Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/M8D_IMJ533cPCluNicEkqGqEqIA.roa
File: M8D_IMJ533cPCluNicEkqGqEqIA.roa (raw, json)
Hash identifier: f3oUXP011dcel1hy6/puj6WHzfVrVmIF21BprGdwKQo=
Subject key identifier: 33:C0:FF:20:C2:79:DF:77:0F:0A:5B:8D:89:C1:24:A8:6A:84:A8:80
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0196A43AF9B57B8BB8D0972E483C4172C22B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/M8D_IMJ533cPCluNicEkqGqEqIA.roa
Signing time: Tue 06 May 2025 06:14:10 +0000
ROA not before: Tue 06 May 2025 06:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.240.0/22 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.196.0/22 maxlen: 24
213.18.208.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.224.0/20 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.35.0/24 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 08:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:3a:f9:b5:7b:8b:b8:d0:97:2e:48:3c:41:72:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: May 6 06:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c0ff20c279df770f0a5b8d89c124a86a84a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:96:1d:4a:ba:21:37:9b:da:33:8d:73:90:
35:4d:9e:20:16:95:a1:e3:c9:a9:ba:c9:32:86:ef:
d3:bd:70:3e:dc:15:65:89:a6:7f:cc:32:a6:9a:2b:
a1:83:51:e4:7d:97:34:45:61:db:8a:2c:18:9b:21:
8a:02:6b:a8:79:98:98:cc:1a:36:cf:66:ef:e1:82:
85:82:f4:be:d4:73:a0:d9:78:65:7d:d6:ab:36:4d:
bd:60:37:85:62:2b:d0:1c:0c:c1:eb:d7:b8:25:f0:
97:6e:f6:20:0e:d1:85:41:4c:51:43:22:e2:57:87:
b8:46:30:1b:3d:cd:50:55:e3:0c:3e:25:84:57:7e:
41:67:20:78:da:bc:19:23:0d:f3:f8:98:d6:e6:2f:
df:15:8f:5e:f2:f4:f8:48:b4:4a:c5:f4:c6:f2:9e:
f2:2d:77:eb:3e:19:fb:ee:62:ff:3c:1d:2c:87:ca:
7e:58:d3:18:2d:ab:d7:c6:ba:f6:9f:08:35:f4:b7:
5d:d0:18:75:d8:d7:6d:ad:99:ac:32:f9:a4:9b:7d:
ed:f3:63:b2:ab:00:9f:c3:ac:61:c3:12:ed:cd:d3:
ed:57:2a:e4:9e:b9:31:bb:5f:1c:e2:3f:25:31:17:
2d:1e:83:64:9f:5e:d0:0a:d8:e8:39:3f:ab:3f:53:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:FF:20:C2:79:DF:77:0F:0A:5B:8D:89:C1:24:A8:6A:84:A8:80
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/M8D_IMJ533cPCluNicEkqGqEqIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
194.238.78.0/23
213.18.196.0/22
213.18.208.0/22
213.18.220.0-213.18.239.255
213.18.245.0/24
217.177.0.0/21
217.177.35.0/24
217.177.44.0-217.177.55.255
217.179.56.0/22
217.179.72.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
217.180.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2f:e8:c0:e2:f0:50:6f:7f:ae:8d:bb:7c:83:f8:23:28:bb:
8a:83:fb:11:55:00:b7:6e:f8:9d:3f:8b:36:c7:6f:d9:ea:bd:
8e:01:af:91:da:db:f3:c0:f5:b7:e4:2b:ed:da:39:be:32:de:
7d:5e:cc:f2:60:7c:74:3c:2a:1a:9d:55:ea:f8:c2:bc:b0:62:
d5:db:d8:30:2f:b5:47:c7:d8:f7:1d:19:e1:d7:eb:32:e9:fd:
75:2b:3a:89:ca:ec:33:5f:81:f5:81:de:b6:55:9b:55:ec:d7:
95:60:57:50:68:cf:e3:9e:b2:25:7c:44:07:e6:9d:35:c7:dd:
00:da:6b:ad:a4:78:0f:e3:de:0a:00:7d:ee:05:aa:07:08:5d:
f8:d3:31:09:07:ac:64:c1:22:63:c7:3f:8c:f2:2b:12:ab:3c:
f9:cd:59:4b:6a:55:a7:9c:36:9a:a6:9a:d6:f6:75:65:30:90:
e8:a2:f8:54:bb:08:f4:3c:bd:43:7c:e5:fd:5b:57:b9:7f:2f:
6d:4d:8b:dd:e5:fc:f1:60:41:11:2c:7a:18:91:54:09:82:8b:
6e:5e:53:4d:2b:c0:95:73:93:75:31:36:5b:8b:a2:17:66:8d:
91:31:6f:e7:2e:63:2d:2c:76:7a:b2:3c:5c:94:df:52:f4:02:
a6:ef:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:01 2025 by rpki-client