Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/j0cIbCEAO2nWRsixNE-5Sy-PH1U.roa
File: j0cIbCEAO2nWRsixNE-5Sy-PH1U.roa (raw, json)
Hash identifier: hXDDFp9tqTrhE8bpgDNtFUaKqnRL27W7IiMywu0HlnU=
Subject key identifier: 8F:47:08:6C:21:00:3B:69:D6:46:C8:B1:34:4F:B9:4B:2F:8F:1F:55
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018FDDEED46B7EAE3A0D9181F6DB0150F74C
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/j0cIbCEAO2nWRsixNE-5Sy-PH1U.roa
Signing time: Mon 03 Jun 2024 11:49:27 +0000
ROA not before: Mon 03 Jun 2024 11:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 2.248.0.0/14 maxlen: 14
2.252.0.0/15 maxlen: 15
2.254.0.0/16 maxlen: 16
2.255.0.0/17 maxlen: 17
2.255.128.0/18 maxlen: 18
2.255.190.0/24 maxlen: 24
2.255.191.0/24 maxlen: 24
62.20.0.0/16 maxlen: 16
77.110.0.0/18 maxlen: 18
78.64.0.0/12 maxlen: 12
81.224.0.0/12 maxlen: 12
81.228.4.0/23 maxlen: 23
81.228.4.0/24 maxlen: 24
81.228.5.0/24 maxlen: 24
82.214.0.0/18 maxlen: 18
90.224.0.0/12 maxlen: 12
95.109.0.0/17 maxlen: 17
95.192.0.0/12 maxlen: 12
185.103.208.0/24 maxlen: 24
192.16.152.0/23 maxlen: 23
192.16.153.0/24 maxlen: 24
192.150.58.0/23 maxlen: 23
192.150.60.0/22 maxlen: 22
192.150.64.0/22 maxlen: 22
192.150.68.0/23 maxlen: 23
192.150.78.0/23 maxlen: 23
192.150.80.0/23 maxlen: 23
193.44.0.0/15 maxlen: 15
194.16.0.0/15 maxlen: 15
194.18.0.0/16 maxlen: 16
194.22.0.0/15 maxlen: 15
194.218.0.0/16 maxlen: 16
194.236.0.0/15 maxlen: 15
195.67.0.0/16 maxlen: 16
195.198.0.0/16 maxlen: 16
195.252.32.0/19 maxlen: 19
212.28.192.0/19 maxlen: 19
212.181.0.0/16 maxlen: 16
213.64.0.0/14 maxlen: 14
217.208.0.0/13 maxlen: 13
Validation: Failed, certificate revoked on Tue 04 Jun 2024 06:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:ee:d4:6b:7e:ae:3a:0d:91:81:f6:db:01:50:f7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jun 3 11:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f47086c21003b69d646c8b1344fb94b2f8f1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:55:7f:97:f2:86:29:a5:72:3c:4e:ec:3e:
62:94:7e:44:24:c2:c0:3e:d9:63:b0:f5:e7:87:5b:
9f:b3:1a:31:cb:38:71:ff:b1:6e:ce:3a:60:a6:b0:
f3:ae:4a:08:2c:d5:44:6d:1f:6b:99:e8:8e:61:c0:
53:6c:87:be:76:8e:bb:de:88:96:75:5b:5a:a9:6b:
4b:bc:8c:f0:22:c6:b9:ce:0f:e7:07:43:5b:aa:b0:
e1:fa:ba:41:6a:26:fc:be:8e:ee:9c:9c:5b:0e:ae:
22:c3:53:b0:42:b1:a3:8a:77:74:ee:da:dc:a7:55:
fb:e0:cf:25:76:f0:a3:b0:db:89:cc:fd:fa:f4:d7:
f7:59:f3:a7:ea:60:76:3a:da:ce:26:86:83:34:16:
c0:18:3b:7f:ab:1a:76:c0:e3:5e:69:d3:61:9c:be:
e6:9b:37:e3:d4:af:9b:ce:a2:38:61:f2:78:a0:3b:
4e:c6:98:e2:59:46:49:8c:7b:d0:a7:ac:06:86:3a:
c1:8e:c7:f7:4f:ba:a3:32:0f:cb:62:a1:7d:32:2d:
3a:a9:d3:db:e3:b9:8f:4f:02:e1:c6:2d:01:fa:bb:
7f:04:0a:fd:64:28:f1:29:64:71:ef:7b:52:2a:0f:
af:4a:00:08:d1:e4:61:e3:f4:c7:37:23:13:df:aa:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:08:6C:21:00:3B:69:D6:46:C8:B1:34:4F:B9:4B:2F:8F:1F:55
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/j0cIbCEAO2nWRsixNE-5Sy-PH1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.248.0.0-2.255.191.255
62.20.0.0/16
77.110.0.0/18
78.64.0.0/12
81.224.0.0/12
82.214.0.0/18
90.224.0.0/12
95.109.0.0/17
95.192.0.0/12
185.103.208.0/24
192.16.152.0/23
192.150.58.0-192.150.69.255
192.150.78.0-192.150.81.255
193.44.0.0/15
194.16.0.0-194.18.255.255
194.22.0.0/15
194.218.0.0/16
194.236.0.0/15
195.67.0.0/16
195.198.0.0/16
195.252.32.0/19
212.28.192.0/19
212.181.0.0/16
213.64.0.0/14
217.208.0.0/13
Signature Algorithm: sha256WithRSAEncryption
6c:3c:e0:84:e1:74:c7:14:22:d8:2a:e6:05:17:ce:1b:43:c9:
67:61:4a:7e:0f:41:88:e1:34:f8:a8:eb:ca:e7:81:a9:d5:a7:
c8:84:83:22:fa:31:65:ef:04:4b:c4:26:9a:f6:b9:70:52:45:
4a:d6:a2:e3:93:98:16:44:51:9c:ee:34:93:0f:a6:8d:59:db:
b5:c3:8d:d8:13:24:e6:f0:97:13:32:8b:91:d0:f6:21:da:03:
6b:dd:5c:71:ae:fe:d2:53:2a:16:35:c6:94:8b:df:c4:14:bf:
37:34:32:f1:f8:be:91:04:03:ca:18:51:29:4c:f1:45:af:12:
a4:9b:8b:1f:2e:60:2c:a9:26:d9:89:69:ba:0e:06:95:7b:99:
4a:96:d3:f9:44:43:b7:7b:6a:4b:08:20:8e:36:bf:59:50:70:
06:68:c0:64:dc:35:15:df:e6:d8:08:14:e2:97:ea:8d:30:46:
dc:5a:b4:58:80:17:01:f3:af:f4:00:05:7d:97:b0:5d:4c:17:
71:a8:5e:43:1a:bd:60:06:e9:8a:9e:d4:b2:9a:b5:bc:6e:84:
06:e1:a3:dd:1e:de:36:32:e9:07:54:61:94:70:62:db:44:c0:
bc:7b:2b:84:ad:c2:67:dc:ac:eb:63:d2:05:a6:bd:83:8c:e9:
e0:ed:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:29 2025 by rpki-client