Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/8U5O6JhTzpSIbJ_tzTYtObYTV4A.roa
File: 8U5O6JhTzpSIbJ_tzTYtObYTV4A.roa (raw, json)
Hash identifier: GAAp8TydA4n8LeFDn2cyv22F9bAO63gGOTzO518f67c=
Subject key identifier: F1:4E:4E:E8:98:53:CE:94:88:6C:9F:ED:CD:36:2D:39:B6:13:57:80
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 018CE8B31B8FDDA3BE8A3FB61739D536D4CF
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/8U5O6JhTzpSIbJ_tzTYtObYTV4A.roa
Signing time: Mon 08 Jan 2024 10:51:41 +0000
ROA not before: Mon 08 Jan 2024 10:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 86.107.255.0/24 maxlen: 24
89.43.156.0/22 maxlen: 24
79.132.145.0/24 maxlen: 24
45.132.248.0/22 maxlen: 24
46.247.245.0/24 maxlen: 24
79.132.153.0/24 maxlen: 24
79.132.154.0/24 maxlen: 24
85.112.211.0/24 maxlen: 24
185.223.148.0/24 maxlen: 24
86.105.91.0/24 maxlen: 24
185.183.63.0/24 maxlen: 24
86.107.248.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 17:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:b3:1b:8f:dd:a3:be:8a:3f:b6:17:39:d5:36:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Jan 8 10:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f14e4ee89853ce94886c9fedcd362d39b6135780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:4f:f4:87:ad:91:a0:8c:c8:79:79:1d:89:
c4:b0:17:c9:3e:cf:18:8e:de:a7:fa:31:35:40:29:
1c:cd:6f:be:3a:21:f7:26:23:12:41:f4:6c:19:07:
7a:b3:ed:59:51:65:81:92:d0:96:fd:11:d9:a1:8c:
b7:b2:0f:e9:9c:85:73:22:b6:9b:eb:90:25:b4:f1:
84:12:45:a0:50:45:2e:03:37:5e:42:11:72:8d:c4:
eb:d7:93:cf:23:00:cf:57:70:c0:e5:b7:73:b1:7c:
7f:39:d2:8f:92:bb:69:b9:54:70:bd:64:2e:67:b1:
8e:4a:7a:13:27:03:23:5b:1f:ca:49:48:49:9b:2b:
de:61:b6:7f:e5:30:c4:08:fd:8b:8f:3e:c6:15:8d:
58:67:9b:57:31:8e:e9:7e:d1:15:df:49:f9:3e:99:
c9:b6:08:df:d4:3c:c4:d8:d4:69:f3:d7:d4:c7:8a:
54:07:82:3e:81:89:fe:ca:1a:1c:ca:47:23:40:10:
ae:8d:ff:e8:b3:0a:ce:65:12:7e:29:b4:fb:33:29:
db:38:cc:d5:09:d6:c2:80:55:49:2f:6a:4e:6b:de:
16:bb:50:7b:48:ac:bb:41:dc:cb:d0:89:5c:c5:58:
98:f6:b6:29:37:ae:b4:73:23:fe:e8:48:49:83:0e:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4E:4E:E8:98:53:CE:94:88:6C:9F:ED:CD:36:2D:39:B6:13:57:80
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/8U5O6JhTzpSIbJ_tzTYtObYTV4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.248.0/22
46.247.245.0/24
79.132.145.0/24
79.132.153.0-79.132.154.255
85.112.211.0/24
86.105.91.0/24
86.107.248.0/21
89.43.156.0/22
185.183.63.0/24
185.223.148.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2b:72:28:89:2a:2b:64:6b:3c:c4:56:17:9c:d8:8b:7e:8c:
ea:92:84:d1:c9:02:3f:be:6e:ee:bc:27:8d:28:bf:d5:7f:49:
aa:74:02:ea:d8:d7:42:c8:6c:7d:6f:57:78:34:88:80:94:ee:
f1:3d:75:85:6c:b4:ff:23:fd:4f:b9:23:af:35:e6:61:9f:26:
a1:78:9b:e8:6a:2b:96:d4:b8:56:26:9f:21:e9:8e:0c:2c:0b:
8d:b9:ab:18:0f:9c:d0:92:d8:23:67:71:97:af:67:93:93:37:
bb:6b:8d:91:a6:c5:ac:a2:0c:8b:af:f4:6a:32:3d:e6:2a:bc:
a9:a8:22:b2:c4:e1:59:42:6d:2d:d7:35:21:9f:77:bf:2a:91:
54:54:a5:4e:36:84:bb:08:3e:8a:1e:0d:85:6b:bc:3d:df:a6:
8f:b3:f4:33:da:0a:1b:58:1e:05:a1:dd:a5:bf:78:86:ec:c2:
13:a3:c6:08:93:c3:59:34:10:ec:80:ff:d7:02:4e:6a:89:c7:
b8:9d:1c:4e:a0:37:44:75:4a:b7:5e:a0:eb:55:e0:b3:44:bb:
39:2f:fd:06:0a:44:24:ea:8b:ca:b2:c3:8b:7c:6c:18:b4:42:
98:bc:af:38:db:0c:4f:47:53:71:17:aa:0e:d9:47:08:73:83:
b6:09:81:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:12 2025 by rpki-client