Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/6PayV5LHX_EZhxgMjxJZO_andJw.roa
File: 6PayV5LHX_EZhxgMjxJZO_andJw.roa (raw, json)
Hash identifier: P1TtN3G2yQEIhsMqFGGsZAxi/QmI+1CxnFqS00Q1R+s=
Subject key identifier: E8:F6:B2:57:92:C7:5F:F1:19:87:18:0C:8F:12:59:3B:F6:A7:74:9C
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 018CC5DBF14D1344678F9B304002D836B0BB
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/6PayV5LHX_EZhxgMjxJZO_andJw.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13157
IP address blocks: 185.244.56.0/24 maxlen: 24
185.244.56.0/22 maxlen: 22
193.29.250.0/24 maxlen: 24
62.112.32.0/19 maxlen: 19
2a04:ce40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f1:4d:13:44:67:8f:9b:30:40:02:d8:36:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f6b25792c75ff11987180c8f12593bf6a7749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:d9:f3:21:21:94:21:ee:99:84:ad:40:67:
66:af:75:48:c4:80:94:35:52:03:75:f9:50:c1:a5:
a1:42:4d:91:22:6f:ab:56:07:c0:8d:fd:0f:db:e6:
97:49:57:c7:78:4b:90:52:7e:a7:93:b4:31:75:68:
91:df:25:d6:fa:f9:49:75:91:02:fb:26:35:68:16:
81:0f:2c:03:2c:b8:2c:fc:5b:0d:97:57:67:f2:2b:
6c:bb:7c:01:74:06:20:a7:d5:db:d3:64:bd:56:c4:
dd:49:03:f9:88:e6:50:3a:29:11:c0:cb:d7:96:b5:
39:0a:65:12:2d:11:7f:ae:a1:40:7e:73:bf:fe:96:
31:93:33:33:a8:d6:87:68:37:10:15:f2:3e:eb:c7:
8c:53:d5:95:3e:78:6c:b6:66:e9:bf:e0:58:ef:f8:
b7:95:a4:49:07:69:fa:f9:4c:b2:44:9e:88:c2:58:
45:cb:1a:ba:a4:ec:fc:e0:b2:ea:6c:08:27:db:ee:
24:58:6b:19:c5:b0:d7:a9:7a:69:25:56:e0:8a:87:
20:8f:81:b6:96:98:c2:59:de:3a:db:ed:12:64:a9:
1d:3a:5a:03:38:dc:67:47:fe:41:1b:58:8c:56:c1:
ff:2a:a2:d8:3f:70:ea:59:89:58:79:18:ad:36:22:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:B2:57:92:C7:5F:F1:19:87:18:0C:8F:12:59:3B:F6:A7:74:9C
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/6PayV5LHX_EZhxgMjxJZO_andJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.32.0/19
185.244.56.0/22
193.29.250.0/24
IPv6:
2a04:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
22:a5:1d:a7:4a:52:8c:ee:d7:a5:e0:dc:b6:f1:7c:ea:a6:b3:
92:35:4d:b7:e3:16:5b:a7:18:f7:a9:b4:c0:dd:fd:dc:39:84:
a5:56:a3:e4:98:4f:1b:1d:82:7a:2d:79:3b:59:e4:52:a4:4d:
88:74:3e:2f:37:df:99:f3:d1:1e:f6:16:ed:5b:a2:32:db:9b:
1d:87:56:7b:91:2e:c4:d9:4c:c5:64:32:29:7c:e1:c2:7d:01:
5b:6e:e1:a9:98:23:18:cb:64:a4:62:4a:1c:84:63:ac:28:e1:
85:92:5d:7c:ed:1d:12:df:ce:04:ef:6f:0d:b5:20:0b:c8:64:
c1:d0:72:d5:63:41:47:c1:82:bc:cb:52:83:95:b2:fb:a6:63:
04:90:d2:60:7c:98:09:c3:af:61:c4:8d:17:54:76:f0:21:b1:
09:9e:be:bb:06:b8:d8:c9:df:d0:92:e5:3e:d0:05:59:06:d3:
7a:3f:a9:ad:b6:ca:8a:92:6e:1c:56:d0:ce:0a:22:a0:ef:54:
21:65:b3:05:56:66:39:4c:08:bb:94:42:3b:ab:fb:c2:8e:92:
f9:c3:63:7d:90:6c:dc:b4:80:3a:ab:0c:67:05:5d:3f:b0:ca:
d2:2e:9e:f9:fb:97:67:f8:6d:f2:f2:dc:89:ec:5d:c2:52:52:
47:40:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:43 2025 by rpki-client