Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/0VEVvoG5HGvob3nGydzwLxlbcPA.roa
File: 0VEVvoG5HGvob3nGydzwLxlbcPA.roa (raw, json)
Hash identifier: ceRaAbblm2RcWLeav32VPDinuFPuUqVHnKlo6HzbMzc=
Subject key identifier: D1:51:15:BE:81:B9:1C:6B:E8:6F:79:C6:C9:DC:F0:2F:19:5B:70:F0
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 018CCA2A5CECCA5EC7573E352EAD39B81E61
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/0VEVvoG5HGvob3nGydzwLxlbcPA.roa
Signing time: Tue 02 Jan 2024 12:33:43 +0000
ROA not before: Tue 02 Jan 2024 12:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62040
IP address blocks: 185.49.240.0/24 maxlen: 24
185.49.243.0/24 maxlen: 24
185.49.242.0/24 maxlen: 24
185.49.241.0/24 maxlen: 24
193.176.83.0/24 maxlen: 24
193.176.80.0/24 maxlen: 24
2a04:bb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5c:ec:ca:5e:c7:57:3e:35:2e:ad:39:b8:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jan 2 12:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15115be81b91c6be86f79c6c9dcf02f195b70f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:02:f3:46:b3:1c:29:ef:19:ad:d9:48:fd:
e1:0a:b2:c3:90:4e:d6:61:a5:a8:82:41:52:dc:af:
42:0d:24:ff:ec:00:ba:a6:a6:a8:4f:d6:aa:69:2d:
3a:88:17:a8:40:78:ca:0e:49:23:39:35:25:9f:be:
b6:cc:e9:9f:dd:39:f4:f4:19:bc:2a:b3:7e:31:b4:
23:4b:d2:c4:f1:1a:d2:d1:00:14:7a:10:f0:6e:14:
e0:ec:a8:09:26:17:cf:2e:ba:31:9e:ce:14:66:98:
f9:9e:90:5c:3b:8a:74:ea:ed:7e:8a:29:98:ff:04:
ae:f6:81:9d:74:92:ac:2e:26:c4:9c:e5:bb:be:9f:
2c:71:53:0e:37:e0:6f:66:ec:f9:86:ab:76:4d:20:
ce:c1:a3:df:b8:e8:38:7a:f7:4b:05:ff:44:90:07:
3b:ab:30:5f:2d:79:3a:d1:ef:67:61:1e:f2:5f:59:
2d:5c:11:c3:77:ed:b3:12:13:2a:fc:7e:f8:96:12:
7c:04:f3:48:2b:d2:2d:6a:c7:f6:4f:18:aa:eb:b2:
c4:32:7a:19:fa:e2:ec:2d:fc:f0:c9:36:e0:89:27:
6d:37:2b:c1:6e:c3:78:1c:bf:75:65:ac:15:7a:66:
95:17:d1:b5:5b:f5:37:7c:c1:80:f5:3a:58:e6:26:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:51:15:BE:81:B9:1C:6B:E8:6F:79:C6:C9:DC:F0:2F:19:5B:70:F0
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/0VEVvoG5HGvob3nGydzwLxlbcPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.240.0/22
193.176.80.0/24
193.176.83.0/24
IPv6:
2a04:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
44:0c:40:dc:1d:6e:26:6c:54:22:23:2e:05:21:24:03:79:ab:
ac:ec:38:40:9e:cd:77:99:80:f4:b7:9f:22:77:11:95:8a:5a:
37:e2:5f:27:73:4a:82:c0:49:42:ec:46:7c:f9:7c:ad:00:6f:
3b:6c:45:6f:31:7d:49:41:84:7e:74:c3:25:a2:19:f8:a9:ae:
20:5a:02:83:98:9d:4e:6e:82:fe:f2:3a:13:5a:15:ec:0e:7e:
de:ab:e3:fe:36:2d:3f:55:2f:fc:b5:de:cc:71:64:6d:56:ce:
9b:04:2d:fb:31:8f:fb:a0:42:30:bf:b1:f9:84:be:0e:8a:d5:
35:a6:50:f4:1b:47:79:0a:75:96:3c:bd:6c:19:c1:be:de:db:
e9:16:27:3f:c6:52:1e:60:18:e6:f7:e8:26:b7:72:07:70:b6:
70:d1:32:0e:9a:ec:13:91:7f:d3:50:b3:56:3e:24:06:b7:4d:
22:7d:40:7f:a7:8d:d7:5b:e5:fc:62:cf:f9:26:67:2b:fb:c9:
79:95:54:14:fd:f1:9c:6a:20:ac:dc:09:e8:c2:e8:c8:d8:62:
8b:31:3b:b2:80:5f:ed:9e:8f:cd:38:5a:3d:a8:59:d1:fe:30:
48:7a:a9:4c:2d:e3:a6:c1:f9:30:80:4a:f9:0a:fe:e1:a3:3b:
b4:c1:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:14 2025 by rpki-client