Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/GExCf-ovI0pIcmOR-pVcOhLsTYw.roa
File: GExCf-ovI0pIcmOR-pVcOhLsTYw.roa (raw, json)
Hash identifier: sMOwmqXHbxDj8/PkNpXEprO3cfyH91K9L+qxOWLRZkI=
Subject key identifier: 18:4C:42:7F:EA:2F:23:4A:48:72:63:91:FA:95:5C:3A:12:EC:4D:8C
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 018CC26D0E939CC1242809FBF1436847B49E
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/GExCf-ovI0pIcmOR-pVcOhLsTYw.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44527
IP address blocks: 93.92.110.0/24 maxlen: 24
93.92.109.0/24 maxlen: 24
93.92.108.0/24 maxlen: 24
185.62.221.0/24 maxlen: 24
185.62.220.0/22 maxlen: 22
185.62.220.0/24 maxlen: 24
185.62.222.0/24 maxlen: 24
93.92.104.0/22 maxlen: 22
93.92.104.0/21 maxlen: 21
2a04:8040::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 05 Dec 2024 19:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0e:93:9c:c1:24:28:09:fb:f1:43:68:47:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=184c427fea2f234a48726391fa955c3a12ec4d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:27:91:f8:94:6a:8e:22:f5:a8:68:90:67:
6a:99:9d:ab:2e:8b:dd:c3:26:0c:63:6c:92:59:f9:
7a:ac:98:39:b8:03:40:a5:19:5d:da:67:72:5e:2a:
c6:00:0e:22:75:14:44:04:da:ca:d8:8a:9a:78:57:
c1:99:c5:8f:c3:74:41:9b:6e:92:f2:98:fc:23:b4:
4c:c4:00:52:47:3c:3a:0f:24:a2:0e:b8:9a:11:86:
35:5f:a8:57:ae:2a:9d:1f:56:c7:42:53:af:7b:64:
11:60:3b:24:91:ab:8a:95:1e:bb:b6:68:6b:e4:05:
96:90:1b:65:70:2e:82:27:a1:bb:3d:af:04:6b:94:
71:78:92:d8:d9:78:c3:22:51:64:a7:cd:20:2c:c2:
d2:a8:da:76:01:61:29:4d:4e:00:c0:3b:15:a3:94:
31:cb:04:90:84:14:a8:04:56:63:b6:e4:29:c3:5b:
b0:35:78:49:7b:32:a9:ee:38:59:53:01:90:59:27:
61:10:9d:6b:b7:d4:9a:21:d9:0d:6f:3a:ee:8c:93:
0c:ba:0c:85:5e:66:f2:b2:b5:e4:c1:ee:a3:d6:64:
27:75:e0:5b:4f:e4:70:ea:5c:b8:4b:d1:1b:55:3a:
cd:e3:97:f1:28:83:d1:c3:6f:4c:b8:91:0a:e8:cc:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4C:42:7F:EA:2F:23:4A:48:72:63:91:FA:95:5C:3A:12:EC:4D:8C
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/GExCf-ovI0pIcmOR-pVcOhLsTYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.104.0/21
185.62.220.0/22
IPv6:
2a04:8040::/29
Signature Algorithm: sha256WithRSAEncryption
6e:43:3d:49:0e:b1:17:0c:1e:36:93:ba:96:73:2d:59:6d:77:
76:f7:7e:dd:19:a2:7f:93:7f:81:79:97:88:8a:71:df:de:23:
ea:34:73:9c:12:af:fb:c9:5e:66:a1:e5:13:90:fc:e0:b0:d3:
93:05:b9:8f:f2:fb:df:fb:eb:0f:d6:7d:e5:84:da:e8:f0:48:
ff:fa:49:ae:0b:f7:86:8e:32:c7:a7:18:36:4f:ef:6a:76:88:
d0:0c:5a:ea:8e:be:66:b6:e0:5e:95:38:53:1e:55:78:45:95:
57:a7:d1:8e:9b:11:5d:27:b3:3c:de:8d:98:cb:4d:95:91:84:
df:bf:c2:5f:c7:99:d7:31:48:33:16:45:48:29:52:42:01:dc:
7b:63:86:c1:b0:9a:a3:fa:8b:39:59:14:8c:24:8b:86:7b:0b:
4f:82:26:25:cf:08:54:e1:73:90:53:4b:44:ec:50:28:d5:20:
69:b3:d1:dd:f2:70:f1:56:e1:a7:ba:c3:ff:88:67:fe:92:09:
4d:d1:29:23:f9:ac:6d:fe:0c:21:1e:5b:aa:03:17:ff:1c:df:
33:6d:c9:8e:3f:1d:0c:ef:bd:e4:a9:d4:ce:fc:54:97:1c:5e:
5a:d1:ba:f2:77:36:89:0d:05:27:4d:ab:67:87:93:9a:32:49:
ba:45:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:04 2025 by rpki-client