Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/8wRHHelGjNt_YdNRsXxS7jyYubQ.roa
File: 8wRHHelGjNt_YdNRsXxS7jyYubQ.roa (raw, json)
Hash identifier: e8rsV0wb3F77ZP+iP8vkbhnhqTHbGQ+aoxBYbfu3Hx4=
Subject key identifier: F3:04:47:1D:E9:46:8C:DB:7F:61:D3:51:B1:7C:52:EE:3C:98:B9:B4
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 018CC794DEE27282B75913913FE48888F716
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/8wRHHelGjNt_YdNRsXxS7jyYubQ.roa
Signing time: Tue 02 Jan 2024 00:31:11 +0000
ROA not before: Tue 02 Jan 2024 00:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52144
IP address blocks: 195.20.144.0/24 maxlen: 24
185.247.152.0/22 maxlen: 24
2a03:e100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:de:e2:72:82:b7:59:13:91:3f:e4:88:88:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Jan 2 00:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f304471de9468cdb7f61d351b17c52ee3c98b9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:be:92:19:f8:31:1d:7b:52:14:78:96:38:
06:02:7d:43:6f:57:e0:ec:5c:47:aa:56:bb:d5:a3:
2f:f7:f3:47:f6:62:46:36:7e:9f:03:c8:83:eb:25:
ec:7e:79:26:87:35:25:5e:40:ff:0f:53:a3:2b:e6:
70:3d:b9:48:bd:78:fc:9e:9a:8b:87:09:c4:97:2c:
15:33:ca:dd:85:57:2a:90:11:36:61:36:3f:a0:8d:
ec:d6:82:cb:85:53:87:a8:79:ae:fb:98:d7:88:6c:
1e:b0:32:51:d2:62:a4:a5:a7:1b:96:c4:32:3d:9d:
6a:cd:f9:61:4a:e7:67:fc:81:88:4b:40:16:57:2a:
d0:39:72:90:a2:0a:50:cf:d4:f0:72:1a:ee:6a:a1:
41:0e:5b:41:13:7d:ec:e5:01:31:54:7f:2c:a4:8b:
bd:6d:0e:11:16:69:8d:8c:54:3e:cc:71:69:a3:82:
eb:6f:70:af:32:27:33:fc:e9:c6:09:99:36:5e:67:
2a:99:7f:22:75:36:bb:ea:97:24:2e:51:2b:8c:52:
0a:af:41:8c:1e:c2:c8:f3:a9:90:0f:91:f2:82:0f:
2c:16:60:7a:2f:dd:fd:a3:c8:72:3b:cf:f1:1e:0b:
e9:c8:ae:b9:52:1d:f4:1c:19:ca:a6:2e:97:22:36:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:47:1D:E9:46:8C:DB:7F:61:D3:51:B1:7C:52:EE:3C:98:B9:B4
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/8wRHHelGjNt_YdNRsXxS7jyYubQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.152.0/22
195.20.144.0/24
IPv6:
2a03:e100::/29
Signature Algorithm: sha256WithRSAEncryption
8c:03:29:30:24:ce:b2:d4:e0:c2:27:f1:eb:ac:73:19:3e:04:
88:83:c0:f8:43:9f:d7:a3:65:dc:93:75:e7:6e:0c:42:23:a3:
47:57:4a:59:e2:70:0b:ec:d8:74:42:10:7d:26:18:f1:c1:3a:
56:f4:83:65:2b:06:bc:c5:a6:e4:39:6e:f4:ec:19:af:8a:47:
fe:6e:90:d0:87:50:a9:00:18:a9:53:54:82:25:47:97:2b:47:
33:41:88:f4:dc:94:d7:04:f6:87:14:3c:07:cc:d9:b6:4a:2a:
58:f7:f3:aa:93:d4:2b:6e:d3:1a:09:a9:d9:cb:0a:3f:bc:7c:
08:75:e9:e2:93:89:07:e9:ae:f7:cd:11:08:b6:79:31:77:f1:
9e:df:09:2c:ee:d9:8f:ad:52:56:6e:f2:63:99:34:03:a3:e5:
81:82:47:c7:f3:3c:df:f1:73:ba:9d:13:09:12:0f:50:90:2e:
1f:c1:0e:0e:da:96:6b:47:5b:c7:7f:ca:e8:23:dc:22:77:86:
7d:40:0e:72:48:2c:db:6f:0b:f5:5d:af:b1:6f:f6:22:de:1f:
f8:68:39:e9:ce:ce:ec:a1:4c:f4:a7:ec:d5:2f:97:0e:dd:a3:
c0:ec:b7:dd:44:c2:35:c5:7d:f7:b2:78:ce:ea:44:e7:18:a8:
b6:92:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:51 2025 by rpki-client