Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/8EpT8M6gpYz2Ip7Ob91aI12cWaE.roa
File: 8EpT8M6gpYz2Ip7Ob91aI12cWaE.roa (raw, json)
Hash identifier: EQHlcf2Avw14yLWZqBdYqOpeJH9b/QHQ+CGGV6RDYZk=
Subject key identifier: F0:4A:53:F0:CE:A0:A5:8C:F6:22:9E:CE:6F:DD:5A:23:5D:9C:59:A1
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 018CEFBDC65F6B8D71E47007DAB20EC18C88
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/8EpT8M6gpYz2Ip7Ob91aI12cWaE.roa
Signing time: Tue 09 Jan 2024 19:40:40 +0000
ROA not before: Tue 09 Jan 2024 19:40:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.230.43.0/24 maxlen: 24
185.230.40.0/22 maxlen: 22
185.230.40.0/24 maxlen: 24
185.230.41.0/24 maxlen: 24
185.230.42.0/24 maxlen: 24
2a13:3682::/32 maxlen: 32
2a13:3686::/32 maxlen: 32
2a13:3687::/32 maxlen: 32
2a13:3681::/32 maxlen: 32
2a13:3684::/32 maxlen: 32
2a13:3680::/32 maxlen: 32
2a13:3683::/32 maxlen: 32
2a13:3685::/32 maxlen: 32
2a13:3680::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:bd:c6:5f:6b:8d:71:e4:70:07:da:b2:0e:c1:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Jan 9 19:40:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f04a53f0cea0a58cf6229ece6fdd5a235d9c59a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:21:3d:be:38:d9:e8:ea:2c:c9:a7:77:46:
c8:18:cb:10:f4:5f:6c:58:03:2e:76:0a:09:2c:43:
37:ad:3e:cd:17:2f:06:e7:f8:d3:ab:49:9b:5d:63:
60:b0:e6:da:b8:8a:b5:0a:81:f6:fe:c0:c6:9e:d2:
7d:44:d2:09:55:d3:8b:47:36:03:3a:ab:cb:83:a4:
cc:af:7c:a8:ff:44:4f:11:75:67:6c:82:84:7a:8d:
94:5a:69:1a:e0:fa:eb:ef:04:7c:97:be:93:f9:f7:
58:52:5e:0e:be:12:0c:40:32:7f:59:fa:d1:09:03:
1c:95:43:37:5a:eb:9c:2a:53:9f:65:59:43:6b:f0:
ff:5c:f5:36:f7:80:07:91:fb:7c:bd:95:89:c9:dd:
26:a1:91:ae:93:b1:87:1a:c9:8d:96:09:42:b4:19:
db:6f:3e:23:84:3d:b8:11:8f:e9:a6:6c:83:29:40:
b1:1d:19:f0:cc:e3:de:04:d9:0a:82:ec:b7:cc:bb:
c1:c8:60:38:2f:2f:1f:af:fe:c2:4d:90:ef:b6:80:
c9:77:db:83:1e:77:59:7a:9a:93:bb:7e:b0:59:f2:
52:6c:61:4f:30:31:7e:97:c8:76:19:e8:f3:2f:d0:
ad:86:59:8b:49:26:9b:24:37:4e:6a:8c:cc:70:c3:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:53:F0:CE:A0:A5:8C:F6:22:9E:CE:6F:DD:5A:23:5D:9C:59:A1
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/8EpT8M6gpYz2Ip7Ob91aI12cWaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.40.0/22
IPv6:
2a13:3680::/29
Signature Algorithm: sha256WithRSAEncryption
1b:bd:29:c3:0a:2d:17:9e:d4:66:58:b9:2a:b0:31:9a:ca:75:
9f:d0:85:2b:e2:da:ad:85:61:48:53:78:9a:b4:17:09:0a:2e:
8d:29:7a:de:62:06:10:80:56:a2:4a:41:f1:87:8b:b7:f3:26:
83:55:cb:b9:de:ab:92:60:da:0f:85:a5:55:0e:5a:37:1f:89:
dc:45:7f:15:dd:a5:4b:0d:96:8e:27:c9:bb:6e:a7:45:70:5b:
c4:8e:9a:83:9b:1e:d0:17:29:74:b3:62:71:0a:04:a0:3e:cb:
86:0c:b6:49:bd:46:d4:e2:70:33:96:e2:61:38:df:d9:25:ed:
82:ad:cb:ed:1c:52:82:da:f8:f4:d7:be:b5:e6:50:5b:c6:7e:
7d:e0:f8:2c:3b:6d:85:38:30:6d:17:3d:b7:b1:ed:e6:f7:a9:
06:18:0b:6e:11:b2:53:e6:26:11:93:bd:5e:a0:c6:c8:b8:54:
0c:59:63:67:20:03:23:cd:14:c0:e5:cc:f5:b5:1f:e9:42:1e:
fb:a3:74:9f:7c:36:90:f5:85:b4:2c:93:d2:10:2b:69:c8:fd:
e2:ee:c4:35:42:aa:18:4d:ca:b8:dd:73:c7:3c:23:d2:be:93:
02:07:c8:43:65:2d:41:a5:ac:38:dc:13:0c:c3:87:cb:ff:f6:
c2:c0:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:08 2025 by rpki-client