Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/T9sK9Mvt--GzbL2GfwxFvOSy1N4.roa
File: T9sK9Mvt--GzbL2GfwxFvOSy1N4.roa (raw, json)
Hash identifier: Y1ECemc8o0Gza7WQNVFEHnxMH4iKDnWiDgkSRZz783w=
Subject key identifier: 4F:DB:0A:F4:CB:ED:FB:E1:B3:6C:BD:86:7F:0C:45:BC:E4:B2:D4:DE
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 018CC5DCFB53067F6912292CB2B1944B6CA5
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/T9sK9Mvt--GzbL2GfwxFvOSy1N4.roa
Signing time: Mon 01 Jan 2024 16:30:42 +0000
ROA not before: Mon 01 Jan 2024 16:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49952
IP address blocks: 185.197.209.0/24 maxlen: 24
185.197.208.0/24 maxlen: 24
91.213.224.0/24 maxlen: 24
2a00:e4a0:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:fb:53:06:7f:69:12:29:2c:b2:b1:94:4b:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Jan 1 16:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fdb0af4cbedfbe1b36cbd867f0c45bce4b2d4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:eb:38:13:43:f3:c6:cf:95:b7:d9:f4:ef:
bd:fb:ba:99:5e:02:80:bf:5d:e6:d7:02:ee:88:12:
10:56:94:a0:44:86:aa:21:2f:7b:7a:e0:8c:79:36:
ce:80:54:c0:69:c2:7e:52:78:d9:63:fb:17:23:22:
a5:fb:8e:f0:50:3e:88:2d:63:56:36:94:08:d9:45:
c7:8a:66:e7:69:32:c8:ec:78:ee:42:bd:ec:d6:2e:
c5:34:ab:9c:42:36:41:9c:96:d3:de:df:d0:6b:f1:
3f:bb:4a:c5:71:de:d9:09:16:85:a3:23:f5:bf:e4:
91:fd:4a:e3:b2:24:25:d4:21:1f:61:a1:4e:c3:a9:
f5:72:86:34:cc:18:53:15:b6:e5:57:93:11:18:e4:
16:b0:ac:ce:2a:1c:78:f8:db:d1:e5:57:87:90:ce:
70:b5:dc:15:73:2f:70:22:69:df:00:2c:8c:2e:7d:
5f:92:e6:ac:b3:51:e1:ed:35:1c:30:ce:77:77:dd:
1c:b7:82:7b:a4:6e:b0:91:c8:c8:0b:8b:8b:e1:ca:
74:50:a7:fa:51:ea:c3:30:eb:cf:40:1d:4c:51:a0:
26:fd:be:78:83:ad:ae:47:28:aa:06:3f:2e:53:e5:
d9:fc:36:8c:c8:ed:f3:14:07:39:17:d7:22:ce:70:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:0A:F4:CB:ED:FB:E1:B3:6C:BD:86:7F:0C:45:BC:E4:B2:D4:DE
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/T9sK9Mvt--GzbL2GfwxFvOSy1N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.224.0/24
185.197.208.0/23
IPv6:
2a00:e4a0:100::/40
Signature Algorithm: sha256WithRSAEncryption
70:e9:c9:2f:f9:27:4d:73:72:27:2e:db:a5:4f:05:ef:3f:0f:
3b:4b:d2:20:04:54:d5:40:cb:22:34:12:a6:9b:b5:66:77:86:
d5:55:be:d6:8a:3d:29:6c:ae:c1:63:3e:ac:76:38:61:a8:af:
f9:fb:c1:7b:b2:72:fa:ef:bf:79:1f:3e:79:02:bb:9a:36:64:
8c:90:49:4d:f3:8b:01:f6:4b:f4:a3:4d:17:73:92:aa:58:b2:
0b:a2:a1:3e:7f:62:8a:32:77:49:fa:5e:33:4c:0f:65:0d:07:
a6:f8:4e:e6:7d:0c:e6:d3:d3:ef:3f:ea:bc:b1:13:5f:2f:5c:
aa:91:f6:3f:d5:4d:63:0b:4c:23:80:fd:2c:d6:1f:68:89:c1:
d6:0a:f4:56:ae:cb:91:27:5b:e5:73:ea:c3:5c:e3:38:c9:e7:
26:eb:0c:9e:c3:33:a9:98:60:e5:3e:cf:db:51:91:07:f2:b3:
61:82:15:6c:58:80:0a:21:54:ec:93:cf:ee:dc:28:d7:46:5d:
91:0d:8d:97:70:c4:de:6c:51:c1:5e:fe:f2:04:2b:dc:17:48:
16:d2:ac:42:6b:f1:f7:23:51:bf:36:dc:4b:8f:5f:27:be:aa:
4a:a9:d8:e4:90:2a:0e:58:05:b8:ef:df:5f:a3:77:c7:75:b6:
89:bd:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:01 2025 by rpki-client