Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/odWFGq-ysTndXS8BaSWGXP7uj0A.roa
File: odWFGq-ysTndXS8BaSWGXP7uj0A.roa (raw, json)
Hash identifier: EUtHsP1I1K9eirUyaZKbg+L5GmY3nkck0jeqJDD0bxo=
Subject key identifier: A1:D5:85:1A:AF:B2:B1:39:DD:5D:2F:01:69:25:86:5C:FE:EE:8F:40
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 018D6AAF6648035D7ADDD2C3BB9F228F70DB
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/odWFGq-ysTndXS8BaSWGXP7uj0A.roa
Signing time: Fri 02 Feb 2024 16:38:16 +0000
ROA not before: Fri 02 Feb 2024 16:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9120
IP address blocks: 80.70.8.0/21 maxlen: 21
92.43.88.0/21 maxlen: 21
185.221.246.0/23 maxlen: 23
185.221.247.0/24 maxlen: 24
185.238.192.0/22 maxlen: 22
212.97.136.0/22 maxlen: 22
212.97.144.0/20 maxlen: 20
2a04:3f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 10 Feb 2024 14:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:af:66:48:03:5d:7a:dd:d2:c3:bb:9f:22:8f:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Feb 2 16:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1d5851aafb2b139dd5d2f016925865cfeee8f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:12:d6:24:f7:2b:d1:f8:f0:4c:c5:3f:5c:
12:ac:78:eb:38:c4:4c:1d:20:87:37:ea:f5:04:61:
72:cf:8a:fa:1a:81:7d:06:6b:d4:e3:e3:17:1b:94:
59:f3:b0:96:41:b2:a6:6a:11:e8:84:7d:25:0c:34:
f5:a8:06:d0:41:4e:5f:c6:5c:06:3d:32:ee:62:eb:
44:e9:d5:1d:ea:d7:81:e2:61:5a:27:dc:da:37:ae:
f1:7d:14:d8:86:8e:6d:79:59:32:8f:94:3d:e6:cd:
2b:53:69:84:47:cb:d8:cb:3a:04:f5:59:a5:87:13:
e3:b1:0e:ca:59:3e:5c:0f:c5:6f:a8:50:c8:de:23:
15:48:7d:03:10:0d:57:52:cf:68:a6:8b:74:1d:da:
6b:b6:6c:9f:83:dd:98:31:bc:11:8f:ff:8b:f9:00:
0f:7e:41:69:c3:4e:bc:a3:29:fb:b6:8b:6f:75:db:
d7:b7:3c:3c:8e:70:84:b5:df:5b:c6:1b:ef:7f:51:
45:c4:60:e2:cd:22:73:5a:cf:dd:79:70:f9:88:8c:
fa:85:a5:81:a6:b7:bd:c0:f3:39:73:90:c4:30:b1:
42:c2:02:0b:f3:a1:fd:2d:f6:45:a9:8d:a7:26:f9:
20:9e:1a:7d:49:f0:97:7a:9f:39:72:d1:37:e2:93:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:85:1A:AF:B2:B1:39:DD:5D:2F:01:69:25:86:5C:FE:EE:8F:40
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/odWFGq-ysTndXS8BaSWGXP7uj0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.8.0/21
92.43.88.0/21
185.221.246.0/23
185.238.192.0/22
212.97.136.0/22
212.97.144.0/20
IPv6:
2a04:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:71:59:5b:cc:cc:9c:9f:c2:f7:95:98:06:1e:af:27:f0:b0:
41:ad:11:94:06:5f:81:f7:98:7e:98:a5:05:ae:1f:79:94:b2:
36:83:a9:54:72:58:7f:a8:a6:e5:c5:64:13:14:ab:30:80:bc:
8b:6a:ca:80:55:1f:2f:28:72:21:bc:36:9c:b8:2d:31:b5:d4:
c1:41:11:12:a5:98:f6:e1:90:d1:09:da:03:ce:32:80:da:76:
cc:a4:13:55:df:9c:d0:95:0f:c1:ef:e4:df:38:56:12:38:ef:
e8:c5:eb:8d:7c:1b:5c:30:6c:3f:2c:44:b6:2f:d0:39:6c:d7:
54:f3:06:1b:76:7e:00:e0:08:c2:da:13:a2:0b:4f:f7:b4:bf:
e1:6b:1a:e4:b7:86:d3:e9:42:e0:51:22:3b:02:7c:8e:d6:36:
1c:e3:48:ec:07:c4:ee:68:fb:e6:81:11:49:aa:6f:9e:15:eb:
76:c8:fa:2f:e5:f9:4b:b9:0e:dc:b6:df:fb:d6:64:d2:1d:ad:
60:00:1f:8c:f0:70:df:d9:d7:86:2f:64:83:70:5c:a1:e0:34:
2d:27:75:8f:9d:91:1f:71:3e:b9:b3:ba:c9:15:bd:f0:db:89:
a6:59:87:a2:89:c4:5f:36:5f:5e:6b:20:d6:9d:49:98:f3:83:
95:aa:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:28:20 2025 by rpki-client