Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/6XT26VB8040HsyAXx4tadYl-4DM.roa
File: 6XT26VB8040HsyAXx4tadYl-4DM.roa (raw, json)
Hash identifier: cE7ZZLTx3SueTMTEi2iumqi8z9s11C7FIVtmzmzCu2s=
Subject key identifier: E9:74:F6:E9:50:7C:D3:8D:07:B3:20:17:C7:8B:5A:75:89:7E:E0:33
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0193BA92CA8C921CC6ABFEA84E5B0EC83682
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/6XT26VB8040HsyAXx4tadYl-4DM.roa
Signing time: Thu 12 Dec 2024 11:13:22 +0000
ROA not before: Thu 12 Dec 2024 11:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 31.22.12.0/22 maxlen: 24
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
51.179.192.0/18 maxlen: 24
51.179.192.0/21 maxlen: 21
51.179.200.0/21 maxlen: 21
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
141.195.128.0/19 maxlen: 24
141.195.136.0/21 maxlen: 24
141.195.144.0/21 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a04:c880::/32 maxlen: 48
2a05:87c0::/29 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:92:ca:8c:92:1c:c6:ab:fe:a8:4e:5b:0e:c8:36:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Dec 12 11:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e974f6e9507cd38d07b32017c78b5a75897ee033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:dd:8b:50:66:f3:01:47:8d:85:21:b4:4f:
3d:f1:42:cd:da:c4:75:68:4f:ac:3e:8d:df:ff:e6:
74:58:7a:52:4f:99:88:90:a6:d1:62:37:58:f0:9a:
57:e5:68:17:07:7c:6f:17:b2:b5:1f:99:93:e6:dd:
75:d4:7d:59:be:88:4e:3e:a4:65:71:7f:dd:be:5f:
8c:bc:f7:8e:3f:ad:39:88:bd:ad:5d:46:76:2e:bb:
fe:df:6f:49:90:df:1e:f9:63:c2:5f:f3:d6:f7:a0:
9a:31:66:d1:69:35:2c:12:27:55:e6:59:95:c1:7c:
3e:1f:a5:07:75:e3:21:6c:cb:a8:63:3f:05:73:1a:
57:d1:13:c7:d2:ae:36:cf:91:9b:8d:24:78:af:d8:
3b:8d:1f:63:41:99:f2:65:bf:2a:ae:e4:dc:bb:2b:
78:e6:cc:ca:a9:d2:d9:35:76:71:81:2d:1b:d2:b7:
f2:4a:27:0b:c3:d8:02:8d:43:18:33:b8:ef:44:4d:
bf:44:91:c2:f6:ea:07:ba:27:4b:e7:f0:28:25:72:
52:94:88:88:f5:ae:20:ad:1e:5b:4f:7a:29:22:fd:
fa:cc:5d:0f:ef:b9:b4:1e:4b:67:c4:6c:f0:c4:17:
ac:b7:de:34:37:25:4d:ab:1b:54:21:16:7b:d4:d0:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:F6:E9:50:7C:D3:8D:07:B3:20:17:C7:8B:5A:75:89:7E:E0:33
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/6XT26VB8040HsyAXx4tadYl-4DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
37.48.224.0/24
37.48.229.0-37.48.230.255
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
141.195.128.0/19
185.102.148.0/22
188.74.64.0/19
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a04:c880::/32
2a05:87c0::/29
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
3b:1a:c7:61:40:12:db:26:51:0a:be:d4:6a:32:06:56:5e:d7:
21:78:ea:4b:06:f8:ac:f8:48:89:8c:8f:19:db:d1:48:03:4b:
72:6a:5f:e8:d8:35:02:f5:db:d1:86:77:86:99:23:21:c4:40:
8b:23:ab:d0:64:70:63:9f:5f:b0:8e:a5:e3:ee:b6:e6:f8:5b:
8e:26:da:f9:12:e7:b1:76:20:3c:41:ab:d5:d6:6c:74:21:fc:
c3:33:ed:63:4f:55:64:d7:68:2f:1b:a6:82:e1:7f:93:d8:ae:
8c:b6:5e:66:88:ae:9d:c9:1a:61:08:ff:ff:be:ea:78:a6:a0:
67:94:49:09:f5:42:ee:81:2f:da:e4:05:f8:70:e4:b7:75:db:
8c:c3:9b:a5:d9:41:65:aa:a3:00:ef:a2:0b:5b:ec:3b:92:32:
6b:46:33:34:f9:bd:ca:e0:a3:f1:36:10:e1:5d:4d:a3:c8:ef:
e2:b5:0b:d6:ca:61:a0:c1:86:45:0b:5d:fd:2a:9b:6d:40:f8:
78:dd:88:29:4f:e5:a5:41:78:c2:b4:eb:84:65:e3:a8:45:6a:
b0:24:03:a7:42:52:ad:0e:10:56:57:d8:27:2b:0f:bc:71:9c:
28:e3:ab:61:b4:35:6e:cb:65:fa:74:f0:51:f4:3d:0b:8d:12:
5f:a9:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:05 2025 by rpki-client