Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cijQjJHfmYZAHsAJY39e6wchtlI.roa
File: cijQjJHfmYZAHsAJY39e6wchtlI.roa (raw, json)
Hash identifier: mFYrNndwHoIj3rv55aoPkXCstEwQfojhqJIbbtNJoSM=
Subject key identifier: 72:28:D0:8C:91:DF:99:86:40:1E:C0:09:63:7F:5E:EB:07:21:B6:52
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194614F40DA4B923D3588C72734002F6DA6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cijQjJHfmYZAHsAJY39e6wchtlI.roa
Signing time: Mon 13 Jan 2025 20:16:11 +0000
ROA not before: Mon 13 Jan 2025 20:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 37.46.20.0/22 maxlen: 24
77.239.108.0/22 maxlen: 24
87.251.16.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:4f:40:da:4b:92:3d:35:88:c7:27:34:00:2f:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 13 20:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7228d08c91df9986401ec009637f5eeb0721b652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:ab:bc:64:5d:9c:f9:ff:9d:d7:a2:4b:55:
f5:59:81:9f:c4:4f:92:45:3b:58:e3:cc:97:ee:16:
f4:ca:e1:54:9d:4f:d6:22:4c:84:0f:9e:e6:51:b0:
e3:d7:34:b2:a8:20:bb:0f:13:75:4f:8d:2f:c6:9c:
8b:60:66:63:81:02:82:bf:bc:7a:af:65:69:a9:98:
7a:cb:39:0e:43:57:1e:02:5d:6d:47:69:d2:74:88:
fe:cf:e8:48:9b:d5:b1:4a:a3:8d:35:74:b2:52:93:
01:f8:de:45:97:18:39:2d:dc:74:04:d8:f1:76:ac:
d8:db:07:11:bb:74:45:0a:98:76:15:71:06:52:2d:
04:01:6e:32:19:d1:11:7b:d7:f0:18:33:ca:15:99:
69:75:98:20:03:d7:83:9f:74:47:a5:05:bb:bd:c8:
96:5b:09:54:5d:e5:ec:e1:55:c2:58:5e:e1:a2:25:
f8:bd:b7:72:93:c9:31:d9:59:6c:f6:1f:d1:fe:63:
ea:40:e2:ba:8c:7a:e9:3a:68:b7:23:17:04:03:37:
19:48:24:91:a4:d9:77:c9:67:3b:50:2a:30:f8:b4:
b8:ca:91:d0:a0:b2:15:70:37:56:3e:c9:e1:a8:ba:
c2:03:24:46:41:c8:4a:00:26:c5:0d:50:43:37:10:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:D0:8C:91:DF:99:86:40:1E:C0:09:63:7F:5E:EB:07:21:B6:52
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cijQjJHfmYZAHsAJY39e6wchtlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.20.0/22
77.239.108.0/22
87.251.16.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b4:9f:41:c0:81:c0:e7:3d:f5:24:39:c3:da:3c:7a:e5:57:
59:f6:cb:9d:ee:9f:11:b4:29:37:03:25:48:7b:9f:ef:4a:57:
d3:82:6a:d8:c4:3e:0a:b6:73:ee:62:fd:0d:e1:a7:8b:6b:34:
9e:11:93:cd:1d:b6:88:63:7a:6d:7f:4d:06:b3:68:e5:d4:18:
c1:96:57:35:6b:03:64:42:82:f5:67:34:be:30:13:cd:30:56:
81:a4:ba:c6:6e:eb:91:e7:26:61:a3:89:41:93:f3:26:56:d1:
9d:3d:9b:28:78:67:31:76:2f:27:4b:2e:7c:24:ed:7b:d5:e9:
68:20:6b:99:f2:9f:8a:d5:71:b4:de:37:b2:ad:5f:a1:7c:31:
ae:c0:38:bf:02:c4:8a:6a:31:2b:62:6f:ff:36:58:59:0b:66:
67:ae:02:a7:01:d6:97:39:10:1d:c9:ee:3a:57:19:b6:60:fd:
1b:47:df:af:4d:6d:0c:87:56:63:97:64:bd:d2:47:d3:70:3d:
aa:02:59:07:9f:62:b6:64:ac:b1:ad:d4:26:4d:b0:44:c6:7c:
04:55:7f:12:c8:7a:83:cd:a6:42:25:b9:b5:1b:c2:b2:d3:b8:
88:1f:19:eb:94:e8:a3:f1:76:e0:a5:b8:2b:5f:9e:5f:27:e8:
41:d2:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:14 2025 by rpki-client