Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/P7D2x3siCjx72vLtUOhZiqXkbs8.roa
File: P7D2x3siCjx72vLtUOhZiqXkbs8.roa (raw, json)
Hash identifier: 4vY+KJUqJ5HcUgKBOtelemYuG9iUPQOxiC2CFCxsdVI=
Subject key identifier: 3F:B0:F6:C7:7B:22:0A:3C:7B:DA:F2:ED:50:E8:59:8A:A5:E4:6E:CF
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018ED88D5CEA16637D900FE27ED7D94F493B
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/P7D2x3siCjx72vLtUOhZiqXkbs8.roa
Signing time: Sat 13 Apr 2024 17:42:06 +0000
ROA not before: Sat 13 Apr 2024 17:42:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6789
IP address blocks: 45.149.244.0/22 maxlen: 22
80.245.112.0/20 maxlen: 20
80.245.112.0/24 maxlen: 24
85.91.192.0/19 maxlen: 19
91.235.12.0/22 maxlen: 22
91.247.96.0/19 maxlen: 19
109.200.128.0/19 maxlen: 19
185.92.136.0/22 maxlen: 22
185.99.168.0/22 maxlen: 22
185.100.103.0/24 maxlen: 24
185.104.92.0/22 maxlen: 22
185.186.232.0/22 maxlen: 22
2a00:1d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 19 Apr 2024 04:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:8d:5c:ea:16:63:7d:90:0f:e2:7e:d7:d9:4f:49:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Apr 13 17:42:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fb0f6c77b220a3c7bdaf2ed50e8598aa5e46ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:ba:d3:27:91:fa:4a:e7:50:c1:a3:e2:5b:
4e:6c:0d:31:1c:f7:00:0f:5c:05:6c:48:d7:ca:5b:
ad:14:d9:ce:9f:fc:4d:2a:e5:96:3c:3c:c6:b3:48:
67:51:7f:27:8c:96:e2:89:ef:5c:c1:36:11:c8:2a:
37:49:45:c9:1d:5f:a4:23:56:ef:bc:a2:c4:5d:ab:
87:09:4f:44:d0:d2:32:2f:c1:0b:ab:0a:90:06:62:
a7:d7:3d:78:8d:1f:e3:e9:4c:d0:d9:b5:e4:b6:57:
a7:3a:25:d0:08:d2:4e:42:3d:18:d5:4c:72:b4:f0:
53:24:96:a4:ce:b3:d0:c1:77:1b:99:d3:ce:c6:6d:
79:97:1f:cd:31:1b:38:1b:01:4f:c5:5d:45:27:b3:
9b:8b:eb:8c:96:8b:3c:51:a9:50:7a:6c:2c:80:2a:
bb:31:a5:7c:d4:8a:34:46:fe:28:e9:5b:b6:1c:0e:
77:b1:b9:a0:0e:94:5e:16:e6:af:7f:1d:e7:30:cf:
e5:2d:2c:dd:98:31:85:85:ef:69:fc:14:0a:ef:0e:
52:cd:f3:ef:d7:8c:fd:44:2e:d2:cc:03:6e:b8:e8:
80:d4:50:df:bf:50:0d:54:60:81:65:6d:44:b0:81:
95:05:3e:3c:d9:12:4c:2c:5f:0a:99:46:7c:25:42:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:F6:C7:7B:22:0A:3C:7B:DA:F2:ED:50:E8:59:8A:A5:E4:6E:CF
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/P7D2x3siCjx72vLtUOhZiqXkbs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.244.0/22
80.245.112.0/20
85.91.192.0/19
91.235.12.0/22
91.247.96.0/19
109.200.128.0/19
185.92.136.0/22
185.99.168.0/22
185.100.103.0/24
185.104.92.0/22
185.186.232.0/22
IPv6:
2a00:1d80::/32
Signature Algorithm: sha256WithRSAEncryption
10:33:12:92:95:35:1a:2e:97:7e:c2:40:0e:d1:28:dd:14:16:
b9:2b:0c:67:fe:41:02:47:17:9d:74:65:28:af:d1:68:1e:05:
47:91:19:92:c8:49:9b:98:be:f5:fb:d2:a5:bd:0d:48:0a:08:
16:7e:70:cd:49:f5:14:81:19:81:69:c9:19:bd:ca:d2:10:16:
df:76:14:84:84:96:fb:6b:2b:51:c3:cf:30:d5:59:8a:32:52:
15:ee:b5:c9:a8:cb:17:64:54:e1:72:16:57:3a:90:f9:a1:6e:
ec:e8:f1:29:f9:3b:20:9d:19:37:43:ed:cc:e7:5a:f0:47:a5:
0c:6f:13:6b:66:50:56:11:42:30:75:54:24:98:5d:18:e4:f5:
d5:32:00:ab:be:ea:ca:6c:ca:a0:c7:c4:0b:f6:99:2f:79:d9:
20:d2:21:33:12:7e:f0:ab:65:ff:8f:f4:e7:f5:76:d5:72:32:
e5:78:ed:1e:d7:f9:7a:c3:bb:ab:f4:82:9c:fa:3f:02:72:48:
0f:7f:79:01:ee:9e:54:29:34:87:20:b8:1f:cb:b9:a1:71:1b:
44:a0:e4:ac:55:73:9d:15:88:d2:34:3a:4c:36:00:42:35:1b:
1b:57:d9:d8:c0:b3:25:0f:77:09:5c:85:a7:c0:d2:b5:24:cf:
95:6a:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:59:01 2025 by rpki-client