Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/D3VDNmjubCiirs5JnIsG9mNpt8o.roa
File: D3VDNmjubCiirs5JnIsG9mNpt8o.roa (raw, json)
Hash identifier: z34nW/HbOfKWXr4wpgHGwHb8QffxiIEwHDwRf3/LaCU=
Subject key identifier: 0F:75:43:36:68:EE:6C:28:A2:AE:CE:49:9C:8B:06:F6:63:69:B7:CA
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F38F8BD7C0DD370EC3008FEE8F6E09706
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/D3VDNmjubCiirs5JnIsG9mNpt8o.roa
Signing time: Thu 02 May 2024 11:02:56 +0000
ROA not before: Thu 02 May 2024 11:02:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204769
IP address blocks: 85.117.241.0/24 maxlen: 24
192.144.34.0/24 maxlen: 24
193.38.248.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
2a09:ff00:104::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 17:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:f8:bd:7c:0d:d3:70:ec:30:08:fe:e8:f6:e0:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 2 11:02:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f75433668ee6c28a2aece499c8b06f66369b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:9c:54:b8:91:29:c4:c5:46:cd:08:4d:a5:
c1:f8:94:79:a0:25:10:87:cf:5f:5d:2e:dc:93:bc:
99:21:58:8b:3b:9b:0c:c5:bd:b3:e6:69:bf:33:e6:
b8:70:d4:91:2f:ec:6e:15:d3:25:c9:dd:70:f4:d7:
08:82:66:ee:29:fa:64:b5:73:a2:b8:60:40:68:a9:
d4:b1:5c:af:0f:19:eb:45:eb:ab:97:2e:ee:b0:93:
2a:63:7e:8e:42:2b:22:3a:b3:d5:1c:c0:50:24:8e:
da:80:f9:94:f6:57:26:f5:61:1d:54:10:b8:8d:94:
77:52:5b:1a:04:2a:85:15:ae:6e:3e:a3:10:86:84:
3c:94:25:e7:28:fc:0d:a8:ba:ef:60:7e:71:7c:60:
19:86:52:86:44:4e:d2:d6:32:46:12:e6:8d:ed:1d:
72:3e:b2:3c:11:17:0e:fe:b1:21:66:7b:26:7d:4f:
bb:c8:ab:a5:9a:9b:5f:35:a7:15:a5:c9:86:e5:02:
0d:77:b2:35:c5:23:f2:4c:43:a7:28:ed:8f:67:82:
e5:ee:9d:f8:48:01:d8:a4:0c:32:cd:b7:c8:a7:f8:
22:fc:9a:0a:71:1b:40:63:2c:04:e2:84:b8:75:32:
8a:63:00:f4:60:82:89:94:40:76:29:4d:d1:27:ac:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:75:43:36:68:EE:6C:28:A2:AE:CE:49:9C:8B:06:F6:63:69:B7:CA
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/D3VDNmjubCiirs5JnIsG9mNpt8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.241.0/24
192.144.34.0/24
193.38.248.0/24
IPv6:
2a09:ff00:103::-2a09:ff00:104:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:4f:39:d1:4e:57:6b:c7:a8:1f:f7:e2:d9:95:bf:5d:21:f5:
ca:45:92:4b:a3:7c:94:57:f4:ea:8e:90:8f:84:c1:dc:d6:28:
c9:16:f5:08:43:80:d2:61:47:1c:4a:47:04:64:87:3f:d5:37:
55:6e:72:ed:6b:19:1f:28:78:d6:c7:03:6a:93:7e:6b:8a:c4:
ed:ca:9d:0a:bb:ad:9b:9f:c5:e3:72:36:de:15:b9:60:65:bd:
6f:82:12:6f:75:28:82:43:d1:ef:4e:d4:23:b5:86:78:69:11:
8a:ed:88:b2:ec:55:5d:af:ae:77:e3:73:99:17:9c:30:5e:fd:
a7:22:ca:00:85:48:04:b1:ad:cb:f8:ce:5a:67:f8:ac:d5:31:
43:fe:34:9c:f3:16:fd:44:f2:fb:8f:db:10:c5:c3:7e:b4:4b:
5e:f9:1d:95:36:f1:32:70:31:46:42:ba:d4:77:61:7e:ee:ec:
33:29:15:b8:83:0d:f5:85:a7:9e:e2:f1:39:c0:1b:c2:d0:65:
7b:53:c3:08:ac:11:f7:a1:46:68:7b:1f:9c:62:38:7d:bf:d3:
24:e4:f9:85:22:6e:1e:ee:ea:ae:bf:1e:f6:96:be:c1:e5:9a:
e4:bd:b7:f2:ec:5b:7d:b6:24:b9:0f:d5:86:03:2a:b7:d5:28:
eb:cf:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:02 2025 by rpki-client