Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J4OQN9BVxaeUa4-6eMVeNlamq7k.roa
File: J4OQN9BVxaeUa4-6eMVeNlamq7k.roa (raw, json)
Hash identifier: kWe92Mr1sUdUbWpcDvSxO89tmxwGmkn/lJyjMIadTCU=
Subject key identifier: 27:83:90:37:D0:55:C5:A7:94:6B:8F:BA:78:C5:5E:36:56:A6:AB:B9
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018F1F646F510334CD6DB61DDEB03AE706B8
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J4OQN9BVxaeUa4-6eMVeNlamq7k.roa
Signing time: Sat 27 Apr 2024 11:50:26 +0000
ROA not before: Sat 27 Apr 2024 11:50:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49549
IP address blocks: 146.19.128.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
193.163.203.0/24 maxlen: 24
217.119.129.0/24 maxlen: 24
2a0f:cdc2::/32 maxlen: 32
2a0f:cdc4::/32 maxlen: 32
2a0f:cdc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:64:6f:51:03:34:cd:6d:b6:1d:de:b0:3a:e7:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Apr 27 11:50:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27839037d055c5a7946b8fba78c55e3656a6abb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:c9:4d:b8:92:72:66:52:45:27:c1:00:d1:
43:cc:4b:07:54:39:2f:e0:3b:a9:4c:60:fd:48:29:
0e:ff:5a:1b:15:9f:14:9e:67:aa:cd:e0:ee:75:69:
22:e1:1b:21:a4:23:76:3b:90:95:e5:11:e5:62:c8:
8c:7e:48:7f:af:7f:84:90:88:48:53:f0:e2:02:6f:
e1:3e:62:8e:5e:f5:59:ba:2e:1a:67:16:e9:37:98:
39:72:fe:35:7a:62:60:5f:35:88:58:78:70:4a:2a:
48:ba:83:12:c6:57:d9:0d:eb:15:28:ea:a1:30:66:
ec:39:42:c8:04:63:59:10:a4:06:cd:4a:81:03:13:
ad:19:a5:25:5d:85:ab:d6:c0:06:10:3e:99:b4:77:
6e:06:00:2e:2f:ad:17:5c:8a:46:b5:10:a0:35:f3:
09:a9:6f:9f:35:d8:dc:48:c1:b3:f1:ba:e5:83:e1:
43:17:6e:a7:c8:30:4f:17:3f:5f:45:1f:f3:84:23:
d7:ef:e8:75:69:73:77:8d:f8:e3:39:92:68:81:99:
76:f7:ce:93:2c:6d:88:72:49:f0:3d:42:b1:3e:f6:
ad:93:ea:8e:cd:24:cd:0d:a8:da:ab:7b:2e:19:56:
2f:df:78:6b:e7:55:e8:fb:f6:d1:fe:2d:b2:4c:72:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:90:37:D0:55:C5:A7:94:6B:8F:BA:78:C5:5E:36:56:A6:AB:B9
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J4OQN9BVxaeUa4-6eMVeNlamq7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
178.250.191.0/24
193.0.230.0/24
193.163.203.0/24
217.119.129.0/24
IPv6:
2a0f:cdc2::/32
2a0f:cdc4::/31
Signature Algorithm: sha256WithRSAEncryption
82:2f:25:29:3e:5e:06:a8:af:d6:40:3a:71:f2:92:68:0f:ef:
13:d8:8a:cd:6e:f3:af:99:0e:86:d6:c9:4e:91:8d:08:6f:8a:
e1:e4:bd:31:99:04:5d:8f:6f:17:a6:ef:ce:b2:bd:cf:6b:16:
f5:24:97:52:78:85:4f:6d:74:97:72:28:4a:fb:66:12:cc:49:
2c:2c:65:df:e3:0d:88:c4:c2:37:50:ef:35:ae:76:03:f6:1b:
75:5d:0a:49:df:60:c8:62:b9:c9:de:ec:94:99:bc:ca:43:cb:
c5:bc:dc:0d:10:c1:88:ef:1a:79:29:69:fb:43:a6:c8:21:d2:
14:d0:36:e7:bc:06:40:de:eb:cd:35:05:5f:f0:9e:39:1a:35:
7c:73:bb:dc:f3:41:de:b8:91:46:76:1e:fe:a3:b6:cb:a8:6e:
2c:54:bd:6d:6a:55:b7:c3:14:8d:9b:44:3a:0b:6a:a3:24:7c:
dc:49:c8:e6:0a:d2:30:bc:18:0b:b8:40:b7:ec:41:1f:8a:5a:
2d:06:15:51:03:ce:7a:0a:34:0f:05:84:a2:a9:11:c6:c5:89:
7f:17:b9:76:b7:a2:3e:8c:7f:ed:2e:8a:41:04:b5:1b:fe:c7:
92:10:1a:61:9f:e7:8f:28:04:72:5c:e9:db:39:d1:36:bd:b8:
65:f8:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:57 2025 by rpki-client