Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/j2om8tigx15KSHgzQ5AywCDQKr0.roa
File: j2om8tigx15KSHgzQ5AywCDQKr0.roa (raw, json)
Hash identifier: 6562gc5YQ4zJUWm4W/RaxQvt0mSQfMx2NFM1zrSBmdc=
Subject key identifier: 8F:6A:26:F2:D8:A0:C7:5E:4A:48:78:33:43:90:32:C0:20:D0:2A:BD
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 0193FBEC2B8ECE7A55318DF0922673ABAB62
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/j2om8tigx15KSHgzQ5AywCDQKr0.roa
Signing time: Wed 25 Dec 2024 03:46:18 +0000
ROA not before: Wed 25 Dec 2024 03:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57724
IP address blocks: 45.10.240.0/22 maxlen: 32
45.10.240.0/24 maxlen: 24
45.10.241.0/24 maxlen: 24
45.10.242.0/24 maxlen: 24
45.10.243.0/24 maxlen: 24
91.215.40.0/24 maxlen: 32
91.215.41.0/24 maxlen: 24
91.215.42.0/24 maxlen: 24
91.215.43.0/24 maxlen: 24
95.129.232.0/24 maxlen: 32
95.129.233.0/24 maxlen: 32
95.129.234.0/24 maxlen: 32
95.129.235.0/24 maxlen: 24
185.129.100.0/24 maxlen: 24
185.129.101.0/24 maxlen: 24
185.129.102.0/24 maxlen: 24
185.129.103.0/24 maxlen: 24
185.178.208.0/24 maxlen: 24
185.178.209.0/24 maxlen: 24
185.178.210.0/24 maxlen: 24
2a0a:4180::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:ec:2b:8e:ce:7a:55:31:8d:f0:92:26:73:ab:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Dec 25 03:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f6a26f2d8a0c75e4a487833439032c020d02abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:f4:8f:c9:58:e8:6a:69:7b:e3:ed:d2:ac:
09:c3:4c:f2:e3:0d:7d:f5:35:e4:78:b0:1a:ce:f4:
f4:31:3f:5e:38:0d:74:cc:ab:35:56:8c:05:6e:ef:
7b:80:4a:49:2b:33:14:a8:0c:a5:96:22:d2:0b:45:
01:b8:e4:9f:5e:1a:7f:b0:99:3b:5b:1e:01:62:61:
3a:a4:4a:3c:06:26:40:7c:ed:64:42:5a:41:dd:fc:
25:9a:41:fe:6f:e1:a6:f4:40:33:2f:b1:1e:e0:6e:
9f:f8:77:ee:65:95:5b:d8:ee:cb:8c:cf:94:00:1a:
fa:fc:bb:23:28:2a:4c:72:97:6f:24:8e:f1:72:4f:
48:3b:8f:6b:ad:bc:90:7f:b3:1c:c0:de:ce:04:56:
ad:ce:ea:73:13:7c:e9:85:d4:4c:11:7e:8c:4c:5b:
b0:55:bb:9a:16:eb:84:98:e5:6b:38:b7:f4:5a:7d:
cb:94:b2:f7:44:02:04:63:17:13:2d:2c:ff:68:cc:
4a:10:88:da:6f:ac:38:08:a1:4b:25:a6:4d:6c:f5:
fa:08:98:3a:f5:8a:7b:90:c7:92:09:68:50:9e:4d:
23:34:d6:9c:e7:cd:b1:9a:23:72:31:d5:02:8e:66:
0f:3f:cb:da:e5:b8:43:e9:73:df:5f:77:70:d5:4f:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6A:26:F2:D8:A0:C7:5E:4A:48:78:33:43:90:32:C0:20:D0:2A:BD
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/j2om8tigx15KSHgzQ5AywCDQKr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.240.0/22
91.215.40.0/22
95.129.232.0/22
185.129.100.0/22
185.178.208.0-185.178.210.255
IPv6:
2a0a:4180::/48
Signature Algorithm: sha256WithRSAEncryption
79:5a:e0:1d:93:f7:21:4b:7d:ce:69:e7:e9:7d:10:e6:5d:11:
bf:8a:c3:e7:0c:c0:78:35:7c:35:be:e2:fb:eb:55:bd:19:62:
32:98:1d:a3:60:1d:53:a1:36:20:4d:89:cc:27:3a:b3:70:6d:
e3:a5:3c:f2:69:15:23:8e:00:f3:51:05:0e:f9:87:23:d8:b3:
1c:c8:cc:53:db:8c:79:d5:4b:9f:0f:84:66:c7:6b:6e:53:49:
60:fd:fa:5c:6c:80:13:b9:bb:a2:99:2a:77:17:96:95:4e:fc:
51:d7:40:f0:72:39:e8:a3:f9:52:a7:15:df:df:94:eb:b0:ec:
d6:59:f4:50:27:86:77:a2:2b:d7:4f:76:f0:2d:ee:fb:64:c4:
33:98:be:3e:f9:e4:c6:b2:25:29:f1:fd:80:87:21:db:76:a2:
4b:00:56:a1:f2:8a:a0:33:c6:5c:b5:dd:c0:51:73:ec:06:21:
3a:c2:4e:91:07:57:0e:6d:00:7b:54:3d:4e:4b:c2:42:2b:2a:
56:ca:c4:c2:fd:af:b9:ed:36:4a:89:6b:2e:6e:57:aa:6c:9b:
d1:02:9d:7a:f9:b0:5c:99:9e:63:0c:92:75:69:86:bc:6e:44:
03:3e:ff:3d:82:1f:d5:27:53:2c:d0:6e:a6:f5:92:69:43:9b:
b9:4f:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:59 2025 by rpki-client