Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/aGCd3EvkWTnxt6ymvLZfGN9A6DE.roa
File: aGCd3EvkWTnxt6ymvLZfGN9A6DE.roa (raw, json)
Hash identifier: kXzN+u0B6yUq25pd2XU+RMCdUIRV4kkzU07potyXTjo=
Subject key identifier: 68:60:9D:DC:4B:E4:59:39:F1:B7:AC:A6:BC:B6:5F:18:DF:40:E8:31
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 018CC56E06E7EEBE63E1C3F867C189825925
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/aGCd3EvkWTnxt6ymvLZfGN9A6DE.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44034
IP address blocks: 2.64.0.0/13 maxlen: 13
94.191.128.0/17 maxlen: 17
79.138.128.0/17 maxlen: 17
212.27.0.0/19 maxlen: 19
78.156.192.0/19 maxlen: 19
95.209.0.0/16 maxlen: 16
77.241.128.0/21 maxlen: 21
77.241.128.0/20 maxlen: 20
37.250.0.0/16 maxlen: 16
80.251.192.0/20 maxlen: 20
109.56.0.0/14 maxlen: 14
2a02:aa0::/29 maxlen: 32
2a02:aa4::/30 maxlen: 30
2a02:aa0::/30 maxlen: 30
Validation: Failed, certificate revoked on Fri 18 Oct 2024 09:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:06:e7:ee:be:63:e1:c3:f8:67:c1:89:82:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68609ddc4be45939f1b7aca6bcb65f18df40e831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:56:6f:10:f4:ef:49:f0:73:e5:02:2e:dc:
94:a0:73:ef:da:ad:71:aa:93:e9:ff:cf:90:40:bd:
02:62:38:36:34:fd:6d:6f:a3:6e:9b:9c:89:1c:19:
f7:a8:ed:b2:cf:1e:1e:8f:95:31:17:f9:34:b3:e8:
fb:a1:7d:79:e9:86:ac:31:04:91:ce:7a:16:f7:7a:
ff:48:73:b5:46:2c:0a:bc:0d:8c:64:cc:f6:ea:6c:
d0:c5:2f:ef:e2:5b:1a:28:ac:13:98:42:14:37:ae:
c4:6c:f9:86:0d:c1:b2:59:44:64:7a:0b:9f:8b:b3:
66:c0:6a:ef:27:ee:52:d6:64:cf:97:b0:5e:d8:04:
c8:40:03:d4:3c:c0:c4:63:2b:c3:52:01:4e:96:43:
bd:c9:d0:02:22:b1:fe:1f:79:63:09:4f:8c:e6:8d:
be:0a:fd:7a:51:dd:5c:ee:76:66:af:a8:04:2b:0a:
7d:57:0b:72:ff:29:75:36:80:f5:da:13:67:81:5e:
21:8c:7d:cc:a3:ff:0c:4d:9a:2c:fd:1d:ad:fb:29:
af:93:4b:8f:34:d1:4e:ea:f2:87:25:64:12:97:e9:
12:05:e2:30:fa:38:17:5f:5a:0c:a0:e2:b3:e8:5a:
b5:2b:40:bc:b2:e8:9d:52:af:5d:25:c7:b5:52:ba:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:9D:DC:4B:E4:59:39:F1:B7:AC:A6:BC:B6:5F:18:DF:40:E8:31
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/aGCd3EvkWTnxt6ymvLZfGN9A6DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.64.0.0/13
37.250.0.0/16
77.241.128.0/20
78.156.192.0/19
79.138.128.0/17
80.251.192.0/20
94.191.128.0/17
95.209.0.0/16
109.56.0.0/14
212.27.0.0/19
IPv6:
2a02:aa0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:2a:76:88:5d:df:18:aa:03:fa:4d:32:e5:de:b9:81:ed:35:
a2:3a:15:f8:ed:a4:e7:6d:d9:87:b5:07:ab:35:54:d9:9e:e2:
b7:f4:24:be:b5:c8:e4:89:87:7f:b0:3b:e3:cc:c2:d9:a4:44:
ae:de:64:12:c3:d1:1e:65:2b:11:09:0d:c5:ed:eb:a4:13:6e:
e7:b1:80:ef:09:ab:87:85:8e:75:5c:75:11:c3:66:87:ea:90:
93:43:a8:cf:47:d0:b8:a7:8b:16:1f:60:eb:9f:cd:d4:4a:15:
2b:a8:8d:8b:aa:62:1e:39:d4:48:60:fe:b1:28:f4:cf:09:d1:
8b:d0:ce:f6:fa:8c:8c:3c:e9:07:b9:c8:db:75:68:a0:d9:05:
67:d7:4a:18:64:1d:17:eb:a3:bf:8f:0a:72:d2:0d:b6:4a:34:
2e:a4:07:99:b7:d5:ae:c2:9c:77:ec:3b:cc:c8:2b:91:a5:8f:
de:f6:cd:7e:10:ee:bc:28:1d:21:27:65:ec:87:9a:7e:8e:02:
f6:e2:f2:96:14:8e:ed:a9:1d:ed:ad:00:3e:eb:e1:81:0c:44:
e5:36:58:0c:f7:e0:78:2d:2a:24:48:77:8b:f4:d2:b0:8d:db:
a3:ec:99:28:bb:3f:49:78:f8:8c:b8:fa:f9:dd:cb:46:55:35:
4d:e0:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:10 2025 by rpki-client