Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/RAXHKjrblByAtAVo83KSfhlDkj8.roa
File: RAXHKjrblByAtAVo83KSfhlDkj8.roa (raw, json)
Hash identifier: h7VwyhljZReDaxCBiIOHW5OkBpZZE3Rcg9ZBwKBV1WI=
Subject key identifier: 44:05:C7:2A:3A:DB:94:1C:80:B4:05:68:F3:72:92:7E:19:43:92:3F
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 018F7BA38940115AC2CF0DD9547336F8DEEC
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/RAXHKjrblByAtAVo83KSfhlDkj8.roa
Signing time: Wed 15 May 2024 09:44:26 +0000
ROA not before: Wed 15 May 2024 09:44:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59613
IP address blocks: 185.158.208.0/24 maxlen: 24
185.158.209.0/24 maxlen: 24
185.158.210.0/24 maxlen: 24
185.158.211.0/24 maxlen: 24
195.234.112.0/24 maxlen: 24
195.234.113.0/24 maxlen: 24
195.234.114.0/24 maxlen: 24
195.234.115.0/24 maxlen: 24
2a02:2278:ff00::/40 maxlen: 56
Validation: Failed, certificate revoked on Wed 11 Sep 2024 17:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:a3:89:40:11:5a:c2:cf:0d:d9:54:73:36:f8:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: May 15 09:44:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4405c72a3adb941c80b40568f372927e1943923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:58:2e:1a:6b:6f:f0:e4:04:78:53:fc:b5:
6c:e3:3f:2b:7c:e4:93:48:51:6a:41:c4:a0:22:c6:
4f:5a:8f:f9:f4:db:a5:7d:1c:08:f9:91:b3:83:2e:
5d:e2:e4:14:4b:51:a4:85:28:03:d1:2f:21:2c:e4:
11:0b:ad:28:d9:6d:4d:9c:91:9b:39:f6:b8:a1:cc:
66:e2:37:14:25:b3:21:2b:fd:01:26:48:a6:1f:b1:
3d:0f:7a:c5:75:b5:80:5e:7d:85:3a:32:bc:1e:fe:
82:22:a1:4d:33:3a:e2:ee:86:69:cc:7a:8e:f9:be:
e8:94:15:03:c8:a8:6c:c6:70:e1:ad:a6:72:93:c3:
87:b8:6f:87:ab:66:50:3b:2b:0a:19:4a:e3:c0:84:
7a:a3:2f:8e:c5:c7:af:4b:7c:c4:ce:97:d3:39:9c:
c7:97:33:4d:a3:e0:cb:36:10:30:90:b9:b2:a3:3b:
be:6c:cd:05:d2:85:65:5f:3e:1d:6c:cb:2d:04:2e:
f9:d3:7b:13:6e:5c:62:c1:80:83:c6:81:c4:03:7a:
38:4c:9b:80:e9:0a:bc:bd:87:98:ec:ad:30:59:f9:
a0:d4:36:2f:39:32:33:76:93:30:f3:1b:d4:b3:27:
dd:ba:8e:77:99:56:92:e1:e9:db:e7:48:aa:db:f0:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:C7:2A:3A:DB:94:1C:80:B4:05:68:F3:72:92:7E:19:43:92:3F
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/RAXHKjrblByAtAVo83KSfhlDkj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.208.0/22
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
93:ff:f2:0e:18:2f:fe:d3:87:9b:34:ec:46:b5:6a:f9:f4:11:
94:2b:61:54:2c:e6:36:3c:c6:69:7e:dc:50:f0:53:0b:68:89:
b5:e5:83:7f:1d:12:d1:71:86:a7:45:7d:43:26:2f:dc:20:ff:
91:34:2c:ae:b3:53:f4:10:1c:51:25:b6:cd:7a:b1:b1:47:24:
ab:6d:b8:6f:a1:4d:fa:76:49:96:65:4c:96:09:ae:84:c0:3c:
6b:98:fe:91:75:66:3f:f0:47:fe:91:48:12:bf:d1:b0:07:21:
36:f5:0b:48:c6:0c:01:66:07:51:66:10:b7:ef:76:c8:e0:ad:
33:ea:b6:27:3d:8f:b9:22:35:1c:61:5d:7e:24:c0:50:95:d3:
9f:c2:be:8e:92:28:3e:63:ad:45:76:fd:84:97:e0:79:3c:fc:
51:2b:17:50:a3:f2:ba:8a:5d:43:dd:0e:28:fd:e4:7b:71:ac:
bd:9b:98:27:b8:c8:29:0b:c2:f0:28:73:a5:f1:a2:14:0f:7c:
7f:c9:d4:2a:91:65:84:19:c1:1a:ea:db:6b:ea:8e:fd:91:c8:
d9:f9:b4:0f:d5:7d:5a:71:ed:4a:bc:87:c8:4a:80:4f:bd:2c:
95:dd:0a:b4:7d:85:1d:e6:5a:47:d6:9c:40:fa:bf:44:b8:2a:
55:8d:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:51 2025 by rpki-client