Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/HvIJr2jGLl_Pol-c0mNWGwhRcPI.roa
File: HvIJr2jGLl_Pol-c0mNWGwhRcPI.roa (raw, json)
Hash identifier: kVJ5LSIcvxURkMJBhZmnW2ltuty864BXOp3HMpGFGuM=
Subject key identifier: 1E:F2:09:AF:68:C6:2E:5F:CF:A2:5F:9C:D2:63:56:1B:08:51:70:F2
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 01939D81B12C2CD15538392FA1496EC0983D
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/HvIJr2jGLl_Pol-c0mNWGwhRcPI.roa
Signing time: Fri 06 Dec 2024 19:45:42 +0000
ROA not before: Fri 06 Dec 2024 19:45:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
45.95.211.0/24 maxlen: 24
91.218.77.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
178.16.230.0/23 maxlen: 24
185.53.33.0/24 maxlen: 24
185.231.228.0/22 maxlen: 24
185.234.101.0/24 maxlen: 24
185.253.62.0/23 maxlen: 24
194.156.132.0/23 maxlen: 24
194.156.150.0/23 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:81:b1:2c:2c:d1:55:38:39:2f:a1:49:6e:c0:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Dec 6 19:45:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ef209af68c62e5fcfa25f9cd263561b085170f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:e7:5a:c9:6f:d6:32:6d:a8:a1:34:91:f8:
50:c1:ba:b1:0e:c6:7b:64:61:15:9c:ef:39:10:41:
57:12:b1:a1:55:b1:fe:dc:95:d6:13:8c:bc:0e:9a:
42:25:f4:ae:ae:72:51:8b:29:68:05:50:38:05:0f:
0c:c3:e2:1a:c5:1e:e5:06:ba:0a:ce:f5:71:1f:c5:
4c:a6:20:14:a6:6e:c0:2a:df:42:a0:e8:25:7e:d3:
1b:12:26:bc:9c:58:a6:1f:78:8c:63:12:37:26:75:
39:f6:3d:85:ed:e1:20:4e:f1:77:5c:30:6b:19:de:
17:14:93:94:c8:27:22:d1:bb:b8:1d:2e:01:c3:b6:
36:ac:ff:d1:b0:b1:e6:62:ac:9b:be:7d:0a:4b:fb:
0f:ed:ab:97:64:15:bc:ac:30:be:90:dc:f9:8a:dd:
69:db:a7:fa:63:48:57:a9:4a:ed:ac:3c:62:45:a2:
b5:9c:ce:34:ea:af:17:23:bf:cc:2d:4b:9a:89:03:
3e:d0:fd:7d:41:4e:13:ae:6d:f1:d3:6d:79:5c:c6:
b3:89:f4:39:20:07:bf:3c:33:28:71:ab:81:82:04:
1a:43:f6:62:c7:35:b1:07:01:78:66:0f:b6:9e:f5:
8a:61:55:9f:f8:d1:9d:80:fc:4f:56:92:a2:82:63:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:09:AF:68:C6:2E:5F:CF:A2:5F:9C:D2:63:56:1B:08:51:70:F2
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/HvIJr2jGLl_Pol-c0mNWGwhRcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
91.218.77.0/24
134.255.242.0/24
178.16.230.0/23
185.53.33.0/24
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
194.156.132.0/23
194.156.150.0/23
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
2f:2c:db:9e:2a:f5:29:dc:d3:d4:11:ee:52:63:d4:6d:80:3d:
88:e5:2b:fa:7b:d8:7b:08:af:52:4a:95:78:a2:b9:ca:57:24:
2d:b0:9f:75:39:a0:8f:09:2e:c1:86:ee:2b:5c:1e:13:af:26:
72:c4:e0:df:1d:3e:a4:c3:7f:43:7b:2c:dc:7d:66:f7:fe:80:
6f:74:2e:3d:cf:cb:74:eb:87:99:3b:4f:5b:b6:81:28:c1:62:
20:42:f6:33:ea:c2:82:89:d8:c9:58:be:d4:b6:df:14:ff:3b:
31:ce:f6:cc:c7:31:d3:d9:00:f6:83:32:90:db:7c:11:4a:f5:
5f:19:f0:82:19:57:c3:ae:c9:f7:e6:54:62:6f:77:50:c2:48:
1f:44:a4:1d:3e:97:2a:d0:b4:2d:a8:44:2f:85:77:78:b4:7f:
a3:d1:7d:64:6e:f8:9f:c8:0d:0c:fd:cc:32:8d:3f:7f:5e:bc:
a1:70:3e:4f:9f:9b:ce:ae:19:a2:5d:cb:39:92:48:94:04:c7:
f7:79:59:b6:6c:7b:73:cf:54:81:d0:74:4b:c9:42:56:62:c1:
e1:bb:b5:93:e5:98:18:d1:37:ee:bb:f0:4a:44:4d:6d:d9:fb:
b3:f1:9f:fc:dd:f2:82:af:a3:0e:a5:82:18:36:75:91:f8:3d:
c8:b0:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:39 2025 by rpki-client