D522190459BA238F8
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/f3-_NdHPBsBM3IcX8nW144SYtkQ.roa
Signing time: Wed 20 Nov 2024 09:52:10 +0000
ROA not before: Wed 20 Nov 2024 09:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205561
IP address blocks: 147.12.64.0/24 maxlen: 24
185.160.220.0/22 maxlen: 24
185.160.220.0/24 maxlen: 24
185.160.221.0/24 maxlen: 24
185.160.222.0/24 maxlen: 24
185.160.223.0/24 maxlen: 24
193.53.101.0/24 maxlen: 24
193.53.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:fc:89:6e:28:01:a9:1d:52:21:90:45:9b:a2:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Nov 20 09:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f7fbf35d1cf06c04cdc8717f275b5e38498b644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:2f:e6:b0:31:37:4c:2c:c2:64:40:2f:9d:
52:b9:45:b8:f5:70:18:e3:80:9b:2c:8b:4d:09:9d:
73:56:96:90:74:3d:80:65:45:cb:64:17:3e:43:34:
df:f0:02:9b:c8:0c:d8:38:91:81:06:6a:d9:84:d7:
f2:6f:6d:5c:55:23:3a:9d:2e:35:a6:fb:e1:9c:50:
80:84:4e:4c:52:5c:d3:f5:5b:c9:a2:24:c5:46:39:
bf:a2:48:23:fe:94:d9:ad:b0:b5:23:8e:9a:75:13:
4c:52:85:4e:06:dc:2e:d7:05:3f:de:5e:8c:38:1e:
a3:a3:c6:63:6b:9c:08:53:dd:60:f4:f0:f8:9b:e9:
03:37:28:13:fc:4c:fe:a5:90:aa:81:57:3b:b4:b9:
3c:3b:16:2f:22:dc:ca:7d:90:76:62:20:e7:19:f1:
84:85:b4:ee:0c:a9:2b:92:c5:e1:1d:a6:de:85:86:
1f:16:2d:8d:fd:3e:55:ee:cb:7e:e1:c4:25:13:eb:
0b:bf:c7:fb:78:d4:98:cc:e1:94:a8:91:03:08:e5:
6e:e2:a9:f5:16:e9:29:52:ae:f5:f4:75:24:b0:70:
6e:ec:c1:73:3f:bc:35:49:ab:2d:bb:01:bb:e2:40:
00:40:11:42:ab:07:cb:98:10:9b:2f:d2:01:ce:7d:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7F:BF:35:D1:CF:06:C0:4C:DC:87:17:F2:75:B5:E3:84:98:B6:44
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/f3-_NdHPBsBM3IcX8nW144SYtkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.64.0/24
185.160.220.0/22
193.53.101.0-193.53.102.255
Signature Algorithm: sha256WithRSAEncryption
0c:db:62:fa:50:9a:4a:86:82:dd:f4:51:35:3d:3f:3a:fa:a5:
3d:ca:02:94:cd:b3:9a:b9:49:5d:8b:69:8e:b9:58:1f:f2:e1:
05:52:b8:86:0d:30:70:9d:f9:e2:96:58:18:00:ed:10:01:25:
e5:89:f0:36:60:b9:b7:3a:62:c0:45:e8:cf:f0:3e:a7:30:41:
f2:fb:af:97:b1:0e:38:49:5a:d5:48:75:a0:17:90:6c:b5:23:
98:f5:ff:03:5a:d8:39:d4:2b:a1:29:3a:83:02:f1:e1:cd:6d:
68:b7:8c:e2:07:a7:af:57:7b:5e:12:b0:99:bc:f3:fb:0f:f5:
2b:cf:cf:39:bd:a1:0c:ea:ae:ad:ba:2d:43:ff:8b:8c:fc:d2:
9d:f2:27:8e:0e:6b:9b:2c:23:21:7a:33:cf:24:fd:47:dd:eb:
d3:72:09:79:fa:d9:02:e3:26:94:02:12:25:28:8b:47:63:f3:
2a:53:84:00:37:c0:76:45:f7:34:90:1b:49:8c:01:03:4a:62:
5c:b8:89:3d:de:1b:0a:08:44:6e:b5:2b:6f:3b:cd:e8:a1:0c:
ea:92:fc:6b:1f:97:0a:54:9e:6c:51:fe:12:e6:e4:e1:89:c8:
40:fe:9a:c3:f8:82:18:01:62:68:9a:d5:f9:f5:ea:d5:db:d3:
05:77:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:48 2025 by rpki-client