Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8-hiUvTBhqdyH5FUhBh_eSpApUM.roa
File: 8-hiUvTBhqdyH5FUhBh_eSpApUM.roa (raw, json)
Hash identifier: C10PYG2W98Z439F+ZlCSBKK8QxotLNHBzKLK80mPbPE=
Subject key identifier: F3:E8:62:52:F4:C1:86:A7:72:1F:91:54:84:18:7F:79:2A:40:A5:43
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FA7E570195F7E4BAD65F98EF2EBBE2671
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8-hiUvTBhqdyH5FUhBh_eSpApUM.roa
Signing time: Thu 23 May 2024 23:59:42 +0000
ROA not before: Thu 23 May 2024 23:59:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.57.241.0/24 maxlen: 24
45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 11:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:e5:70:19:5f:7e:4b:ad:65:f9:8e:f2:eb:be:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 23 23:59:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3e86252f4c186a7721f915484187f792a40a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:18:2e:79:93:81:9e:63:20:36:78:66:50:
cb:86:22:92:d1:e0:e6:b4:c6:36:19:a4:2e:b7:ac:
0c:e7:e1:81:26:75:f7:f9:e7:3e:57:6a:41:9a:39:
79:c3:b6:d4:b0:97:0f:db:c5:d0:23:d7:b1:18:6d:
51:a8:81:0a:87:6d:7d:b6:de:ca:cd:02:c9:90:b9:
9b:35:20:66:b8:9f:d4:d6:2f:b1:db:f5:33:8a:eb:
ca:68:14:20:8a:2c:98:b7:82:02:09:21:08:c3:99:
b6:1b:b8:2f:6b:08:ea:9d:e1:ee:f2:97:ce:3d:de:
c4:d4:bb:50:0e:00:f8:f4:17:3d:68:57:b9:56:25:
72:90:ea:cd:59:95:a7:ff:e6:09:b3:c1:ca:cf:e1:
b3:c0:57:db:39:43:57:e0:5e:61:82:a8:82:72:90:
b9:07:9b:89:30:de:87:e6:bd:6d:ee:9e:38:1a:8a:
e3:d8:fb:20:8a:35:45:87:88:f0:b7:d8:94:44:48:
b3:31:34:60:c0:34:d0:90:0c:76:1b:5a:67:65:24:
0f:eb:bd:69:de:3a:02:1d:df:d3:39:86:0f:a9:e6:
24:92:ec:ee:87:3e:63:c6:9e:9a:86:96:c4:3e:c9:
08:66:4a:28:51:29:a8:c0:22:10:4c:8d:17:98:ba:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:62:52:F4:C1:86:A7:72:1F:91:54:84:18:7F:79:2A:40:A5:43
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8-hiUvTBhqdyH5FUhBh_eSpApUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.135.181.0-45.135.183.255
86.105.4.0/24
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
94.177.51.0/24
185.198.234.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e7:60:9c:db:95:9b:2c:99:ed:87:9b:7f:6d:dd:34:a5:b2:
77:52:3d:4f:9d:f9:34:95:a8:a1:36:20:ed:79:ab:b1:1f:3e:
de:7f:87:24:94:0b:9f:74:f9:b6:17:83:98:7b:49:9f:8a:3d:
8e:13:60:26:08:94:4f:29:c6:1d:a9:5c:88:82:5a:42:f3:1f:
ff:80:47:e4:86:3d:dc:6a:26:a8:08:1f:9d:bd:80:f8:8a:8c:
c9:5b:8d:cc:30:ad:72:a1:56:f8:86:4e:83:8a:17:2f:45:b9:
00:46:3d:ff:72:ae:e6:d8:6a:f7:fe:55:a8:b1:62:62:e9:a7:
92:a8:65:b5:57:64:97:ad:d1:40:50:7f:1c:56:2a:7e:17:5f:
6d:d9:38:50:54:7f:55:2e:4b:73:e0:65:27:88:39:c7:8b:ca:
41:ca:d6:93:1b:fc:80:c8:19:eb:70:ad:b2:c6:a1:c4:5a:12:
6d:6a:45:a8:4f:1e:1a:a1:00:bf:6c:80:39:21:f1:64:f0:27:
da:8b:e3:34:0b:dd:89:07:3c:11:c0:d2:22:83:05:48:fb:bc:
41:1e:ed:58:38:ca:26:06:47:e0:09:00:93:07:e3:64:cc:48:
aa:d1:61:16:48:a2:d0:b6:40:c5:b8:e5:85:4f:24:38:78:21:
33:7c:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:45:19 2025 by rpki-client