Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/rrmr927F6oHFyAEEGns1Nsbf2q8.roa
File: rrmr927F6oHFyAEEGns1Nsbf2q8.roa (raw, json)
Hash identifier: uKlH1+RG/E4QNjnQImXui/X3JBCfJ6VeHlHY4XARPgI=
Subject key identifier: AE:B9:AB:F7:6E:C5:EA:81:C5:C8:01:04:1A:7B:35:36:C6:DF:DA:AF
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 01927582B1863DEBA7D3EB2D70B66AC24FAD
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/rrmr927F6oHFyAEEGns1Nsbf2q8.roa
Signing time: Thu 10 Oct 2024 08:19:12 +0000
ROA not before: Thu 10 Oct 2024 08:19:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204720
IP address blocks: 91.231.238.0/24 maxlen: 24
91.238.111.0/24 maxlen: 24
151.236.66.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.69.0/24 maxlen: 24
151.236.71.0/24 maxlen: 24
151.236.79.0/24 maxlen: 24
151.236.82.0/24 maxlen: 24
151.236.92.0/24 maxlen: 24
151.236.93.0/24 maxlen: 24
151.236.97.0/24 maxlen: 24
151.236.98.0/24 maxlen: 24
151.236.101.0/24 maxlen: 24
151.236.103.0/24 maxlen: 24
151.236.104.0/24 maxlen: 24
151.236.105.0/24 maxlen: 24
151.236.108.0/24 maxlen: 24
151.236.110.0/24 maxlen: 24
151.236.112.0/24 maxlen: 24
151.236.114.0/24 maxlen: 24
151.236.115.0/24 maxlen: 24
151.236.116.0/24 maxlen: 24
151.236.117.0/24 maxlen: 24
151.236.118.0/24 maxlen: 24
151.236.119.0/24 maxlen: 24
151.236.120.0/24 maxlen: 24
151.236.121.0/24 maxlen: 24
151.236.124.0/24 maxlen: 24
151.236.126.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
185.31.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:82:b1:86:3d:eb:a7:d3:eb:2d:70:b6:6a:c2:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Oct 10 08:19:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeb9abf76ec5ea81c5c801041a7b3536c6dfdaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:1c:0d:3c:44:18:54:d4:31:63:53:6b:d6:
fa:c7:be:bc:5d:f6:f0:c7:b9:d2:d4:11:aa:ca:6c:
86:a0:ed:2c:f0:3d:b2:2f:ca:81:f8:0b:3c:cb:ef:
db:20:ae:e5:89:35:1b:f9:30:df:68:71:d6:e4:a2:
82:f9:cf:3d:d3:1d:a3:ed:52:f8:95:49:60:40:cc:
65:7b:c9:e0:0d:9c:bf:1c:40:63:10:2c:cb:bd:4e:
f1:e5:ba:de:4d:59:74:c9:1f:f5:1d:aa:cb:16:bd:
fa:fc:43:ac:c0:dd:1f:13:16:ed:86:b8:66:fd:87:
54:2b:43:b3:4c:89:cc:2e:1e:23:87:a3:24:be:73:
a0:9a:fd:2d:7f:22:9c:3c:38:61:e8:04:40:28:bb:
fa:8d:f1:b4:77:5b:d8:47:46:92:03:51:b1:56:3f:
99:4a:cf:f4:2f:7e:1d:19:a2:e2:8a:9e:bc:92:6d:
09:a2:91:4c:b4:cc:7c:c2:71:9e:fb:ce:b1:00:bb:
54:9f:16:c9:c5:e0:67:9e:45:3b:e9:f2:22:d2:bb:
47:3c:bd:f5:4c:d1:1a:48:30:5e:3c:48:6d:fd:c2:
38:15:91:22:92:26:d7:f5:7e:c7:49:86:f6:2b:0a:
f6:c1:8a:da:83:c0:97:66:ef:0c:c9:6f:24:a5:ff:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:AB:F7:6E:C5:EA:81:C5:C8:01:04:1A:7B:35:36:C6:DF:DA:AF
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/rrmr927F6oHFyAEEGns1Nsbf2q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.238.0/24
91.238.111.0/24
151.236.66.0/24
151.236.68.0/23
151.236.71.0/24
151.236.79.0/24
151.236.82.0/24
151.236.92.0/23
151.236.97.0-151.236.98.255
151.236.101.0/24
151.236.103.0-151.236.105.255
151.236.108.0/24
151.236.110.0/24
151.236.112.0/24
151.236.114.0-151.236.121.255
151.236.124.0/24
151.236.126.0/23
185.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:a4:ea:d6:b6:b3:6d:48:f5:07:b8:d8:23:da:ec:a1:4f:
1d:a9:1a:5a:ba:b3:7b:55:85:34:63:fd:6e:1f:0b:1c:b0:c4:
6d:9d:3c:6d:66:66:6e:9f:44:88:56:23:d9:d1:0a:d8:24:be:
6a:d4:74:19:ee:72:86:20:b0:e9:bc:ac:4b:3e:44:26:a6:05:
35:aa:06:27:ca:3b:8b:87:33:38:11:32:9a:88:43:77:a7:eb:
7f:34:15:bd:68:81:44:74:2c:3e:5b:7d:8b:c6:61:bc:71:cf:
3a:b7:df:60:81:7f:e2:b3:f7:b7:e7:23:91:b7:72:32:4b:f6:
7c:d2:9c:2b:c2:6a:61:c2:53:03:15:50:2d:2c:59:d5:39:3d:
e4:c2:b9:ae:21:03:fb:59:73:1c:4c:d6:d9:69:6f:af:2d:fe:
45:07:38:cf:f4:89:ad:c2:20:6a:fc:0b:f7:8c:af:aa:4f:c5:
21:a4:d5:8a:c0:70:cd:6d:81:e8:a7:0b:7b:9d:0e:a8:db:56:
1a:9c:a3:45:7d:48:81:2b:58:97:49:a8:d9:4e:54:ee:2f:ab:
95:59:f8:f8:bb:6a:74:eb:95:6a:fb:5d:49:7c:31:e8:29:86:
a1:7e:e6:43:62:c3:0f:2d:d9:58:1c:d3:0f:7d:c4:cd:98:25:
12:33:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:32 2025 by rpki-client