Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/I8kWz2krYASGvu7L1uoVyj9IImw.roa
File: I8kWz2krYASGvu7L1uoVyj9IImw.roa (raw, json)
Hash identifier: iojDSTiIFWmviybIMx4NU+kbRPT7uyuLlRnihfUj+vQ=
Subject key identifier: 23:C9:16:CF:69:2B:60:04:86:BE:EE:CB:D6:EA:15:CA:3F:48:22:6C
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 018EAD2E924BBA4F8AEED94107614ABA7FCF
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/I8kWz2krYASGvu7L1uoVyj9IImw.roa
Signing time: Fri 05 Apr 2024 07:34:54 +0000
ROA not before: Fri 05 Apr 2024 07:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13170
IP address blocks: 46.254.96.0/21 maxlen: 21
62.145.160.0/19 maxlen: 19
77.223.32.0/19 maxlen: 19
85.29.64.0/18 maxlen: 18
185.69.36.0/22 maxlen: 22
185.69.72.0/22 maxlen: 22
212.116.32.0/19 maxlen: 19
213.143.160.0/19 maxlen: 19
213.145.192.0/19 maxlen: 19
2a04:25c0::/29 maxlen: 29
2a05:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:2e:92:4b:ba:4f:8a:ee:d9:41:07:61:4a:ba:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Apr 5 07:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23c916cf692b600486beeecbd6ea15ca3f48226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:e1:64:af:14:13:a2:1f:66:39:47:b4:5c:
d4:fd:8e:82:3c:e7:15:45:81:a2:9a:d8:6b:f5:f0:
18:7d:7c:55:8d:6c:75:32:85:5f:49:45:bf:a9:6f:
44:90:4b:f6:5d:c0:c6:93:ef:0f:0e:fd:54:d6:bd:
d8:3c:88:5f:cb:9d:a9:a2:82:73:e4:bf:77:c2:d7:
1c:6e:ae:ed:09:5c:0e:b5:da:95:ae:f9:53:ea:b0:
a4:e9:eb:7f:63:eb:8d:9f:30:01:6f:8e:20:22:90:
74:db:18:9a:18:97:ba:f5:86:40:df:c4:6d:bc:16:
38:bb:17:f2:2e:82:d7:1e:13:11:06:02:56:3e:51:
19:7b:e3:6a:df:15:88:d5:ab:27:bb:69:d5:cf:4b:
bd:cc:31:a9:37:31:55:74:87:f3:68:ce:07:c0:10:
6b:d5:12:ac:57:35:50:51:5f:e7:cd:a2:5e:fd:3b:
65:c5:01:6b:a9:50:a7:fc:2a:d7:7b:76:8b:c8:6d:
2e:69:77:44:cd:e3:78:86:2e:7f:49:25:97:14:51:
6c:d1:3c:b6:04:ea:42:26:a1:a3:a3:97:0e:cc:13:
87:e0:24:88:27:c8:eb:b0:5c:08:ee:c0:47:5c:46:
97:a2:3d:b4:b5:99:13:8b:7a:7f:72:c9:c4:fb:fc:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:16:CF:69:2B:60:04:86:BE:EE:CB:D6:EA:15:CA:3F:48:22:6C
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/I8kWz2krYASGvu7L1uoVyj9IImw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.96.0/21
62.145.160.0/19
77.223.32.0/19
85.29.64.0/18
185.69.36.0/22
185.69.72.0/22
212.116.32.0/19
213.143.160.0/19
213.145.192.0/19
IPv6:
2a04:25c0::/29
2a05:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e1:29:a6:f9:c0:4d:c4:e9:15:49:e2:ee:86:4c:d6:ad:28:
fd:5a:e5:6b:89:18:ac:ab:d9:d2:51:d6:38:d7:c9:3d:1d:d9:
3b:15:e3:d5:9f:fc:07:27:ce:63:1c:d4:ad:36:79:1b:d8:ae:
50:66:3b:b1:36:c3:71:c1:5d:7f:7d:9e:b2:16:55:b5:49:35:
3f:48:64:cd:e7:0a:f8:d4:a2:5c:d4:2d:df:d9:be:d1:f9:19:
01:b8:8d:d2:a8:9e:10:c4:94:cf:9e:0c:50:60:b1:58:03:ac:
8b:7e:36:2a:42:93:69:be:64:57:a3:67:e7:13:c5:6c:6e:f2:
c5:12:42:f8:94:ae:08:28:74:54:8c:30:54:17:53:29:64:fa:
4d:09:df:6b:19:d5:27:99:22:e6:26:c8:6b:6f:36:dc:10:ee:
d6:db:98:3d:ea:c5:54:0b:f7:0c:f3:c3:79:28:c6:4e:f4:75:
c9:15:51:73:9c:75:1b:7e:c8:87:bb:85:38:7b:ad:6b:c3:99:
29:ab:85:49:ef:25:90:16:42:18:14:92:83:ff:fb:a6:27:39:
fa:a6:e6:c8:43:56:b6:ce:98:38:83:6c:9f:8d:c7:21:ec:64:
bb:bf:da:31:c3:32:6a:13:fa:b4:b5:c9:c2:06:2d:05:7d:94:
05:a8:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:32 2025 by rpki-client