Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/y6zawcFwbL-xs6VoHJJscetYGh4.roa
File: y6zawcFwbL-xs6VoHJJscetYGh4.roa (raw, json)
Hash identifier: wBJeSaCCXSg6E0vu8tE4aA3DYm8SDRD1im1ggIkONX4=
Subject key identifier: CB:AC:DA:C1:C1:70:6C:BF:B1:B3:A5:68:1C:92:6C:71:EB:58:1A:1E
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 018CC56E465BF33CE40FC1B90EDC4F8108C5
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/y6zawcFwbL-xs6VoHJJscetYGh4.roa
Signing time: Mon 01 Jan 2024 14:29:47 +0000
ROA not before: Mon 01 Jan 2024 14:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51373
IP address blocks: 185.44.217.0/24 maxlen: 24
185.44.216.0/24 maxlen: 24
185.44.216.0/22 maxlen: 22
185.44.219.0/24 maxlen: 24
185.44.218.0/24 maxlen: 24
185.80.59.0/24 maxlen: 24
193.33.8.0/23 maxlen: 23
94.24.79.0/24 maxlen: 24
91.218.159.0/24 maxlen: 24
91.218.158.0/24 maxlen: 24
91.218.157.0/24 maxlen: 24
91.218.156.0/24 maxlen: 24
91.218.156.0/22 maxlen: 22
94.24.28.0/24 maxlen: 24
178.251.120.0/24 maxlen: 24
2a04:9a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:46:5b:f3:3c:e4:0f:c1:b9:0e:dc:4f:81:08:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Jan 1 14:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbacdac1c1706cbfb1b3a5681c926c71eb581a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:eb:6c:3e:3a:3b:3e:c9:44:52:cb:2c:0e:
c5:ea:42:2a:d7:df:fc:84:36:eb:77:54:dc:79:98:
93:48:d9:80:37:20:29:c0:38:8d:8e:ed:08:24:6f:
a0:8e:79:f7:c5:a6:f3:d3:49:ab:1e:e7:9a:3a:68:
5c:eb:23:55:7a:aa:b2:62:3f:6b:04:b5:a5:18:06:
63:ea:07:d8:7d:01:3b:51:06:43:52:0e:4b:ef:1b:
03:87:db:b0:e5:8a:37:a0:8a:07:91:a6:a1:9a:4a:
5b:10:36:64:6e:f7:1c:c4:4c:77:84:8e:ed:a8:8f:
0c:db:36:6e:08:26:01:d9:b1:35:a1:7a:98:d0:da:
32:bd:43:c6:0f:8c:74:79:94:ad:77:dc:5a:40:bf:
d2:9e:63:d2:99:13:3c:02:f5:a0:da:cc:00:b1:82:
53:69:5b:7d:4b:98:fe:e2:ec:77:88:6b:25:49:63:
17:fa:fa:02:a7:f6:bf:bf:14:f2:0c:ba:8a:0e:ff:
3e:2b:1a:56:4a:21:49:93:2c:60:57:e1:57:16:32:
38:8f:d7:45:4c:cf:61:00:57:7b:aa:e5:df:90:28:
66:b0:44:c6:a7:ba:38:8f:d8:f9:4f:dc:5a:54:ce:
6b:2c:c1:82:8a:3f:22:10:c3:f2:02:85:b9:c5:d8:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:DA:C1:C1:70:6C:BF:B1:B3:A5:68:1C:92:6C:71:EB:58:1A:1E
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/y6zawcFwbL-xs6VoHJJscetYGh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.156.0/22
94.24.28.0/24
94.24.79.0/24
178.251.120.0/24
185.44.216.0/22
185.80.59.0/24
193.33.8.0/23
IPv6:
2a04:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:d9:62:e8:ae:fc:ca:ad:6b:b1:09:6c:40:9f:ee:a4:9b:1d:
e9:2c:0f:96:f6:20:0f:0c:d1:64:e9:ea:df:d9:37:19:59:a7:
58:ed:35:38:88:9d:78:9c:ef:a9:4a:d8:03:da:5f:14:4c:2d:
71:0e:43:9e:55:a8:f3:f8:09:39:66:eb:5e:70:2e:1a:24:d3:
97:ca:47:94:04:6e:2a:f0:42:9d:fd:83:55:98:25:c3:60:2e:
b1:55:82:be:91:50:05:4c:0c:26:a5:4f:cf:0b:d0:00:c4:51:
56:39:28:4e:a5:c8:25:91:aa:87:ce:5e:1f:4f:65:e3:45:d4:
96:1d:ae:fd:a0:4d:42:4c:cf:55:ce:6e:ac:30:0f:f9:9a:1c:
54:a3:24:2c:aa:01:5f:2a:97:12:fb:7b:4c:b7:44:d6:43:47:
37:c3:77:e0:b9:4f:35:25:c3:5f:d7:7a:96:ee:09:0b:c5:21:
67:6a:38:04:b7:f3:1a:e2:23:85:26:7a:23:1b:41:7a:5b:ff:
63:f4:54:fe:bf:bd:59:b9:f9:bb:9a:86:53:a4:2c:25:5d:2b:
ec:25:f8:97:44:e4:2e:1f:c4:66:f1:19:5c:d4:50:97:3c:c4:
e0:6f:8b:fb:ce:32:5c:ad:57:f4:7b:b3:30:93:75:71:a5:63:
45:40:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:19 2025 by rpki-client