Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/P1GdQxR3aesdqOC9mUcRqZ-iBUQ.roa
File: P1GdQxR3aesdqOC9mUcRqZ-iBUQ.roa (raw, json)
Hash identifier: 14Vdfral8Tvxd1lYl9P8itS1gaVTZePHTvBXvehZpYY=
Subject key identifier: 3F:51:9D:43:14:77:69:EB:1D:A8:E0:BD:99:47:11:A9:9F:A2:05:44
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0193F3A78B4D6947E82E76E9DC6EB45524A7
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/P1GdQxR3aesdqOC9mUcRqZ-iBUQ.roa
Signing time: Mon 23 Dec 2024 13:14:23 +0000
ROA not before: Mon 23 Dec 2024 13:14:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60341
IP address blocks: 185.32.232.0/22 maxlen: 24
185.45.116.0/22 maxlen: 24
185.47.20.0/22 maxlen: 24
185.50.92.0/22 maxlen: 24
2a00:c660::/29 maxlen: 29
2a00:c660::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:a7:8b:4d:69:47:e8:2e:76:e9:dc:6e:b4:55:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Dec 23 13:14:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f519d43147769eb1da8e0bd994711a99fa20544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:74:c9:0f:96:6c:eb:2c:54:0a:85:4f:3e:
0a:3c:fb:65:d7:92:dd:41:ab:df:8b:e8:4c:d2:85:
10:cb:c0:1d:b5:76:11:66:7a:af:a0:66:ab:08:3a:
1f:d8:0b:01:c4:e4:0e:8c:0e:5a:80:f3:bc:ba:7d:
c5:ce:b0:c8:df:66:38:01:f2:3b:a2:d7:c7:9e:4f:
6d:db:5d:2f:f3:4d:36:08:fc:f1:2f:4c:64:e6:e0:
e9:f9:60:a1:53:f6:49:da:3a:ee:d3:f5:21:39:96:
84:82:13:a4:03:69:05:be:a4:14:06:97:d9:cd:21:
85:4a:b1:80:7b:22:67:57:55:d1:ce:75:5a:dd:97:
0b:32:17:44:a4:c4:f9:13:dc:0e:e7:ff:47:b4:13:
f4:23:05:8b:ce:06:ca:8c:74:83:5a:8e:4f:f5:b1:
27:a9:aa:94:c3:c9:aa:83:de:33:48:b0:08:a2:9f:
42:c3:bc:30:e7:a8:f6:15:43:58:8b:3e:f3:52:cc:
a8:f0:4b:54:6c:4a:a5:38:f0:6e:fc:b0:13:a2:23:
16:22:09:0a:ea:8e:26:ed:f8:1b:cd:85:0b:8d:da:
99:21:47:3c:a3:04:23:af:e9:ea:a2:62:44:2f:fa:
5e:5b:e5:50:84:f7:cb:44:47:9b:5c:0c:b8:45:60:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:9D:43:14:77:69:EB:1D:A8:E0:BD:99:47:11:A9:9F:A2:05:44
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/P1GdQxR3aesdqOC9mUcRqZ-iBUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.232.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
IPv6:
2a00:c660::/29
Signature Algorithm: sha256WithRSAEncryption
63:78:ac:ea:a5:47:0c:96:dc:76:71:f6:5a:74:98:12:6b:84:
d3:74:97:5a:5c:d4:b5:f2:20:5f:a9:fe:91:22:27:30:36:7e:
f8:e1:92:04:2d:c6:14:ec:2d:14:c3:77:c5:21:24:ab:2b:4a:
84:3d:72:bd:d6:23:ee:73:98:fb:1b:cf:95:03:fb:de:9c:bd:
c9:1c:3e:1d:32:3f:58:8d:7b:c5:e9:6a:1a:a4:c1:d1:26:ba:
c0:bd:ca:d4:b5:dd:88:7e:ed:c2:00:3a:18:8e:08:94:cb:7f:
b6:c5:d3:4a:3a:15:51:70:f6:73:ab:78:a0:05:bd:df:ef:e2:
df:87:1c:e4:5e:f8:00:5c:18:f6:b8:ee:68:72:94:4a:46:b3:
62:06:ee:99:9b:72:8d:4d:49:49:06:51:b9:5f:33:d2:89:18:
4c:44:4f:68:8a:c8:b7:7f:e3:2e:d3:fb:8d:c3:4e:24:cd:7f:
5e:b9:43:7b:14:3f:0f:d9:66:bd:9d:61:87:e4:ae:8b:28:9d:
e9:7a:c5:f2:4c:62:c5:85:dd:d1:c9:f0:09:51:a8:b6:bb:ad:
48:4a:4b:3b:2e:b3:1c:a8:21:55:b5:40:e0:c8:6a:49:26:4e:
28:67:e1:24:b0:8e:82:47:22:a6:d1:0a:d8:d1:9b:45:f7:b3:
9a:0d:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:21:31 2025 by rpki-client