Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/0NHFzc6NiJAig2l2Hz8mlh0Hy1Y.roa
File: 0NHFzc6NiJAig2l2Hz8mlh0Hy1Y.roa (raw, json)
Hash identifier: Dfc72RIW/n297fFj0HaRDAk/bRmf2VIZ1fpuKcwa/8Q=
Subject key identifier: D0:D1:C5:CD:CE:8D:88:90:22:83:69:76:1F:3F:26:96:1D:07:CB:56
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 018CC5001394E3C65B96695BD172FE4D3D31
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/0NHFzc6NiJAig2l2Hz8mlh0Hy1Y.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205624
IP address blocks: 212.225.227.0/24 maxlen: 24
171.33.235.0/24 maxlen: 24
91.151.101.0/24 maxlen: 24
212.225.244.0/24 maxlen: 24
89.39.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:13:94:e3:c6:5b:96:69:5b:d1:72:fe:4d:3d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d1c5cdce8d8890228369761f3f26961d07cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:00:fc:b2:7c:81:0a:1b:74:a6:a1:25:0e:
50:53:2c:22:8f:65:a2:e1:db:f7:ef:62:57:e5:22:
57:13:78:8b:16:f0:bc:a0:09:18:fc:d3:ae:98:16:
b5:71:7a:08:f4:4a:dd:79:5e:29:25:fa:13:24:32:
5f:35:db:28:05:89:9a:b5:b7:6b:67:66:8d:07:ea:
64:d6:6f:35:1f:6f:ae:10:fc:1a:b9:cf:f6:1e:4c:
f1:b9:f3:c5:e2:7a:b4:e4:dd:38:18:d6:0e:76:90:
d8:1d:19:38:f8:3b:91:27:49:66:f5:ae:3f:c1:d8:
11:fa:4f:3f:76:63:ac:cb:16:2a:93:11:60:3a:47:
23:bf:42:67:d8:97:2d:ff:ed:0f:c8:20:00:23:5e:
56:8a:e8:11:d3:ce:96:0c:5e:17:09:08:b3:af:62:
b6:0b:86:40:b2:74:ad:0a:f2:02:54:06:83:39:2d:
6f:14:02:4b:ed:f0:d2:28:62:5d:c8:b6:a4:de:29:
8f:d5:6d:54:21:8f:08:28:a7:e8:e2:79:d4:30:b7:
02:98:d7:f0:c0:e0:99:81:63:1b:1d:a8:b6:ec:2e:
c1:1b:a7:78:fc:1d:3d:c5:07:09:4f:43:3a:1a:30:
16:c6:d4:d2:40:55:8a:1e:fe:fc:bd:56:32:84:91:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:C5:CD:CE:8D:88:90:22:83:69:76:1F:3F:26:96:1D:07:CB:56
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/0NHFzc6NiJAig2l2Hz8mlh0Hy1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.154.0/24
91.151.101.0/24
171.33.235.0/24
212.225.227.0/24
212.225.244.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:17:20:6e:5d:a1:55:63:ca:f3:90:77:d6:8f:c5:9a:1d:a4:
62:61:aa:93:10:d3:54:51:6f:75:e0:57:81:00:3a:91:ff:19:
69:45:6f:d8:6a:ed:45:df:04:89:ec:84:2b:6b:76:c7:60:2c:
da:96:93:38:27:31:9f:48:84:0b:2f:39:46:12:31:15:bb:9d:
3e:12:08:02:49:4b:9a:95:7e:bb:fd:3b:c8:03:37:d3:21:6c:
06:e6:24:a8:8d:88:1d:c8:15:c6:95:d2:59:cd:b5:27:d1:e1:
af:7c:06:62:fb:1e:be:83:fb:cb:f3:15:8f:9d:d7:62:61:c1:
c1:fd:9c:fd:ba:5b:28:eb:33:9a:0e:de:8e:8a:13:e6:b1:0a:
ca:14:72:d8:c9:9e:f4:d8:ad:fa:46:97:db:9c:25:2f:46:09:
51:6d:32:94:dc:2b:09:a1:bc:65:d3:b6:d0:5f:af:fa:98:2a:
82:30:0c:0b:c1:4a:1d:c5:d3:6c:54:16:9a:99:d4:f9:97:5b:
f8:2f:25:d2:73:81:5d:65:b3:a7:1c:9a:cf:8e:c8:bf:9d:11:
f2:b8:f2:dd:88:36:3b:bc:f4:98:99:d6:8e:51:d7:85:5d:f9:
af:7c:91:90:b2:09:11:51:35:d5:91:fa:ab:a6:6c:78:25:14:
21:0e:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:04 2025 by rpki-client