Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/H3EJ2Hac274sEtaKFShNCryGjTY.roa
File: H3EJ2Hac274sEtaKFShNCryGjTY.roa (raw, json)
Hash identifier: d8irLHrL4tBorrR7UTTz9xfGiXSCL5ccMKiarV9Mq3s=
Subject key identifier: 1F:71:09:D8:76:9C:DB:BE:2C:12:D6:8A:15:28:4D:0A:BC:86:8D:36
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019386FDF3F000BE7CF7A5E6C6DB98C339F8
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/H3EJ2Hac274sEtaKFShNCryGjTY.roa
Signing time: Mon 02 Dec 2024 10:50:10 +0000
ROA not before: Mon 02 Dec 2024 10:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Dec 2024 13:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:fd:f3:f0:00:be:7c:f7:a5:e6:c6:db:98:c3:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Dec 2 10:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f7109d8769cdbbe2c12d68a15284d0abc868d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:3c:e7:64:17:b1:64:33:72:1f:fc:89:9f:
d8:4f:7e:b5:24:9a:56:6a:80:60:c1:b0:9d:6b:f6:
2b:7c:3f:c3:67:d4:84:c3:63:9a:49:b9:53:18:e0:
86:4c:09:22:67:3c:57:09:23:ad:a0:eb:a9:c7:9d:
7b:76:c1:b2:04:2d:ec:d7:63:1a:d9:19:8a:5c:d4:
35:69:d0:10:e4:cf:2e:e7:b5:f2:f9:13:a7:b2:b6:
7d:6e:aa:b7:76:5f:61:3e:60:a3:62:f5:50:da:38:
51:e2:43:9a:f8:cf:7d:d8:9e:f1:60:00:47:52:98:
3a:b0:6e:59:f3:8d:2d:7f:d8:a9:d6:21:db:7a:22:
20:61:2e:53:ff:c7:38:1b:f9:33:88:e3:91:ea:85:
04:2e:01:c3:20:ac:5d:b2:71:38:c3:aa:04:0d:42:
40:73:a3:88:57:2a:9b:7d:1d:03:c8:0b:08:aa:6b:
2a:3e:1a:27:38:ee:b0:7a:b6:4e:ca:52:ae:c5:db:
f7:17:b1:55:25:99:9b:9a:a2:17:c9:e9:c0:dc:3b:
cd:4f:b9:07:e9:67:87:22:b2:2b:9b:a5:56:3d:0d:
4c:33:c9:ac:1c:65:96:6f:75:d9:f1:19:db:6d:75:
f1:07:04:4e:c3:a6:03:6f:56:ac:fc:f5:05:be:35:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:09:D8:76:9C:DB:BE:2C:12:D6:8A:15:28:4D:0A:BC:86:8D:36
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/H3EJ2Hac274sEtaKFShNCryGjTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
91.194.52.0/24
91.194.54.0/24
185.82.220.0/22
185.201.212.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
4a:1c:dd:f7:01:4c:1a:57:6e:d1:8e:29:ee:31:20:6a:0c:5a:
23:ee:46:76:31:69:8f:ca:f9:dc:fa:02:4e:8d:57:35:b8:12:
2e:79:31:51:97:8d:b4:59:69:95:88:95:9c:e9:be:af:ab:80:
07:77:42:63:f2:ce:b3:8e:1d:be:d4:ec:68:01:10:45:8d:70:
b7:16:23:7a:e3:72:b7:cc:e6:ea:aa:79:5c:85:48:2c:13:c6:
ea:36:13:73:f8:31:5f:41:b5:63:7d:68:af:07:c7:68:77:1d:
aa:86:e7:eb:d6:a0:72:c2:65:69:8a:87:41:a6:53:52:e0:af:
5b:a0:48:ef:74:2d:fc:b1:92:52:19:fe:94:b9:e4:f4:0c:fc:
be:f3:8a:e9:29:61:76:15:09:8b:0a:6a:bb:40:e3:ba:48:28:
00:2d:d5:c8:7c:c3:74:d9:aa:31:e1:a3:64:dd:90:4a:0c:d9:
e9:d9:4b:a4:b0:19:b8:e6:87:17:e1:15:e9:af:9f:3a:c0:9b:
56:56:56:7d:f2:65:cc:44:50:29:ff:f0:9e:0f:ce:6a:f7:e1:
86:3e:d4:aa:b8:ce:70:ca:fd:56:b5:81:72:ee:99:fe:07:3d:
41:21:50:40:89:64:7b:40:1b:bc:61:f8:1b:f4:b1:6f:a5:b8:
35:a3:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:58:47 2025 by rpki-client