Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/8YJnRfX21bwtkUmbOx2AR0fHCGA.roa
File: 8YJnRfX21bwtkUmbOx2AR0fHCGA.roa (raw, json)
Hash identifier: NtDt0cW9o3uaDdjpkvLc9lAEHfCawt+yp2kGe0vAR2o=
Subject key identifier: F1:82:67:45:F5:F6:D5:BC:2D:91:49:9B:3B:1D:80:47:47:C7:08:60
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018CC4246CFD3A027EDEB0339A3B13804F5E
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/8YJnRfX21bwtkUmbOx2AR0fHCGA.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 95.83.192.0/18 maxlen: 24
95.83.196.0/22 maxlen: 24
95.83.196.0/23 maxlen: 24
89.204.160.0/19 maxlen: 24
31.200.128.0/18 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.240.0/21 maxlen: 24
185.60.124.0/22 maxlen: 24
213.191.224.0/19 maxlen: 24
178.167.128.0/17 maxlen: 24
95.83.229.0/24 maxlen: 24
62.40.32.0/19 maxlen: 24
92.251.128.0/17 maxlen: 24
83.136.40.0/21 maxlen: 24
80.233.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6c:fd:3a:02:7e:de:b0:33:9a:3b:13:80:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1826745f5f6d5bc2d91499b3b1d804747c70860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:b8:5d:7b:54:b8:4c:c0:da:b6:57:f9:56:
88:68:8b:1b:c8:f1:1a:5d:da:2f:b7:8d:bc:ce:88:
99:c3:d5:c8:5f:04:18:1c:6d:f2:7b:f3:cf:16:3d:
26:ea:49:0d:16:61:c1:63:b2:d1:46:af:8e:1e:a3:
7e:95:36:95:1b:1d:86:6e:8e:e5:31:ae:e2:95:4c:
ab:a0:e5:ac:4f:4f:64:f5:34:de:ab:af:4c:7e:fd:
92:90:10:31:77:05:ad:01:e5:99:23:1d:70:48:ee:
60:31:0d:5b:5f:3e:39:04:f2:c6:c3:07:df:cf:24:
5a:04:8e:68:75:48:a5:9a:5f:bc:d4:73:10:90:5d:
92:d8:f3:e2:35:22:8d:d1:00:92:ff:94:ff:38:d8:
8d:dc:56:0e:f7:98:00:d5:c8:61:14:b8:1b:bd:49:
02:73:73:20:24:0f:78:34:6d:9d:98:39:6e:6e:70:
69:61:b7:ce:40:4c:b9:06:a3:73:35:62:ac:a2:81:
5b:11:34:be:f7:ef:96:b0:30:45:28:cd:51:02:53:
5e:36:ed:ed:53:8e:b6:4b:38:46:2c:89:57:1c:67:
b1:a7:eb:8f:a6:b5:43:e4:a5:03:83:f2:d5:c4:48:
f1:5a:ff:cb:87:55:a0:66:9d:56:29:1b:fb:48:75:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:67:45:F5:F6:D5:BC:2D:91:49:9B:3B:1D:80:47:47:C7:08:60
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/8YJnRfX21bwtkUmbOx2AR0fHCGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
83.136.40.0/21
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
185.60.124.0/22
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:07:e4:79:6a:ca:7d:9b:c4:27:b8:65:13:4f:40:aa:d8:4a:
1b:db:d8:8f:c7:e7:26:ea:ea:0e:c0:e4:01:6a:eb:58:a1:6e:
62:11:fb:e7:5f:fb:b6:50:a3:de:86:e0:ea:39:02:dd:af:4d:
b2:68:e4:fe:46:41:45:d4:0c:ca:4c:5e:2b:51:8d:b1:0c:de:
91:83:04:4d:c2:c2:4e:ef:0b:cb:0d:62:e3:4b:1e:66:a0:fc:
b4:ca:a8:4e:4f:7b:65:60:4d:0a:a1:31:fd:d0:6a:b2:b3:81:
0b:f3:a3:9a:19:e2:48:53:a8:33:58:87:49:a0:aa:f0:41:51:
06:a0:4b:85:44:9d:37:92:e5:9e:2c:4d:65:a1:5e:64:c3:cb:
4a:09:e8:40:86:99:55:fc:0d:a0:cb:a8:f1:a2:28:aa:23:39:
44:c6:47:c5:e9:6a:d5:fd:d4:e4:49:61:80:f4:49:bd:09:0b:
ed:94:8b:88:01:a5:65:59:97:33:50:83:19:8a:bd:77:ad:29:
9f:8f:05:47:c2:5c:d3:3a:5e:b3:1c:fd:95:9e:25:33:9f:d6:
d2:d1:15:38:80:0a:d5:72:35:a5:de:7a:83:58:67:89:71:32:
d4:9f:88:3e:e2:8c:eb:f9:36:2f:c5:a5:a2:21:2b:5e:fd:e4:
18:bf:d2:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:42:55 2025 by rpki-client