Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/IhuTDcjlxUBX7gu0ZyVaYJyXIzI.roa
File: IhuTDcjlxUBX7gu0ZyVaYJyXIzI.roa (raw, json)
Hash identifier: p5OWhA2nkcCs1W8KBEV4EEx/BnZb3bUMJZ9ufTsjQZI=
Subject key identifier: 22:1B:93:0D:C8:E5:C5:40:57:EE:0B:B4:67:25:5A:60:9C:97:23:32
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 018FBA715CC30D813905FE4C4A51D00F29DB
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/IhuTDcjlxUBX7gu0ZyVaYJyXIzI.roa
Signing time: Mon 27 May 2024 14:25:42 +0000
ROA not before: Mon 27 May 2024 14:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47820
IP address blocks: 91.205.116.0/22 maxlen: 24
109.234.0.0/21 maxlen: 24
185.148.224.0/22 maxlen: 24
185.232.192.0/22 maxlen: 24
193.242.174.0/23 maxlen: 24
2a07:6200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:71:5c:c3:0d:81:39:05:fe:4c:4a:51:d0:0f:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: May 27 14:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=221b930dc8e5c54057ee0bb467255a609c972332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:0a:82:1b:c5:3e:68:13:d6:07:21:d4:47:
24:24:c4:36:fd:5f:39:73:a8:c4:3c:5a:62:2f:cc:
7c:57:24:b7:2c:38:ce:fc:15:f5:b6:23:21:a6:df:
fe:17:c6:38:d9:3b:c4:e9:69:fa:9b:88:1e:33:86:
62:d1:17:a9:23:c9:9d:37:30:c0:7e:16:fe:97:c9:
f1:bc:07:e3:6a:43:b7:50:b4:35:64:c7:2c:96:f5:
a3:99:17:81:bf:48:1c:be:8a:54:e5:cc:20:f1:c0:
37:5a:3f:55:8e:6c:90:5f:b6:ad:ee:eb:2d:9a:33:
c7:aa:17:d5:71:31:60:9a:d3:92:aa:43:5f:30:93:
a5:c5:44:44:4f:cf:f6:54:4d:7f:a1:3f:d9:a9:b6:
d8:42:25:b3:10:cd:55:4f:3d:7f:71:73:50:e3:d6:
40:29:bf:63:03:7d:c8:d4:00:51:46:19:fb:b4:c5:
ea:83:e5:d0:60:26:47:0d:b8:fc:89:17:8b:ba:25:
d5:d1:5d:72:d5:63:ba:af:c5:73:e9:72:2c:b5:1f:
b8:e1:cb:3d:bb:a8:a6:a6:1c:fe:9b:0f:ae:fd:64:
89:00:39:e9:cc:aa:81:eb:86:1e:00:78:9b:d5:bc:
4a:ed:ad:b7:7f:81:77:f7:2d:e3:c1:4c:5b:89:e0:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:93:0D:C8:E5:C5:40:57:EE:0B:B4:67:25:5A:60:9C:97:23:32
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/IhuTDcjlxUBX7gu0ZyVaYJyXIzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.116.0/22
109.234.0.0/21
185.148.224.0/22
185.232.192.0/22
193.242.174.0/23
IPv6:
2a07:6200::/29
Signature Algorithm: sha256WithRSAEncryption
3f:39:d9:9e:a5:46:6a:b0:4a:bf:28:32:52:d1:e5:63:81:e2:
c3:74:25:50:bf:69:eb:82:23:8d:bf:26:b7:4f:6a:a9:01:4f:
d9:5d:15:44:44:ff:f4:45:d3:df:24:dc:3a:5f:0c:25:70:cf:
b3:01:6b:06:51:b8:59:07:d8:6e:b9:05:9c:06:20:58:32:6b:
5d:64:f4:04:61:aa:1b:01:38:b5:9e:fa:10:8b:2f:95:83:84:
c6:e0:f0:18:00:65:a6:87:ae:ff:81:59:0d:a6:2d:e3:58:53:
1e:8b:51:13:09:81:3f:78:b7:3a:8e:3f:f2:df:8b:03:14:0b:
f7:c0:09:c8:e6:65:ea:1d:fa:fb:8f:6c:90:e4:ec:20:6e:7c:
1e:cf:42:db:0f:b6:b6:84:b2:b2:98:0a:d2:15:29:af:58:85:
13:bb:e8:bf:62:18:b4:6d:93:b9:31:8c:6f:76:b6:ed:19:d0:
e3:9d:5a:3f:dd:3a:6a:1e:43:d3:a3:e0:92:d7:17:5a:24:84:
97:56:6c:f6:df:1b:5d:59:a1:5c:b1:29:e9:88:c2:34:f4:9d:
cb:37:e8:26:f6:ef:12:3e:ef:b2:41:ad:9d:bb:6c:3e:c5:4a:
bc:0f:c8:d5:ad:8c:c8:28:b0:87:37:9d:98:a0:56:ff:5d:ae:
9a:3a:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:33 2025 by rpki-client