Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/_RK92lDQtRAS5Ak2MXIqR3zhUXA.roa
File: _RK92lDQtRAS5Ak2MXIqR3zhUXA.roa (raw, json)
Hash identifier: 19C8N6gkCDKKlx+D/ScgI67tdfw7ZyFFYT4oNH5j1nE=
Subject key identifier: FD:12:BD:DA:50:D0:B5:10:12:E4:09:36:31:72:2A:47:7C:E1:51:70
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 019072DEBE72A8F5487638D5CD0EA093D458
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/_RK92lDQtRAS5Ak2MXIqR3zhUXA.roa
Signing time: Tue 02 Jul 2024 09:55:18 +0000
ROA not before: Tue 02 Jul 2024 09:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 5.8.248.0/24 maxlen: 24
62.233.53.0/24 maxlen: 24
77.220.212.0/24 maxlen: 24
77.220.213.0/24 maxlen: 24
109.107.157.0/24 maxlen: 24
178.159.43.0/24 maxlen: 24
185.93.6.0/24 maxlen: 24
185.201.252.0/24 maxlen: 24
185.229.251.0/24 maxlen: 24
185.235.128.0/24 maxlen: 24
185.237.165.0/24 maxlen: 24
185.241.61.0/24 maxlen: 24
185.244.218.0/24 maxlen: 24
185.244.219.0/24 maxlen: 24
185.251.25.0/24 maxlen: 24
193.3.168.0/24 maxlen: 24
193.169.105.0/24 maxlen: 24
194.15.46.0/24 maxlen: 24
194.26.232.0/24 maxlen: 24
194.62.105.0/24 maxlen: 24
212.86.114.0/24 maxlen: 24
212.86.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 10:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:de:be:72:a8:f5:48:76:38:d5:cd:0e:a0:93:d4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Jul 2 09:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd12bdda50d0b51012e4093631722a477ce15170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:96:7c:09:49:14:80:d2:a4:bc:57:84:8a:
a2:e2:66:84:9e:f7:12:80:c4:b1:f9:53:5a:28:fd:
76:f1:64:8d:0c:39:30:94:b9:f7:3c:77:4c:7f:14:
f3:5f:ac:a0:51:71:db:dc:a6:6a:c5:4e:fa:eb:4e:
79:f4:43:4c:40:d4:51:ed:be:9f:20:c8:29:08:a2:
88:6b:90:51:05:16:99:7f:50:d0:b7:20:c0:85:9d:
6c:e3:dd:c8:5f:a2:a5:df:9a:d0:2a:06:48:4f:47:
44:cc:5c:e9:4e:d0:a9:d3:e9:75:93:56:11:0e:c5:
02:3e:d0:2c:c3:4e:0c:03:ed:2b:49:e6:88:6d:ec:
c3:5b:64:c3:5a:dc:c2:b7:85:47:23:78:c8:ae:cd:
86:cb:62:e2:dc:f7:fe:a4:39:d6:f3:28:0f:da:95:
66:a1:96:f2:62:d0:f9:43:73:50:57:ed:c7:09:91:
19:89:4c:c8:bf:36:11:71:47:a4:37:5f:5c:b8:40:
87:bf:67:df:3e:b9:77:f9:c3:d7:ea:86:51:f7:16:
8a:5a:15:9f:f6:da:a2:17:9e:23:ea:5d:fb:4b:96:
cb:50:e2:2d:46:c9:c8:f7:84:0c:a2:f1:71:f3:23:
da:cf:9f:b8:60:67:14:b8:d4:7e:a1:47:9d:fc:d7:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:BD:DA:50:D0:B5:10:12:E4:09:36:31:72:2A:47:7C:E1:51:70
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/_RK92lDQtRAS5Ak2MXIqR3zhUXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.248.0/24
62.233.53.0/24
77.220.212.0/23
109.107.157.0/24
178.159.43.0/24
185.93.6.0/24
185.201.252.0/24
185.229.251.0/24
185.235.128.0/24
185.237.165.0/24
185.241.61.0/24
185.244.218.0/23
185.251.25.0/24
193.3.168.0/24
193.169.105.0/24
194.15.46.0/24
194.26.232.0/24
194.62.105.0/24
212.86.114.0/23
Signature Algorithm: sha256WithRSAEncryption
01:6b:c3:8d:92:0c:27:0a:06:fb:d5:03:ea:6d:78:59:48:eb:
1e:c2:ac:82:50:62:4f:2e:0e:7a:05:d7:be:48:ab:1c:5a:2f:
9a:14:b4:1d:a5:ed:4f:b4:a4:4e:50:4c:2e:a8:d9:7f:2c:1b:
6d:e5:fb:bb:cc:d8:3a:58:eb:2a:c5:d9:df:07:d4:07:38:45:
62:51:0b:65:aa:50:97:ec:d7:6d:a6:71:13:de:c1:d2:4a:ce:
5e:48:61:58:54:82:52:d9:30:6f:8b:9a:36:22:fc:8c:76:8c:
f9:67:2b:7b:06:24:f6:6d:af:41:97:74:f1:06:af:3a:6d:2f:
a6:1d:f8:d5:b9:29:8f:54:94:2f:c4:21:29:f0:76:b4:da:43:
93:7e:71:82:b5:5e:0a:27:8f:d6:c7:45:45:b3:fd:f0:31:e0:
cc:32:c0:3f:8d:a8:cd:62:d9:7d:c4:47:58:c8:0a:ea:40:f0:
29:b4:32:ba:53:bc:d0:d1:46:0e:fd:19:2f:63:17:e6:8b:a5:
d2:1d:74:eb:34:72:6e:7d:d9:6f:f6:ff:d1:4c:6c:e0:dd:07:
12:a6:42:e1:cc:6d:d8:a2:67:62:bb:18:da:3f:b4:ed:2f:2e:
13:c8:2f:3b:bb:90:d0:c0:cb:b0:26:5a:18:c7:d8:3c:fe:e8:
ed:e9:a7:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:56 2025 by rpki-client