Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/9pnMok8TKC607fvoERDQS7YXls0.roa
File: 9pnMok8TKC607fvoERDQS7YXls0.roa (raw, json)
Hash identifier: yk1z0QsUJClovULupltLk5/zsYIKZyffUJ1J14G+iKY=
Subject key identifier: F6:99:CC:A2:4F:13:28:2E:B4:ED:FB:E8:11:10:D0:4B:B6:17:96:CD
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 018CC94ACBB886F5FA41B226894C5A184EA0
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/9pnMok8TKC607fvoERDQS7YXls0.roa
Signing time: Tue 02 Jan 2024 08:29:31 +0000
ROA not before: Tue 02 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62382
IP address blocks: 193.143.96.0/24 maxlen: 24
185.37.191.0/24 maxlen: 24
185.37.188.0/22 maxlen: 22
185.37.189.0/24 maxlen: 24
185.37.188.0/24 maxlen: 24
80.72.219.0/24 maxlen: 24
80.72.218.0/24 maxlen: 24
80.72.217.0/24 maxlen: 24
80.72.216.0/21 maxlen: 21
80.72.216.0/24 maxlen: 24
80.72.221.0/24 maxlen: 24
80.72.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 08:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:cb:b8:86:f5:fa:41:b2:26:89:4c:5a:18:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Jan 2 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f699cca24f13282eb4edfbe81110d04bb61796cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:5a:6c:53:d0:32:05:08:dd:05:00:cb:f9:
28:19:e3:77:be:8f:44:6e:5f:09:40:75:85:ca:5c:
b8:c6:32:28:9d:7b:79:78:fc:6e:c9:63:39:02:5c:
fe:ef:71:f0:69:62:df:b0:7a:80:af:73:ec:24:8b:
aa:f3:4f:bd:4e:5c:23:fb:88:0b:96:58:10:07:d3:
e3:e2:4e:64:7c:66:4a:52:fb:75:68:f0:9c:59:1c:
17:cb:d9:22:e3:c7:d3:ea:10:aa:8c:68:23:c9:7f:
45:3f:2e:b5:e7:62:a9:40:fc:c8:e3:79:d1:4e:97:
98:02:a2:ee:ef:fd:62:06:91:3b:c8:78:dd:cf:16:
46:bf:4e:ad:91:61:42:b1:bb:dc:b3:fc:10:2f:1d:
2b:55:83:7a:43:12:a3:02:6e:f0:bb:fb:ad:43:94:
36:91:a0:39:f5:92:e7:6b:c6:fe:1e:95:c7:99:63:
8e:ca:de:71:c0:dd:dd:23:ac:1a:ec:63:c2:8a:cd:
49:30:e2:93:c9:f1:ab:e1:d7:76:ff:f6:a0:bf:7b:
8a:91:9a:1c:8c:25:df:3d:1a:72:70:c4:45:39:46:
ab:a7:ff:2e:68:3b:56:73:ab:14:0f:63:bc:f5:80:
0d:9f:8a:14:24:2f:e9:d5:43:ae:85:1d:8c:7d:18:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:CC:A2:4F:13:28:2E:B4:ED:FB:E8:11:10:D0:4B:B6:17:96:CD
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/9pnMok8TKC607fvoERDQS7YXls0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.216.0/21
185.37.188.0/22
193.143.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fe:58:2a:19:9d:0a:fb:46:d7:52:2b:6d:38:67:cf:01:76:
55:a9:e9:e8:16:97:bc:2c:ab:0f:8b:96:3f:b1:4e:a1:46:2a:
6b:d8:0c:e5:28:cc:23:c8:c8:01:96:cc:a6:f6:36:f9:c9:82:
65:15:66:22:24:ce:52:5f:70:cb:08:3e:80:27:c4:a4:4c:03:
36:14:16:fa:f2:23:9f:27:7f:4f:3e:75:8b:11:d5:99:f6:be:
cc:4d:fa:df:f0:a7:9a:87:12:af:04:da:70:4f:02:13:d6:67:
96:c0:f8:6a:f1:25:a0:db:ee:e4:d3:3d:e9:9c:f0:b1:dd:36:
24:55:c8:4c:58:b8:82:80:de:72:36:7e:fd:bb:b6:3b:76:6d:
d4:9e:43:85:1d:f1:12:e9:c0:46:b8:25:4c:33:45:5f:08:09:
c2:a9:fd:d7:3e:9d:41:49:a4:38:87:58:b3:13:aa:17:b4:e9:
33:ba:ed:c8:3f:0c:7a:a2:6b:cc:b4:cd:3a:b4:4d:6e:46:87:
4e:54:50:eb:07:17:ce:6d:3d:aa:fc:bd:28:d5:50:88:72:11:
49:b9:9e:c4:f4:a1:8c:29:7f:43:00:ef:df:8e:8a:0f:f8:b9:
a9:1f:69:33:8c:57:86:87:7a:bc:31:94:7c:f1:17:40:c6:ab:
4c:67:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:10 2025 by rpki-client