Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/k_3Yyru0TtIn5BN0DJz_P2U3uIs.roa
File: k_3Yyru0TtIn5BN0DJz_P2U3uIs.roa (raw, json)
Hash identifier: d1R0QcZUFqe3/+sUn0n3hqoxiB7GO3ptt1FGdkfgLw4=
Subject key identifier: 93:FD:D8:CA:BB:B4:4E:D2:27:E4:13:74:0C:9C:FF:3F:65:37:B8:8B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019395FCC12A4D40D916512F1A8882CCA40B
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/k_3Yyru0TtIn5BN0DJz_P2U3uIs.roa
Signing time: Thu 05 Dec 2024 08:43:09 +0000
ROA not before: Thu 05 Dec 2024 08:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29244
IP address blocks: 85.118.192.0/21 maxlen: 21
85.118.192.0/24 maxlen: 24
85.118.194.0/24 maxlen: 24
85.118.196.0/24 maxlen: 24
85.118.197.0/24 maxlen: 24
87.120.79.0/24 maxlen: 24
91.92.8.0/24 maxlen: 24
91.92.9.0/24 maxlen: 24
91.92.10.0/24 maxlen: 24
91.92.11.0/24 maxlen: 24
91.92.12.0/24 maxlen: 24
91.92.13.0/24 maxlen: 24
91.92.14.0/24 maxlen: 24
91.92.15.0/24 maxlen: 24
93.123.88.0/21 maxlen: 24
94.156.136.0/21 maxlen: 24
149.62.192.0/18 maxlen: 18
149.62.204.0/24 maxlen: 24
149.62.205.0/24 maxlen: 24
149.62.206.0/24 maxlen: 24
149.62.207.0/24 maxlen: 24
149.62.208.0/24 maxlen: 24
149.62.209.0/24 maxlen: 24
193.193.171.0/24 maxlen: 24
193.193.182.0/24 maxlen: 24
193.194.147.0/24 maxlen: 24
193.194.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:fc:c1:2a:4d:40:d9:16:51:2f:1a:88:82:cc:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Dec 5 08:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93fdd8cabbb44ed227e413740c9cff3f6537b88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:9e:89:46:60:ff:19:2a:e6:0b:32:7f:18:
7a:fc:a9:35:8e:87:98:c5:94:c4:2f:44:75:35:01:
9f:ba:94:39:23:f3:09:09:98:35:8d:b3:6e:f8:b1:
b2:ed:ab:56:74:3b:7b:8a:43:fb:ea:ee:4c:68:8c:
c6:90:90:9a:8e:0e:cd:00:5e:b8:04:3f:13:e9:25:
a6:d9:df:ac:41:63:28:f9:5c:39:39:7b:b7:14:f8:
3b:12:1c:ab:c3:a7:40:15:f0:b6:7b:80:90:2f:74:
27:00:18:ba:f6:4c:71:ef:20:40:fd:4e:5e:af:c5:
8c:06:64:9f:7a:76:9e:2d:5b:8c:e3:eb:d7:58:88:
44:69:b4:b1:f3:3d:f8:4c:08:2b:c9:cf:cd:cd:0f:
2e:ea:ee:d7:6e:5a:bf:68:29:38:aa:90:6f:f8:fe:
60:82:ca:89:2a:cc:bc:6f:31:1f:61:bb:0b:15:81:
77:f2:6c:0e:5c:ff:c1:ab:d7:b3:c5:d0:54:9d:07:
6f:6b:90:27:1b:b1:8a:8c:d5:a9:89:11:b2:57:04:
18:b5:cb:01:6a:ed:5f:38:ba:c7:ec:f1:be:d0:11:
19:2b:83:cd:8f:c7:d4:31:c8:5e:a9:55:41:d7:e6:
29:67:3a:7b:2c:63:35:e7:87:c1:85:01:b7:a8:38:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:D8:CA:BB:B4:4E:D2:27:E4:13:74:0C:9C:FF:3F:65:37:B8:8B
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/k_3Yyru0TtIn5BN0DJz_P2U3uIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.192.0/21
87.120.79.0/24
91.92.8.0/21
93.123.88.0/21
94.156.136.0/21
149.62.192.0/18
193.193.171.0/24
193.193.182.0/24
193.194.147.0/24
193.194.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:92:15:09:22:f4:cc:a9:c5:ab:c7:45:05:2b:da:2f:e4:d1:
cd:7d:98:c1:94:16:4a:db:db:b0:a3:19:e8:90:11:39:7e:da:
10:31:71:4b:4f:68:81:8f:40:e2:c3:0e:1c:4f:7b:08:5d:75:
0a:97:43:78:2e:ff:a9:c2:d4:d1:24:4c:af:0b:a4:c0:74:26:
60:bd:42:a6:2e:65:dc:f6:8b:c7:02:17:5c:82:bb:60:4b:e9:
ca:8c:12:b7:6e:33:67:e8:b4:1b:9c:14:74:93:26:4c:fe:1a:
17:5e:7a:6e:92:42:ec:4b:13:32:93:43:36:b3:7a:09:68:6b:
fd:a6:6e:93:de:96:c6:5e:ec:59:60:4c:cf:a8:72:d5:c8:60:
94:b0:26:bf:4b:4f:9f:2c:ea:5d:f8:b6:75:a1:d4:84:5b:f2:
04:7f:d9:b2:cd:6c:59:06:40:72:79:56:a8:17:41:7e:07:96:
85:b3:34:12:8a:28:d7:bc:01:b8:dd:bf:66:ad:77:6a:3b:da:
cd:9b:a4:37:94:ef:d8:a5:2c:a2:9a:59:9a:3f:fa:f1:47:1a:
72:6f:86:68:a6:c0:a0:9b:6f:16:3b:95:18:13:a1:49:ae:b2:
72:7b:9e:d5:c9:52:07:9b:09:1d:cb:45:0f:e4:1d:a6:99:d9:
50:9e:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:36 2025 by rpki-client