Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/v2cnfm66ydS72VnkAJID_TlfDCU.roa
File: v2cnfm66ydS72VnkAJID_TlfDCU.roa (raw, json)
Hash identifier: bioWDMMTT/QHwvW3EBbibHXhSB8yVDDVl6trkhWn+Gg=
Subject key identifier: BF:67:27:7E:6E:BA:C9:D4:BB:D9:59:E4:00:92:03:FD:39:5F:0C:25
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0191F64035941D6777E003A2F8EBA4F87514
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/v2cnfm66ydS72VnkAJID_TlfDCU.roa
Signing time: Sun 15 Sep 2024 15:14:48 +0000
ROA not before: Sun 15 Sep 2024 15:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 91.216.138.0/24 maxlen: 24
91.229.228.0/24 maxlen: 24
93.180.208.0/22 maxlen: 24
94.139.40.0/21 maxlen: 32
119.13.224.0/20 maxlen: 20
134.199.64.0/19 maxlen: 32
136.227.160.0/19 maxlen: 32
193.37.136.0/24 maxlen: 24
193.105.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:40:35:94:1d:67:77:e0:03:a2:f8:eb:a4:f8:75:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Sep 15 15:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf67277e6ebac9d4bbd959e4009203fd395f0c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:a0:4a:cb:ef:2a:75:27:e7:91:9e:8c:78:
4b:61:7a:7d:9e:fc:e7:45:eb:ec:c1:80:98:b9:13:
2b:a0:e1:56:65:33:66:b2:82:aa:07:e3:02:3e:43:
ba:24:fb:c7:3c:9e:82:12:1a:7a:2e:2e:e1:c2:2b:
04:c0:9a:dd:9e:37:2a:c6:2f:bc:76:f8:a7:23:17:
ea:da:09:a2:fe:e3:b9:f9:ec:bd:2b:e0:40:54:c5:
39:cf:0d:ba:e1:d5:c0:fc:42:ea:6f:70:53:d6:fe:
3f:89:60:cb:04:32:9f:78:bc:cf:94:05:80:db:9d:
06:b5:2b:2d:cb:ef:b6:06:14:23:2d:68:52:1a:0f:
02:a5:ba:49:62:5d:0f:f2:c8:0b:21:6c:68:9b:71:
21:3e:32:ab:bb:40:70:13:45:0c:c0:2f:95:fb:45:
3f:df:ce:89:bd:94:34:f7:cc:ea:8c:5d:db:16:ba:
8f:9f:81:18:19:e3:76:f5:09:1b:fb:22:a3:bc:b6:
08:0a:f4:02:5d:0e:95:72:cf:a0:98:20:87:98:f2:
af:90:49:61:4f:21:94:4c:54:9a:2b:a2:71:2a:a4:
be:55:24:a2:bc:5c:5a:6a:92:c2:16:76:56:da:05:
79:7c:70:1b:a9:68:aa:3b:d7:2a:76:10:3b:4b:60:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:27:7E:6E:BA:C9:D4:BB:D9:59:E4:00:92:03:FD:39:5F:0C:25
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/v2cnfm66ydS72VnkAJID_TlfDCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.138.0/24
91.229.228.0/24
93.180.208.0/22
94.139.40.0/21
119.13.224.0/20
134.199.64.0/19
136.227.160.0/19
193.37.136.0/24
193.105.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:29:a8:75:f1:2e:3e:9e:b0:bc:a1:1f:46:bf:43:37:4c:28:
3c:33:a8:fb:8e:44:78:9d:70:14:dc:ab:5b:1f:f4:40:c2:c3:
4b:e6:5a:d5:bf:3d:fc:6a:24:47:cf:33:7a:b0:e3:ee:cd:41:
a2:92:75:bf:c4:10:20:c6:9b:bc:1f:f3:07:5a:99:aa:69:2e:
9e:e2:26:90:10:bc:13:e0:e3:38:24:53:c2:ea:12:88:6f:bb:
73:c3:a7:77:57:01:74:03:c5:47:21:fc:35:ae:8c:f2:ea:42:
d3:e7:35:f6:9b:5d:be:55:10:c4:fd:de:66:2f:38:f3:23:f2:
3f:df:da:d7:57:18:73:12:f4:be:eb:30:97:03:f3:4d:0c:01:
32:3e:61:0f:36:ff:74:1f:45:24:4b:71:6f:f1:0e:1a:57:99:
17:63:a0:0d:60:ae:30:e3:00:0a:4c:4c:5a:5b:2b:c0:13:e2:
28:12:db:ab:54:58:0b:b9:22:8a:8d:20:ab:34:44:43:7a:a8:
75:10:12:aa:66:7d:3f:e1:20:51:38:99:54:ec:d3:b9:b5:0a:
10:7e:09:25:22:2d:b8:fd:94:40:10:42:b6:02:0b:49:5f:d1:
a1:8d:c9:48:77:85:23:a1:7e:fe:75:c9:da:23:be:4d:29:bf:
b2:0b:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:22:49 2025 by rpki-client