Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/3Uz4XiG2QSzlBBq_hUA0OOju7w0.roa
File: 3Uz4XiG2QSzlBBq_hUA0OOju7w0.roa (raw, json)
Hash identifier: Ghvmd81sArbnJL2VmfJm5/rA3QTXEMGFx6GQaulkM9I=
Subject key identifier: DD:4C:F8:5E:21:B6:41:2C:E5:04:1A:BF:85:40:34:38:E8:EE:EF:0D
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019371D3965BD1DE3FEBC5BF412334B59467
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/3Uz4XiG2QSzlBBq_hUA0OOju7w0.roa
Signing time: Thu 28 Nov 2024 08:11:52 +0000
ROA not before: Thu 28 Nov 2024 08:11:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41678
IP address blocks: 89.185.128.0/21 maxlen: 21
89.185.129.0/24 maxlen: 24
89.185.136.0/21 maxlen: 21
89.185.143.0/24 maxlen: 24
89.185.144.0/20 maxlen: 20
89.185.154.0/24 maxlen: 24
89.185.157.0/24 maxlen: 24
194.46.0.0/19 maxlen: 19
194.46.112.0/21 maxlen: 21
194.46.132.0/22 maxlen: 22
194.46.152.0/22 maxlen: 22
194.46.160.0/24 maxlen: 24
194.46.161.0/24 maxlen: 24
194.46.164.0/22 maxlen: 22
212.108.64.0/20 maxlen: 20
212.108.77.0/24 maxlen: 24
212.108.92.0/22 maxlen: 22
212.108.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 15:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:d3:96:5b:d1:de:3f:eb:c5:bf:41:23:34:b5:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Nov 28 08:11:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd4cf85e21b6412ce5041abf85403438e8eeef0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:72:0f:3d:b3:6d:a7:ef:3c:94:ca:4c:82:
7c:40:f0:48:25:dc:d4:76:d6:5f:eb:bc:f9:21:3e:
e4:c1:3c:5b:bf:29:f2:21:d3:e0:8c:83:c4:95:49:
a2:35:1c:08:31:b0:ca:3d:10:af:70:67:10:da:8d:
ec:bb:2f:3b:08:4c:0a:76:82:1c:17:f7:31:a8:06:
01:7a:3d:dd:bc:cc:2f:25:ad:1e:1e:a2:0f:06:ba:
df:14:40:aa:a9:61:36:a4:1e:24:0d:47:64:3e:e3:
a3:fa:98:14:4c:3a:86:4f:4b:87:1f:50:70:a4:bf:
3b:69:75:04:b1:47:7c:b6:e2:64:4b:4a:98:21:bb:
66:27:d0:64:38:ef:8d:6d:a7:65:18:52:f2:3d:9d:
18:49:f8:99:a2:4c:7e:a9:9e:7d:14:22:6a:4d:19:
80:f2:3f:63:27:ea:dd:d7:d6:9c:64:26:95:a3:18:
49:1f:64:33:54:29:8e:ca:5c:3b:2a:cb:cc:0a:47:
1f:30:62:fd:9c:f6:d9:fe:bf:72:80:13:d3:a7:e6:
79:a1:c9:5a:29:49:43:76:cf:42:f3:5a:5a:ae:c9:
70:5e:d9:b7:32:4a:5c:64:3e:71:9b:a9:af:f4:7f:
7e:f9:d8:75:c0:cd:60:fa:00:39:4f:3c:fd:7a:83:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:F8:5E:21:B6:41:2C:E5:04:1A:BF:85:40:34:38:E8:EE:EF:0D
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/3Uz4XiG2QSzlBBq_hUA0OOju7w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.128.0/19
194.46.0.0/19
194.46.112.0/21
194.46.132.0/22
194.46.152.0/22
194.46.160.0/23
194.46.164.0/22
212.108.64.0/20
212.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:d6:c7:d6:c4:b8:d3:56:88:fb:03:e5:7d:50:ab:dd:f7:34:
9f:de:24:0f:ea:12:2a:b2:b6:8b:77:91:9b:b7:c7:31:bb:1e:
5c:71:ff:4c:be:8a:a8:63:c0:d7:5a:dd:26:4f:51:7d:b8:93:
c9:6a:e4:25:a5:f9:c4:c2:05:3a:a6:cf:1d:27:16:48:19:40:
02:d9:5b:d5:ef:5c:dd:9f:15:bb:2d:4e:fc:ec:ad:e4:69:cd:
92:e0:f5:d7:97:5d:2a:87:eb:6d:5e:38:07:5a:76:ad:a9:d2:
7b:9a:ec:3a:db:24:b5:99:48:05:fc:8a:15:3f:20:7f:3f:14:
b5:45:d8:c3:ff:9d:b4:b3:f7:22:b1:2e:ca:06:46:03:ce:ef:
9f:ab:7a:5f:6f:21:1a:5b:8a:8f:11:7d:6f:03:52:b0:b8:7c:
53:86:f1:bc:74:af:56:d4:e0:1f:46:82:af:13:a3:4d:cf:81:
c4:e3:a0:79:f8:7a:81:43:f2:79:55:e6:aa:48:f3:22:53:5b:
3c:76:98:ff:08:6e:16:bc:00:0b:36:02:04:e8:be:c3:36:1e:
cf:ba:58:8a:12:53:af:e1:74:57:ff:27:73:12:c4:72:f7:52:
e9:1d:53:a4:48:09:61:0f:ac:4d:d9:ae:e3:49:b1:d5:20:fa:
9a:09:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:14:03 2025 by rpki-client