Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/AHHImsuxzyZDWdnSmIiq8zgEJww.roa
File: AHHImsuxzyZDWdnSmIiq8zgEJww.roa (raw, json)
Hash identifier: dyD7Zi+nn0bxQqRMYGtYuYnC44yjQFwIIMK4ScSqTXM=
Subject key identifier: 00:71:C8:9A:CB:B1:CF:26:43:59:D9:D2:98:88:AA:F3:38:04:27:0C
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 018CC56DF9E4F72B79E19EC2FC07A0141880
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/AHHImsuxzyZDWdnSmIiq8zgEJww.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24638
IP address blocks: 81.19.64.0/19 maxlen: 24
91.220.133.0/24 maxlen: 24
185.110.56.0/22 maxlen: 24
2a02:6b0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f9:e4:f7:2b:79:e1:9e:c2:fc:07:a0:14:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0071c89acbb1cf264359d9d29888aaf33804270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:b5:1d:4f:b3:3a:94:07:da:ed:cd:f1:d8:
cd:08:ea:d3:29:2d:a3:b8:d0:4f:73:96:c5:72:71:
35:eb:22:27:d0:7c:6e:cf:30:6e:22:3b:8c:47:40:
c8:dd:87:71:1e:63:0b:b4:e1:5f:f4:48:ef:91:aa:
48:3f:72:da:f2:59:f2:70:37:b0:3a:62:89:3a:e5:
72:a6:55:73:28:31:90:cf:b2:16:d2:e1:fd:37:36:
3e:29:bc:b2:9a:21:7b:ad:9c:9a:26:0b:4b:12:19:
83:ae:f0:c4:4e:21:91:8b:55:df:fe:c9:fb:fe:fa:
48:54:cd:1b:56:18:01:8f:32:9c:e0:0f:f7:48:81:
23:8c:2b:59:ae:da:b8:3c:7b:ea:b7:2c:f9:28:2d:
41:f2:ed:0b:9a:f3:dc:c0:bc:14:75:85:28:c2:bb:
0b:a5:22:1d:43:3c:9c:82:1a:79:71:3c:61:aa:45:
2b:7d:f8:9e:64:fe:e5:bf:de:d4:ba:73:48:72:e0:
fd:2a:15:82:b4:34:02:48:46:47:59:df:a0:be:f5:
04:f4:4e:b1:d9:2f:61:0d:ad:db:61:e3:32:59:6e:
81:ea:6d:07:7c:8f:79:b7:82:ec:51:9c:e2:11:4a:
9e:54:38:b9:57:98:fd:94:a2:b4:ff:ee:e7:9a:6c:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:C8:9A:CB:B1:CF:26:43:59:D9:D2:98:88:AA:F3:38:04:27:0C
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/AHHImsuxzyZDWdnSmIiq8zgEJww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.64.0/19
91.220.133.0/24
185.110.56.0/22
IPv6:
2a02:6b0::/32
Signature Algorithm: sha256WithRSAEncryption
18:03:45:03:77:c9:a8:f6:30:54:c1:57:0e:3d:f0:d2:ab:08:
32:08:0a:c2:24:82:79:4b:ec:ef:a4:3b:83:b6:b1:91:7d:7e:
26:c0:44:5e:b8:5e:f4:c5:e3:ca:db:40:f4:d0:16:af:4f:0e:
39:a9:fb:e1:71:2c:54:e3:95:b6:6d:f9:0d:ec:06:13:13:a5:
61:3d:b9:08:b9:fc:53:51:8e:83:56:11:52:58:ac:f1:72:33:
2a:c7:77:60:13:66:37:f1:c7:66:47:aa:ec:db:d5:b7:43:68:
d4:c8:7f:aa:96:b8:8a:dc:62:53:15:c7:14:51:67:75:9f:cd:
58:70:e6:8e:1a:b1:b9:06:7a:11:84:2d:37:9b:23:c4:0f:93:
74:0d:3a:5e:13:6e:16:e3:c2:ad:f5:99:0f:51:cc:44:b8:29:
f5:14:b5:07:f8:22:eb:ff:08:69:0f:72:cc:72:49:be:9c:44:
fd:f7:79:42:bb:fe:be:97:6c:22:d5:2f:85:70:f6:38:66:00:
8b:f8:eb:cc:e4:00:31:e2:b0:16:86:fb:cb:03:48:af:a6:92:
6a:ba:6c:87:0b:71:9f:fa:57:0b:80:a0:19:d3:dd:eb:e2:62:
9a:83:dd:63:94:d9:47:2c:30:66:64:5f:6f:81:a3:40:7a:5b:
8c:3d:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:21:37 2025 by rpki-client