Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/vhXFgyRtKNiI2V9Qnn4biPpyk7I.roa
File: vhXFgyRtKNiI2V9Qnn4biPpyk7I.roa (raw, json)
Hash identifier: ZJhhrRDMbqtFPjaD7v2UAMlPEPSNy0s0Z5Ts+Ekjp3Q=
Subject key identifier: BE:15:C5:83:24:6D:28:D8:88:D9:5F:50:9E:7E:1B:88:FA:72:93:B2
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019513709EB02142799651B9FE15EAD7734E
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/vhXFgyRtKNiI2V9Qnn4biPpyk7I.roa
Signing time: Mon 17 Feb 2025 10:25:02 +0000
ROA not before: Mon 17 Feb 2025 10:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29104
IP address blocks: 37.35.0.0/21 maxlen: 21
37.35.6.0/24 maxlen: 24
185.116.132.0/22 maxlen: 22
185.116.134.0/24 maxlen: 24
192.54.144.0/24 maxlen: 24
192.93.158.0/24 maxlen: 24
192.93.159.0/24 maxlen: 24
192.93.160.0/24 maxlen: 24
192.93.161.0/24 maxlen: 24
192.93.166.0/23 maxlen: 23
193.56.125.0/24 maxlen: 24
193.56.130.0/23 maxlen: 23
193.56.130.0/24 maxlen: 24
2a00:4f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 17 Feb 2025 14:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:70:9e:b0:21:42:79:96:51:b9:fe:15:ea:d7:73:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Feb 17 10:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be15c583246d28d888d95f509e7e1b88fa7293b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:34:08:a9:3a:d3:03:7e:d4:87:e9:38:ee:
e2:5f:07:ac:f1:47:20:17:b2:f0:de:c7:79:a2:f2:
97:d5:d5:d3:1e:4c:07:28:f4:07:a7:0c:07:f3:73:
2f:4e:0c:95:db:93:c2:84:f2:e2:78:fe:fc:38:67:
3d:98:5a:80:a0:c1:14:54:a7:18:f4:c6:1d:9a:c5:
f2:34:45:77:03:ed:8b:6a:4b:78:ad:bd:b4:6f:75:
31:01:51:18:0b:94:ee:90:63:52:20:8c:d4:e0:fd:
76:70:d1:1c:fb:7b:0b:4e:ca:cd:fe:6f:88:50:c9:
d8:b4:f6:04:4f:a9:42:c3:ae:c5:77:46:ca:d2:b6:
04:fc:e7:45:e8:5c:a6:56:f9:35:a7:b5:14:d7:96:
36:b2:11:b5:a2:2c:e4:7a:e7:5d:56:f4:15:d3:3c:
73:fc:97:85:e7:a4:85:82:3c:2e:cc:1e:3e:ab:4c:
62:b5:48:29:39:88:33:3a:a3:21:b9:32:26:52:35:
4e:33:9c:22:a2:f5:55:2a:c0:62:64:76:ed:2e:50:
8f:1e:b3:f3:39:d6:2a:d8:f9:64:26:2c:73:b9:43:
5e:42:4f:34:66:72:54:83:09:9f:8d:f5:a0:8b:ae:
da:f8:6b:df:14:ef:67:3d:97:82:7a:21:ca:6f:c2:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:C5:83:24:6D:28:D8:88:D9:5F:50:9E:7E:1B:88:FA:72:93:B2
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/vhXFgyRtKNiI2V9Qnn4biPpyk7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.0.0/21
185.116.132.0/22
192.54.144.0/24
192.93.158.0-192.93.161.255
192.93.166.0/23
193.56.125.0/24
193.56.130.0/23
IPv6:
2a00:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
65:9b:c2:95:1d:78:3c:7d:b2:cd:28:6f:dd:f2:60:91:66:b1:
28:f9:33:eb:2e:91:10:57:be:72:75:0e:6d:9d:70:55:92:e7:
8e:cf:7e:49:38:7c:2b:9f:2d:a3:ef:b3:96:29:bd:f6:91:c7:
e2:9d:88:80:da:3a:34:69:97:41:24:f1:53:93:7e:b9:ff:cd:
f9:d2:5d:d9:61:b5:d9:53:e2:4e:33:cb:ad:33:1d:e0:4c:c2:
a7:43:26:e1:e8:0f:f1:e2:95:a2:36:3a:a0:c3:58:7c:60:cf:
5a:f6:13:dc:24:fe:91:38:37:bf:8c:cd:ca:31:fc:bc:19:07:
2b:10:77:2d:e2:c7:e2:3f:2f:a6:aa:43:b2:bf:fb:c3:84:43:
34:8d:fe:19:13:7c:28:a3:7c:ee:90:6d:34:4f:71:8e:a2:b0:
02:93:27:9a:c1:7a:8d:e1:02:f1:a0:10:65:95:c0:31:bd:9f:
38:56:09:72:42:eb:2b:1f:b3:bc:55:82:b8:4b:ba:9a:68:73:
34:e9:87:05:c6:15:8a:43:ea:19:57:42:1f:1c:ba:4a:91:ee:
43:cf:2d:f3:ad:0e:15:4f:97:05:a8:3d:5f:e0:b5:2b:a5:37:
55:da:b1:a7:2f:b2:83:a2:f1:e1:16:09:52:19:bb:b9:c1:65:
6d:ab:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:16:56 2025 by rpki-client