Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/fJWVzSty5gVWEYUTbKhxgDn_n0U.roa
File: fJWVzSty5gVWEYUTbKhxgDn_n0U.roa (raw, json)
Hash identifier: x1FvSbnzXgqjqpZWniiOo5huB1oZg+w0lbQKCXB0fxA=
Subject key identifier: 7C:95:95:CD:2B:72:E6:05:56:11:85:13:6C:A8:71:80:39:FF:9F:45
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0193CE484618FED5CDE283770DACE4E0DA92
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/fJWVzSty5gVWEYUTbKhxgDn_n0U.roa
Signing time: Mon 16 Dec 2024 07:04:23 +0000
ROA not before: Mon 16 Dec 2024 07:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 85.115.204.0/24 maxlen: 24
85.153.12.0/22 maxlen: 22
85.153.24.0/22 maxlen: 22
85.153.35.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.40.0/24 maxlen: 24
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.48.0/22 maxlen: 22
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.153.65.0/24 maxlen: 24
85.153.66.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.88.0/22 maxlen: 22
85.153.96.0/22 maxlen: 22
85.153.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:48:46:18:fe:d5:cd:e2:83:77:0d:ac:e4:e0:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Dec 16 07:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9595cd2b72e605561185136ca8718039ff9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:0f:b6:ea:84:3a:c9:0d:29:00:32:81:27:
50:08:48:e9:4f:85:32:b0:74:1b:0a:f4:7f:b5:cd:
d2:01:2c:de:dd:c7:ea:81:65:c1:db:05:09:88:a7:
b2:42:47:39:9c:f4:fb:54:b2:39:1e:98:d9:46:88:
47:e7:eb:8e:75:3d:20:39:a7:30:f8:5b:27:ba:c4:
4f:ec:1a:1b:3d:40:21:df:bf:50:6f:06:c3:1d:5c:
9f:f2:72:79:dd:14:a8:ee:f8:0c:ec:91:dd:66:16:
40:ec:e5:85:63:4e:17:b2:fe:f8:3c:3b:f0:dc:2b:
2c:3f:b7:51:8b:48:d7:55:22:80:e4:4c:fc:d8:96:
47:9c:8e:00:de:66:e5:6f:fb:ea:43:67:27:af:a4:
73:ec:42:c1:25:2c:04:f2:78:0d:49:27:77:c9:5d:
2e:cc:48:61:70:18:a3:23:3c:b6:e4:63:28:ac:5f:
fa:a1:ab:6c:24:78:eb:aa:6d:ea:fc:fe:ff:cc:16:
23:e6:02:4d:d7:ce:81:53:c3:39:c5:ca:70:a1:52:
ed:41:b1:38:fb:22:5b:ac:5d:fb:01:a0:5a:42:fa:
97:53:48:78:00:cf:20:bb:7e:4a:bd:0d:b9:06:94:
cb:dc:f2:dc:01:c9:c1:9d:21:c0:d4:de:ab:50:59:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:95:CD:2B:72:E6:05:56:11:85:13:6C:A8:71:80:39:FF:9F:45
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/fJWVzSty5gVWEYUTbKhxgDn_n0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/24
85.153.12.0/22
85.153.24.0/22
85.153.35.0-85.153.42.255
85.153.48.0/21
85.153.59.0-85.153.63.255
85.153.65.0-85.153.67.255
85.153.72.0/23
85.153.88.0/22
85.153.96.0/22
85.153.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:67:56:27:fb:2b:ff:53:ac:aa:b4:5f:81:70:0c:c0:83:22:
1e:56:9e:a5:62:2b:ce:49:c4:00:a6:66:72:1b:3a:f4:c3:7d:
04:37:dc:ec:d7:63:14:a6:a0:31:01:85:f2:f6:32:10:ec:d8:
4a:e8:37:63:c2:73:50:53:3f:3e:5b:46:4f:80:df:51:c6:56:
23:33:91:46:3a:10:9b:0b:3b:ae:f2:6d:96:67:8a:e9:13:7c:
d8:9d:82:eb:84:b4:c9:b6:b7:bf:0b:67:26:ff:57:0c:e8:5f:
36:96:83:f1:db:5a:b6:2e:83:9e:c4:73:f1:72:28:46:14:52:
9c:b4:09:bd:a3:e3:92:77:c4:93:2b:88:a3:bf:e3:69:33:5c:
2c:4a:5b:97:ce:2a:25:ea:65:a3:d5:fa:4f:6c:5d:c4:be:26:
c7:47:69:6d:79:ea:9a:90:23:6e:3e:1b:0f:16:e7:ab:66:d7:
b0:9e:66:76:3d:08:26:62:08:1b:ea:78:eb:cb:b1:42:ab:53:
af:c3:c9:69:78:91:c6:2d:7d:e7:30:8a:b1:34:fa:d8:7f:2f:
a7:33:81:80:8d:73:ec:f7:c4:72:09:e3:ce:a9:24:7d:cb:82:
f7:48:d1:81:92:e5:41:80:84:52:57:0e:f5:21:c2:4d:7d:b1:
3e:0f:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:32 2025 by rpki-client