Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/ccn65hk9-qnFd_H_lFegzUu2HAg.roa
File: ccn65hk9-qnFd_H_lFegzUu2HAg.roa (raw, json)
Hash identifier: dYS3Uy8i/n54D+tnuYSAHU4iCy/98GFGOATb54O/s2w=
Subject key identifier: 71:C9:FA:E6:19:3D:FA:A9:C5:77:F1:FF:94:57:A0:CD:4B:B6:1C:08
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 018CC72749410DB4BB8037F28E5528AF8204
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/ccn65hk9-qnFd_H_lFegzUu2HAg.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 193.134.216.0/21 maxlen: 21
185.144.36.0/22 maxlen: 22
2a07:3e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:49:41:0d:b4:bb:80:37:f2:8e:55:28:af:82:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71c9fae6193dfaa9c577f1ff9457a0cd4bb61c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:a0:df:5c:79:7b:c7:40:72:9d:4b:d5:ad:
c4:78:a1:c5:b5:15:15:a8:11:b4:32:d8:57:08:55:
89:81:52:f3:6b:07:8c:2d:93:8d:d9:3c:40:1d:d0:
60:4d:4e:31:66:c6:af:cd:81:25:23:be:d7:e4:e8:
ff:d3:9f:ed:d1:41:53:d7:24:77:35:f9:d8:f7:cf:
51:f8:5f:16:77:60:ce:08:60:14:21:2f:5a:a0:98:
0b:70:ca:6e:e0:69:d0:6f:3b:da:5f:27:0f:cd:4d:
ff:8e:58:98:dd:22:fd:b6:2f:0c:f7:ed:89:6b:bf:
d9:d7:27:97:86:be:06:ea:44:9d:38:03:cd:78:3e:
56:97:68:f5:a7:5c:e3:f5:b5:ef:ca:bb:15:a9:91:
5b:2b:e9:0b:a2:86:7c:df:a6:f5:79:52:cd:1a:7d:
88:a1:82:7b:de:1e:91:5d:67:dd:ba:bb:cd:86:2b:
d1:6a:85:d6:66:54:fe:ac:c1:93:cd:df:91:e4:94:
16:c9:59:0e:d7:5a:78:70:04:83:56:86:ad:bd:87:
68:f9:44:8a:92:bd:e1:46:dc:f7:ca:f8:6d:00:03:
dd:77:03:39:8b:4f:de:f3:c2:b6:47:6e:39:5c:95:
bb:5b:20:02:65:28:95:3c:d3:c3:f4:b8:ec:32:ae:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:FA:E6:19:3D:FA:A9:C5:77:F1:FF:94:57:A0:CD:4B:B6:1C:08
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/ccn65hk9-qnFd_H_lFegzUu2HAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.36.0/22
193.134.216.0/21
IPv6:
2a07:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
a3:ff:1d:2c:02:95:bf:e4:ee:55:72:b6:b8:a6:95:13:36:60:
b3:b3:08:75:ba:ea:f4:90:3c:76:c9:c0:67:67:ec:18:45:de:
80:97:3a:fd:31:30:02:aa:b4:a9:0a:60:1f:36:06:b3:43:7a:
ec:b9:02:56:52:6e:1c:5a:31:cb:14:94:e2:6e:93:cf:3c:8a:
dd:2f:73:9f:36:a2:e3:e5:a2:ed:70:be:69:39:8f:c5:03:a6:
9a:3a:77:cc:66:4f:d7:74:e7:fa:4b:fa:0b:de:c7:93:dd:25:
c4:bb:c9:93:a3:0c:c1:29:5b:cb:90:06:73:68:86:ab:49:9b:
e8:3f:5a:05:67:a1:b4:a9:4c:ac:a9:65:11:1f:82:77:bb:40:
f9:42:ea:95:3e:94:a6:11:da:c4:7a:78:21:f9:4f:d2:65:c9:
e3:c5:97:17:88:18:7f:be:61:d5:73:21:d9:a0:4e:a2:9b:e2:
63:f7:aa:c6:18:d0:1d:0f:3a:56:b3:d2:18:a8:33:5d:f9:cd:
b8:e9:fe:f0:22:4d:9e:ca:32:a6:f0:2c:bf:6c:c9:98:13:f6:
16:f6:fd:51:bb:69:a5:65:c6:d6:32:b2:2d:ac:61:cf:b3:c9:
5b:b0:b2:ee:fb:5a:40:0c:36:10:e7:4a:10:a3:6d:42:d5:2f:
6c:ad:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:25 2025 by rpki-client