Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/V17m6FA2HocrHF-q5LJRyO-YWc8.roa
File: V17m6FA2HocrHF-q5LJRyO-YWc8.roa (raw, json)
Hash identifier: Z5KYZQW6w2lurtyd93T4W15ssPPYRXImNBWC9z17sEM=
Subject key identifier: 57:5E:E6:E8:50:36:1E:87:2B:1C:5F:AA:E4:B2:51:C8:EF:98:59:CF
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01926B42CAD801D7256DC695E495967F8D65
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/V17m6FA2HocrHF-q5LJRyO-YWc8.roa
Signing time: Tue 08 Oct 2024 08:33:12 +0000
ROA not before: Tue 08 Oct 2024 08:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47376
IP address blocks: 103.215.220.0/22 maxlen: 22
103.215.220.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
185.221.239.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
195.238.247.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
2a05:63c0::/30 maxlen: 30
2a05:63c0::/48 maxlen: 48
2a0f:c040::/29 maxlen: 29
2a10:ef04:1001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:42:ca:d8:01:d7:25:6d:c6:95:e4:95:96:7f:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Oct 8 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=575ee6e850361e872b1c5faae4b251c8ef9859cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:1d:06:63:fe:6b:7c:fe:84:08:46:ad:70:
1c:63:87:c5:64:28:c7:46:ec:d4:a4:e8:6a:fe:21:
67:50:c5:d3:af:14:e9:0b:a2:05:1b:64:25:bf:7d:
fa:b9:ed:4d:7e:5f:75:49:64:b5:5d:23:8b:05:31:
c7:d2:43:10:b2:1c:ef:8a:92:f5:a6:e0:fc:2b:66:
8e:c4:af:37:5d:99:e7:a0:45:11:c3:83:ed:94:0d:
2a:2b:67:23:2d:1d:10:98:16:1d:7e:1a:47:f7:28:
0f:bc:53:d1:ff:de:f5:fd:dd:b3:ed:9b:48:39:fb:
55:dd:43:2a:27:58:c2:f3:1d:5a:eb:ee:16:ed:a1:
4d:34:e2:92:68:6a:cc:cc:11:53:2d:d3:3a:23:c8:
ab:1c:e7:34:b2:9d:41:85:24:9c:93:a6:12:d1:b0:
ca:83:f4:b3:64:d5:31:01:71:f2:f1:4d:ef:ef:c6:
b9:88:64:c7:0f:2e:25:53:ad:d2:ac:f7:68:7a:ee:
ae:28:dd:ac:9d:48:36:51:84:4e:00:e7:35:7a:35:
4b:96:b5:10:a9:75:24:31:d2:87:13:d7:0e:04:6b:
d6:2c:8a:bc:98:25:d7:4c:fe:83:cd:d1:c0:55:57:
a3:b9:c9:f2:57:7f:b4:b3:20:af:60:e9:59:58:68:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5E:E6:E8:50:36:1E:87:2B:1C:5F:AA:E4:B2:51:C8:EF:98:59:CF
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/V17m6FA2HocrHF-q5LJRyO-YWc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
185.221.239.0/24
195.28.11.0/24
195.238.231.0/24
195.238.240.0/24
195.238.247.0/24
IPv6:
2a05:63c0::/29
2a0f:c040::/29
2a10:ef04:1001::/48
Signature Algorithm: sha256WithRSAEncryption
4b:a6:21:0d:71:f2:35:36:cb:32:94:2e:28:6f:93:1c:66:e7:
3c:a3:92:f8:fc:19:bc:e3:11:da:d4:84:5a:72:1f:0a:f9:91:
bc:d0:9a:63:c7:a6:db:23:82:4e:bb:f7:4d:9a:ca:6c:f8:0a:
0a:d5:6f:ee:f0:63:b5:ef:c8:67:28:57:d1:b5:a6:43:93:78:
5b:21:9d:f1:25:fd:1f:67:e2:ed:47:3d:d6:ab:dc:31:7d:d7:
9d:72:5b:67:b6:bb:54:ce:87:5e:08:88:2e:20:35:b1:6f:9f:
e3:45:a0:f1:c0:21:4b:0e:e9:8b:a3:6d:ef:fe:80:06:d7:2e:
c4:03:bb:b2:8f:66:47:93:04:97:21:e1:9d:55:e1:25:5a:a9:
0a:66:f0:97:ce:e6:05:0b:5e:df:31:87:17:bb:26:65:a7:03:
e6:66:f5:2c:da:f0:78:40:36:91:4a:3d:a8:0e:79:ab:14:83:
78:0d:ec:d2:22:47:81:03:45:c8:b7:15:7d:48:01:55:7d:3d:
60:4a:c1:13:1b:53:d9:52:e8:14:8d:30:30:1a:6f:73:96:1e:
c8:63:dc:de:1d:51:7d:54:cf:10:47:87:eb:02:aa:27:fc:c3:
ad:78:2d:a0:32:48:2d:52:ff:36:61:b0:f1:45:d0:1f:52:38:
07:54:8b:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:39 2025 by rpki-client