Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/DnfHt6j2f0PrF6LJtKJ_WoUHZ2Q.roa
File: DnfHt6j2f0PrF6LJtKJ_WoUHZ2Q.roa (raw, json)
Hash identifier: w04f+RPJR1NWMcWgkq2YYxY1vT35oooeL1bA0+NtyZQ=
Subject key identifier: 0E:77:C7:B7:A8:F6:7F:43:EB:17:A2:C9:B4:A2:7F:5A:85:07:67:64
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018CC42483EE56C54998A36EEA191219DBF4
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/DnfHt6j2f0PrF6LJtKJ_WoUHZ2Q.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47376
IP address blocks: 195.238.247.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.220.0/22 maxlen: 22
103.215.220.0/24 maxlen: 24
185.221.239.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
2a05:63c0::/30 maxlen: 30
2a05:63c0::/29 maxlen: 29
2a05:63c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Mar 2024 09:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:83:ee:56:c5:49:98:a3:6e:ea:19:12:19:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e77c7b7a8f67f43eb17a2c9b4a27f5a85076764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:06:3d:80:52:c3:41:ad:74:7a:bd:34:5b:
63:cc:7c:72:d9:e3:dc:15:ea:81:94:39:3a:6a:3c:
a6:65:21:a8:3c:17:8c:65:cf:b2:50:7c:3f:c3:a2:
03:f3:91:7b:79:bc:6e:fe:26:bb:70:19:6c:ed:d5:
d1:fa:25:35:fc:91:40:26:b8:a3:5d:9d:24:83:03:
7f:81:99:ab:80:74:5d:2f:7a:2e:64:7b:c5:af:53:
9f:f7:e1:82:db:36:08:1b:02:a0:d0:57:05:99:dd:
72:a9:ad:3e:82:53:31:6e:35:2a:56:4c:9e:3a:04:
c7:cf:c7:45:a8:2a:b0:29:e0:a3:34:1f:5a:d8:1d:
c6:e2:8e:78:17:54:a5:f5:65:8b:61:dd:5d:44:27:
0d:22:6b:72:2e:59:de:d6:18:67:55:96:fd:7c:5d:
aa:d4:2b:9b:61:0b:ed:97:4c:22:a9:e4:f7:08:ac:
bf:7a:f9:c5:f4:9a:7c:a9:af:67:8e:5b:1c:fe:5d:
03:bf:c8:6f:c4:a5:8c:34:ee:10:5a:7c:4c:de:65:
b2:4f:b7:8e:db:33:e9:c8:6d:12:c9:ef:e7:ef:c1:
4a:da:92:03:24:ee:f4:c8:22:e9:32:f7:d4:a7:48:
84:aa:89:7d:5e:07:65:4d:07:9d:ec:3e:37:61:42:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:C7:B7:A8:F6:7F:43:EB:17:A2:C9:B4:A2:7F:5A:85:07:67:64
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/DnfHt6j2f0PrF6LJtKJ_WoUHZ2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
185.221.239.0/24
195.28.11.0/24
195.238.231.0/24
195.238.247.0/24
IPv6:
2a05:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:fb:c2:3a:92:21:50:b4:7b:a9:23:65:1e:2a:29:11:00:cb:
34:07:35:b9:89:40:a3:3b:44:eb:aa:99:f7:ce:ae:fa:7d:5b:
0c:d2:f2:27:8d:26:d4:01:2b:4f:6c:dd:3b:00:58:90:27:90:
5a:a2:8e:55:9c:34:4c:6e:e6:6c:bd:77:35:87:69:5c:d4:85:
31:a3:64:21:b1:f9:c3:d5:c8:ef:ed:c6:67:25:be:cf:fb:92:
50:ed:3c:5a:f6:4d:29:1d:d9:17:7f:e3:b0:dc:84:ca:bb:13:
bd:8f:d5:f8:0d:45:12:27:9f:c0:3f:ba:05:cb:9d:5f:9a:2b:
51:69:ac:ad:0f:87:2b:b1:91:2f:8b:e4:96:4d:95:51:b2:af:
6f:3f:4e:09:8e:63:95:a2:25:d9:dd:79:76:6d:19:76:80:c2:
db:ca:2f:89:31:06:e0:4d:55:1e:d5:ad:79:b8:70:10:44:37:
a6:a9:1a:bd:d2:b2:53:43:78:3b:cc:cd:f4:06:db:24:f9:75:
17:a0:ff:99:39:ea:5a:c9:7f:b2:06:64:a6:3c:3f:e3:93:95:
1e:4c:92:7c:cb:28:e4:3e:15:82:19:af:e0:24:4c:59:66:b8:
39:34:fd:ec:a5:4e:f9:4e:9d:6c:a4:bd:be:83:21:fe:4f:c4:
fa:34:c0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:20 2025 by rpki-client