Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3xPBxzUiTV0Esm_jvYnz0628mhc.roa
File: 3xPBxzUiTV0Esm_jvYnz0628mhc.roa (raw, json)
Hash identifier: 0uvO4wkkPc5Qkf1V75PDVG3+oRyg7lphg4vPATHt3VI=
Subject key identifier: DF:13:C1:C7:35:22:4D:5D:04:B2:6F:E3:BD:89:F3:D3:AD:BC:9A:17
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483CCABC9DF16FB33CD4903EEA2BF8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3xPBxzUiTV0Esm_jvYnz0628mhc.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5411
IP address blocks: 192.36.44.0/23 maxlen: 24
192.71.132.0/23 maxlen: 24
192.71.134.0/23 maxlen: 24
192.71.178.0/23 maxlen: 24
192.121.79.0/24 maxlen: 24
192.165.117.0/24 maxlen: 24
192.165.118.0/24 maxlen: 24
192.176.131.0/24 maxlen: 24
192.176.132.0/23 maxlen: 24
192.176.148.0/23 maxlen: 24
192.176.162.0/23 maxlen: 24
194.14.63.0/24 maxlen: 24
194.14.66.0/23 maxlen: 24
194.14.70.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3c:ca:bc:9d:f1:6f:b3:3c:d4:90:3e:ea:2b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df13c1c735224d5d04b26fe3bd89f3d3adbc9a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:ae:3e:b6:4d:8a:e5:37:e4:f9:95:c0:bb:
a5:5c:3e:06:b3:17:f5:32:18:4f:ab:b6:38:45:f5:
23:9e:03:87:55:d8:e6:9a:82:fa:12:45:52:4e:88:
17:fa:a7:32:09:59:3b:67:72:be:4a:7e:55:70:7f:
6a:a3:3b:f8:b6:d1:09:6d:6c:aa:4a:18:95:dd:48:
ca:4a:8b:40:4c:cd:3b:67:08:e5:08:0a:7b:e2:64:
7b:d6:e0:6a:27:ea:26:4b:52:27:33:35:8d:44:cb:
64:ef:91:35:ff:d6:0c:37:81:4f:6b:05:6d:93:64:
0f:0e:aa:2f:17:f2:f1:94:d5:9f:bd:66:22:c3:37:
66:d6:70:b6:e6:13:82:1a:18:d3:06:0c:66:af:44:
cb:bd:dc:ef:b4:69:44:bd:e6:60:a3:14:38:e1:b0:
4e:42:60:bc:eb:e3:24:a0:f7:48:2f:7e:97:08:8e:
f9:4d:66:3d:b0:5e:2a:7a:6c:98:83:ea:ed:45:f3:
bc:c1:30:7c:f5:c8:3e:7b:bd:c3:f7:c2:fc:e5:d0:
f6:af:73:8d:c7:79:e6:0f:eb:6b:a0:30:42:14:6e:
f6:51:80:b2:24:94:1d:8e:db:39:8a:3d:62:da:8f:
6e:4c:57:e6:50:2f:b0:43:51:ab:af:be:67:b9:ec:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:C1:C7:35:22:4D:5D:04:B2:6F:E3:BD:89:F3:D3:AD:BC:9A:17
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3xPBxzUiTV0Esm_jvYnz0628mhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.44.0/23
192.71.132.0/22
192.71.178.0/23
192.121.79.0/24
192.165.117.0-192.165.118.255
192.176.131.0-192.176.133.255
192.176.148.0/23
192.176.162.0/23
194.14.63.0/24
194.14.66.0/23
194.14.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:1e:c5:b3:e1:21:64:75:64:25:d2:75:e6:b9:72:dc:48:b6:
cb:67:8d:de:77:fb:0c:f3:6a:03:9d:1c:c0:05:00:3d:57:b3:
aa:75:27:40:07:ae:9d:46:9a:9b:d5:3c:ed:4b:57:ec:a5:98:
20:f8:d2:96:91:79:d6:48:93:f6:b0:c3:a7:eb:80:eb:bc:10:
13:e2:e8:ff:fd:9b:29:7e:18:bb:13:f0:e7:61:1b:42:1f:3c:
88:89:c9:b3:33:bf:3d:73:09:a0:4f:30:5f:99:ee:ec:99:d5:
ba:a6:95:5c:a6:9c:1b:4f:99:a5:9d:2f:d7:57:cb:b0:28:5a:
63:03:10:7e:91:7f:2c:24:11:56:e5:7f:60:a3:cd:f1:82:86:
31:88:fa:77:8a:06:c0:d9:82:41:82:90:6c:fc:31:82:d1:49:
77:9d:81:7f:8a:a5:b5:fd:29:cd:02:30:2b:c5:35:a7:0a:b8:
e1:35:7f:62:12:72:e1:f6:93:c4:31:8d:da:aa:ea:21:68:a2:
db:1f:81:ad:f6:ee:09:6f:2d:1d:3c:30:d9:90:ae:cf:47:61:
af:ad:7a:96:0c:4a:6f:03:90:aa:74:b0:9e:df:a7:4c:c9:6e:
01:51:c8:1d:ef:3b:d7:86:3c:8e:a8:dc:fa:27:da:0d:14:20:
f9:6b:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:20 2025 by rpki-client