Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/dnzNa2hl8qxRZXZgzkj59G1auBI.roa
File: dnzNa2hl8qxRZXZgzkj59G1auBI.roa (raw, json)
Hash identifier: mnTpR/l4SWPyTQsBBDLdPvtTweOGF8aZ9UJPQA1rxJU=
Subject key identifier: 76:7C:CD:6B:68:65:F2:AC:51:65:76:60:CE:48:F9:F4:6D:5A:B8:12
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 018CC6B9153F513E62F28EAD342D21F1FF78
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/dnzNa2hl8qxRZXZgzkj59G1auBI.roa
Signing time: Mon 01 Jan 2024 20:31:07 +0000
ROA not before: Mon 01 Jan 2024 20:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25504
IP address blocks: 185.90.232.0/22 maxlen: 24
151.252.48.0/20 maxlen: 24
158.58.144.0/21 maxlen: 24
94.102.208.0/20 maxlen: 24
2a00:19e0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 13:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:15:3f:51:3e:62:f2:8e:ad:34:2d:21:f1:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Jan 1 20:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=767ccd6b6865f2ac51657660ce48f9f46d5ab812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6b:27:58:ae:2b:d0:27:ec:15:ba:54:67:e2:
19:5d:08:99:a4:48:24:15:f3:ed:6a:aa:02:af:0f:
4a:66:95:af:62:54:c2:62:0c:34:2c:ce:2f:ad:02:
56:b9:3c:ee:37:5c:4b:fd:21:8b:86:df:db:92:05:
b3:be:19:f6:e6:88:77:26:4c:1d:12:a7:44:f8:d5:
7c:37:db:b6:c0:b5:4c:7a:23:a2:fe:7b:05:fe:24:
b4:41:93:25:b4:3e:a1:ab:d2:5f:ab:20:30:66:79:
8b:54:ff:bf:d3:64:a5:9c:bd:7f:16:bf:fd:c1:eb:
0c:fc:a8:8d:46:fa:2f:ad:fc:75:37:4a:f2:f5:3f:
e9:6b:6a:e3:a8:95:39:6d:85:4a:e4:81:ad:38:1c:
20:5f:ec:63:fb:37:f4:64:da:a8:f3:28:1a:a1:9c:
cf:0d:19:6b:bb:88:5e:2f:38:82:ac:fd:d5:dd:e9:
1e:1c:78:d6:c3:a3:35:0d:4c:71:aa:fd:c3:8a:bb:
9f:4e:d8:aa:25:86:ed:6d:ee:4a:1f:b3:88:f5:be:
3d:99:34:44:1b:9c:77:47:53:b2:cd:76:bb:33:40:
8f:fa:b8:d6:b3:4c:5e:8a:b1:03:d4:1d:22:ca:f2:
42:d9:9f:00:a1:f0:2e:1c:0c:9c:e3:68:3d:f9:89:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:CD:6B:68:65:F2:AC:51:65:76:60:CE:48:F9:F4:6D:5A:B8:12
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/dnzNa2hl8qxRZXZgzkj59G1auBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.208.0/20
151.252.48.0/20
158.58.144.0/21
185.90.232.0/22
IPv6:
2a00:19e0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:b9:03:8a:50:14:5c:80:4a:fd:1f:26:8c:8e:68:ea:5a:6c:
85:6f:c3:d9:35:bb:53:4a:5c:bb:1f:a5:cf:75:27:17:af:14:
da:44:29:2c:63:63:13:cd:46:b1:bb:28:ec:ab:61:4e:34:1a:
e5:21:88:2a:51:cb:4a:dd:62:81:c8:22:2b:02:76:b8:8d:58:
e2:1d:96:39:a0:e6:9d:c3:1e:dd:71:90:f5:6c:ee:5a:a6:c1:
d2:e8:06:c4:5f:4c:03:38:c3:e0:dd:02:1f:8f:55:69:26:da:
95:72:95:d3:43:0e:57:95:66:8b:c8:9c:ff:d7:b0:80:8c:75:
97:4c:16:03:75:61:a9:0a:ae:65:37:26:41:c6:53:ea:5d:27:
9b:3b:66:fa:65:89:6f:90:10:1b:95:83:46:7a:aa:58:31:aa:
f5:39:b6:f2:ca:3b:a0:90:44:c2:50:ff:7a:33:d8:83:f8:6d:
12:fe:fe:03:22:b4:5d:41:55:b2:ce:db:1c:90:94:af:75:41:
91:f2:2a:a9:47:28:02:31:1d:62:3f:52:36:f5:60:3a:6e:f3:
6e:a6:67:7c:0a:33:75:01:00:0e:b1:4a:f2:20:0d:34:0b:3c:
26:9b:23:fb:83:2a:e4:f6:0c:8c:8b:90:19:c4:c2:1e:80:47:
1f:54:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:50 2025 by rpki-client