Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/hEFZ0hYnQVyZZyq8m_Dsw8NbmP4.roa
File: hEFZ0hYnQVyZZyq8m_Dsw8NbmP4.roa (raw, json)
Hash identifier: 1DMBD2qRI1SKlSdT3f7dUf5Dc5N3P14SytDBZ7ZXA4I=
Subject key identifier: 84:41:59:D2:16:27:41:5C:99:67:2A:BC:9B:F0:EC:C3:C3:5B:98:FE
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 018CC795353E53C4176FEF4212C78CA4F791
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/hEFZ0hYnQVyZZyq8m_Dsw8NbmP4.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8660
IP address blocks: 212.48.0.0/19 maxlen: 24
213.209.0.0/18 maxlen: 24
80.93.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:35:3e:53:c4:17:6f:ef:42:12:c7:8c:a4:f7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=844159d21627415c99672abc9bf0ecc3c35b98fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b7:e3:74:5e:1e:1c:d6:1f:2d:eb:f1:cb:c4:
a6:c4:1f:30:da:ec:c2:d4:6e:af:ec:8f:b9:12:9e:
e7:6b:2d:eb:ad:d7:b6:0b:ac:8c:fd:28:b9:89:a7:
40:fa:53:ee:06:01:b2:ed:79:cf:b4:04:8e:7e:f6:
9a:10:f0:ee:b2:9a:2c:93:6a:b7:72:8f:14:ff:52:
9d:04:30:cf:ab:83:9e:8e:b6:e7:1b:3c:42:65:99:
bd:13:10:af:f1:2e:65:ae:46:20:d7:84:05:5b:c0:
12:d3:dc:41:05:24:30:7c:d7:84:cb:c3:58:fa:da:
4f:f8:b6:b1:a8:f8:cb:d4:f8:80:56:d4:34:b2:db:
21:3c:7b:c9:ce:5d:f6:b5:e0:e8:eb:d8:ba:b5:f5:
67:23:8d:3b:35:ae:da:b5:d8:bb:88:1b:45:a0:ea:
54:dc:12:99:3e:37:56:2d:38:03:ed:fe:1b:76:c9:
a1:ae:e6:b2:96:6d:91:b5:26:9f:9d:d1:f8:c0:68:
6a:6e:0f:48:1c:79:15:e8:d4:0f:eb:e2:4e:8c:21:
c6:a9:50:d0:4c:1d:85:b7:18:f1:6f:65:95:36:5b:
02:09:f7:0e:49:46:01:07:78:30:3b:56:7c:9b:1c:
af:ab:90:41:d5:e3:04:f7:0c:88:7f:ee:5f:35:a5:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:59:D2:16:27:41:5C:99:67:2A:BC:9B:F0:EC:C3:C3:5B:98:FE
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/hEFZ0hYnQVyZZyq8m_Dsw8NbmP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.64.0/20
212.48.0.0/19
213.209.0.0/18
Signature Algorithm: sha256WithRSAEncryption
92:6a:60:31:b9:1e:93:ea:3d:66:9b:7a:fc:b2:65:99:6b:d9:
5c:4d:64:14:6c:f7:26:56:bd:23:89:5a:03:83:22:14:d6:22:
26:9f:5b:97:ec:b2:a4:d8:7c:b8:e8:35:ef:c5:14:bf:24:58:
5a:2c:07:fb:8b:28:60:1e:37:59:47:bd:be:f0:d2:16:02:f9:
02:90:1c:f1:2e:b8:37:ea:d3:5a:41:88:08:cf:9b:17:75:b2:
1e:62:36:73:be:0b:41:26:38:e5:da:e3:46:67:f7:93:c5:8a:
96:c5:8f:15:58:61:da:d1:af:7a:27:16:b7:42:0c:76:a9:a7:
6e:a4:95:ec:c3:04:50:29:78:c5:0d:c0:42:ec:a2:ca:74:45:
8b:de:8c:11:f7:f6:23:9d:df:a7:37:75:93:54:08:de:cc:66:
51:77:0c:4b:1c:ac:94:ed:a5:dd:70:4a:41:31:8d:71:e5:9b:
e6:01:04:38:f2:b2:d9:c7:ea:11:ff:c7:86:db:5e:c1:37:04:
df:98:9f:48:b5:c1:77:11:15:07:5b:a2:66:b8:28:20:04:47:
50:3a:84:d3:2b:5f:84:43:37:4d:61:51:9d:d2:ce:08:b5:41:
17:2b:e5:8c:5b:e2:33:11:bb:85:cc:38:c3:3d:e0:60:46:98:
bb:2a:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:17 2025 by rpki-client