Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/8lmdi4OHUXILZF6c7hucgc9baSI.roa
File: 8lmdi4OHUXILZF6c7hucgc9baSI.roa (raw, json)
Hash identifier: O2v6ZrHBJ0AI6f2GvCOjlD4h7mYklPE6mdFxb7eVUgg=
Subject key identifier: F2:59:9D:8B:83:87:51:72:0B:64:5E:9C:EE:1B:9C:81:CF:5B:69:22
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019514CC857DCBA8A97B8944904BB870FD6B
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/8lmdi4OHUXILZF6c7hucgc9baSI.roa
Signing time: Mon 17 Feb 2025 16:45:02 +0000
ROA not before: Mon 17 Feb 2025 16:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 31.24.224.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
46.23.64.0/21 maxlen: 21
46.23.72.0/22 maxlen: 24
46.23.76.0/22 maxlen: 24
77.92.64.0/19 maxlen: 23
82.163.72.0/21 maxlen: 24
83.170.64.0/18 maxlen: 24
88.202.176.0/20 maxlen: 24
88.202.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 24
109.123.64.0/18 maxlen: 24
176.67.160.0/20 maxlen: 24
176.67.169.0/24 maxlen: 24
176.67.172.0/22 maxlen: 24
185.7.224.0/22 maxlen: 24
2a02:2498::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Feb 2025 14:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:cc:85:7d:cb:a8:a9:7b:89:44:90:4b:b8:70:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Feb 17 16:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2599d8b838751720b645e9cee1b9c81cf5b6922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:ff:6f:ee:7f:3a:4e:26:ee:94:a6:73:a9:
38:55:90:94:10:15:6a:1c:4e:7b:04:92:a6:c3:6b:
cb:22:f8:ae:fe:9d:b0:9a:8b:76:e4:b7:8d:11:3c:
68:b4:0e:75:73:c1:6d:c8:20:67:cc:0e:22:1a:c8:
f3:dc:87:48:e2:a3:7a:e8:5f:b6:3f:ac:83:81:9a:
e4:6f:0f:5f:7b:19:4a:8b:fc:2e:64:83:79:7e:c9:
2b:ea:9d:ab:d2:f0:35:19:92:8b:4e:f2:73:5e:7d:
c2:cc:68:42:b8:d1:88:50:60:9b:33:13:2c:f9:98:
3d:8a:db:ea:99:90:b2:77:30:6b:43:96:2c:b5:7b:
26:fa:bc:bf:f6:74:c9:e4:fd:40:f0:17:a9:77:cd:
56:65:e5:1a:e7:cb:5e:9f:f0:2e:ee:6d:c9:e3:28:
ea:6b:5c:55:48:78:e4:eb:8f:af:d0:48:ab:ba:ca:
ab:5c:a9:b6:c0:01:e1:de:da:5c:a1:dc:9f:7d:b8:
9d:05:0b:cf:17:98:11:83:42:19:c5:75:6a:86:8a:
32:22:13:4b:01:54:f9:f0:ed:92:c5:0b:4c:6b:da:
5d:a4:a2:9b:19:c7:1b:87:1c:f2:c0:d4:38:57:07:
0d:80:01:ca:80:54:a8:7e:6b:56:e0:89:67:9e:b9:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:9D:8B:83:87:51:72:0B:64:5E:9C:EE:1B:9C:81:CF:5B:69:22
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/8lmdi4OHUXILZF6c7hucgc9baSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/20
185.7.224.0/22
IPv6:
2a02:2498::/32
Signature Algorithm: sha256WithRSAEncryption
7f:27:0b:ae:7a:f0:8f:54:ca:f6:10:2f:ff:fd:44:a2:3d:d5:
63:97:a8:4b:6a:45:32:52:c2:a4:cc:58:a9:1a:99:b0:76:c4:
0e:81:92:4b:d7:e5:d4:b7:b7:c4:bb:15:e9:09:97:a6:7f:46:
ea:1b:d8:e2:48:25:3e:1b:a8:28:04:aa:1b:ce:dc:dd:11:35:
52:01:af:44:78:48:5a:26:32:8b:a3:f4:17:55:22:30:b3:65:
cd:ac:ff:dc:9a:00:de:3b:ef:cc:87:9b:84:3b:a9:fb:0f:1c:
31:52:9a:cc:87:b6:c3:00:7a:a9:2c:bb:0e:21:78:0a:ce:c4:
bd:1a:a0:0a:d1:95:e9:75:3b:66:4f:30:c5:63:27:bb:8d:13:
73:43:f8:a3:af:64:24:6a:43:12:57:84:ba:e0:f8:db:fd:68:
77:2f:cb:93:ab:1a:58:a2:5b:c8:64:21:26:6e:b4:25:6a:d4:
89:75:52:62:ef:58:fc:c4:3b:53:4e:9a:8d:8c:11:0a:13:47:
34:4a:b8:e1:1f:b1:7e:c9:24:b8:e6:bb:60:14:7f:cb:2a:a7:
0c:92:d1:b0:d6:5d:a4:2d:18:9d:42:6d:64:51:e6:e0:53:76:
aa:03:93:09:f3:dc:a1:7d:25:0a:2c:f0:be:ae:cc:d7:3e:a7:
78:5b:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:08:45 2025 by rpki-client