Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/chu3ZxnJFwHtlBQofmhXOOlMe30.roa
File: chu3ZxnJFwHtlBQofmhXOOlMe30.roa (raw, json)
Hash identifier: spu/LaTHQKcCF6JgrSIMjvoZOCnvXSLTRq5fBaBb3ms=
Subject key identifier: 72:1B:B7:67:19:C9:17:01:ED:94:14:28:7E:68:57:38:E9:4C:7B:7D
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0192D7D201853B4177E96A939C32A5DFE21F
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/chu3ZxnJFwHtlBQofmhXOOlMe30.roa
Signing time: Tue 29 Oct 2024 10:28:37 +0000
ROA not before: Tue 29 Oct 2024 10:28:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12350
IP address blocks: 185.133.28.0/22 maxlen: 22
194.38.64.0/19 maxlen: 19
194.38.160.0/19 maxlen: 19
194.148.4.0/22 maxlen: 22
194.148.8.0/21 maxlen: 21
194.148.16.0/20 maxlen: 20
194.148.32.0/20 maxlen: 20
194.148.48.0/22 maxlen: 22
194.148.60.0/22 maxlen: 22
194.148.96.0/19 maxlen: 19
195.15.0.0/17 maxlen: 17
212.28.128.0/19 maxlen: 19
212.40.0.0/19 maxlen: 19
212.109.64.0/19 maxlen: 19
212.147.0.0/17 maxlen: 17
212.147.79.0/24 maxlen: 24
212.232.128.0/17 maxlen: 17
212.254.0.0/16 maxlen: 16
213.5.152.0/21 maxlen: 21
213.162.0.0/19 maxlen: 19
2001:4c78::/32 maxlen: 32
2a03:a360::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:d2:01:85:3b:41:77:e9:6a:93:9c:32:a5:df:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Oct 29 10:28:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=721bb76719c91701ed9414287e685738e94c7b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:55:24:31:c7:9c:b1:d8:43:26:00:32:99:
cd:a1:37:13:7e:19:27:d2:61:67:79:21:31:84:71:
fb:90:58:28:0e:07:a5:f2:74:84:cd:ad:aa:cf:d3:
9e:c2:09:60:b1:80:04:a8:c2:dd:15:a5:29:33:78:
51:af:91:89:6e:fa:a1:c4:33:3a:69:d9:2d:05:f9:
6e:e6:fc:f4:95:9f:74:43:d9:6e:8d:1e:21:ef:84:
28:fd:3b:e2:02:a9:d1:95:75:a5:a0:d1:ae:41:d5:
53:39:bb:48:6d:af:8c:3e:e4:d6:69:8e:e2:6c:24:
5b:fc:d8:27:2e:b2:f1:c7:be:a6:06:36:5b:27:01:
41:a7:63:dd:55:94:f1:2c:1e:b2:a3:e2:2f:6f:7c:
c6:8d:57:58:66:77:83:cc:be:0e:1c:c9:cc:f3:8d:
21:74:cc:76:23:48:f4:f3:e0:0f:30:83:c6:06:63:
57:0c:e7:69:3e:dd:33:9f:7d:af:e7:2e:9e:69:2c:
d2:03:0c:fe:94:1c:5d:ce:f7:f0:92:df:f0:fd:07:
c9:33:90:11:ef:60:cb:ac:81:76:02:7c:8a:b1:da:
6d:66:07:dc:b2:3a:be:82:f1:60:3d:cd:1a:d3:04:
a4:0e:6a:42:92:2c:82:b0:61:1d:48:14:16:56:4c:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1B:B7:67:19:C9:17:01:ED:94:14:28:7E:68:57:38:E9:4C:7B:7D
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/chu3ZxnJFwHtlBQofmhXOOlMe30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.28.0/22
194.38.64.0/19
194.38.160.0/19
194.148.4.0-194.148.51.255
194.148.60.0/22
194.148.96.0/19
195.15.0.0/17
212.28.128.0/19
212.40.0.0/19
212.109.64.0/19
212.147.0.0/17
212.232.128.0/17
212.254.0.0/16
213.5.152.0/21
213.162.0.0/19
IPv6:
2001:4c78::/32
2a03:a360::/32
Signature Algorithm: sha256WithRSAEncryption
14:bc:31:ba:06:59:d5:c2:51:bc:ac:57:1d:75:a7:35:f0:39:
5e:7e:7e:60:59:4c:8c:c1:12:04:20:e3:8d:dc:57:cc:17:b2:
52:31:fc:21:f3:6a:5b:77:a8:6b:5f:9e:18:b3:24:fe:a1:29:
f8:25:63:c3:c7:55:8d:a4:4e:be:f3:90:86:e9:50:1b:a1:ca:
16:e2:ff:6c:8d:3b:8f:de:b8:3d:a0:7d:db:c4:aa:59:c7:6c:
9f:b3:b9:08:f3:7c:7b:0e:15:ef:2b:0c:f4:71:3c:45:20:71:
79:ce:ba:d6:ed:10:e3:ee:8e:0b:c8:0f:6d:c4:a7:dd:a7:79:
55:44:fa:55:9d:49:ec:fb:44:21:17:32:40:0d:1b:5d:5e:75:
81:b4:5d:b0:a3:14:5a:e0:b2:f7:28:18:92:bc:cd:1b:43:a0:
a8:a0:84:cd:70:86:23:ce:91:7e:24:cb:fb:0f:62:53:49:28:
fe:63:06:db:cf:4c:49:73:e1:40:3c:af:ca:11:b5:ff:08:32:
37:49:dd:60:40:11:36:ab:56:49:36:3b:d4:e7:70:d5:90:07:
ee:95:f8:50:06:8d:2c:9f:93:41:1c:d3:19:5b:34:e1:c9:2d:
72:03:e0:87:80:99:05:a9:a9:fd:f1:3c:9c:55:b6:85:4d:02:
65:f3:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:12 2025 by rpki-client