Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JAmHmcONu1lu9B03yi4gxP_9lKg.roa
File: JAmHmcONu1lu9B03yi4gxP_9lKg.roa (raw, json)
Hash identifier: WDWtyE3FELHUG2qUOUgB0s3T2L/6GpUSa2VLku5j8nc=
Subject key identifier: 24:09:87:99:C3:8D:BB:59:6E:F4:1D:37:CA:2E:20:C4:FF:FD:94:A8
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01938C07031A867898B1D9EC0AD4220E4023
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JAmHmcONu1lu9B03yi4gxP_9lKg.roa
Signing time: Tue 03 Dec 2024 10:18:09 +0000
ROA not before: Tue 03 Dec 2024 10:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44928
IP address blocks: 37.148.128.0/21 maxlen: 21
93.88.144.0/20 maxlen: 20
95.155.128.0/19 maxlen: 19
95.155.160.0/20 maxlen: 20
95.155.176.0/21 maxlen: 21
152.89.84.0/22 maxlen: 22
2a00:c0c0::/32 maxlen: 32
2a02:520::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:07:03:1a:86:78:98:b1:d9:ec:0a:d4:22:0e:40:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Dec 3 10:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24098799c38dbb596ef41d37ca2e20c4fffd94a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:b2:6b:af:10:85:4f:7b:36:57:95:dd:0f:
b1:6b:e3:4c:03:a8:40:fd:32:84:32:44:f5:a7:3e:
fe:e3:bb:0d:b0:40:73:2d:62:dd:d2:84:5a:39:e3:
b1:69:05:a1:a2:82:18:9f:e9:6b:a6:2d:07:d1:08:
08:20:6e:06:6c:7a:e7:51:d2:71:91:07:33:50:95:
2f:1d:30:60:be:01:59:37:3e:e9:0a:0e:75:24:89:
ef:80:93:56:12:8d:31:26:df:14:ab:71:bc:c8:f5:
be:6d:2d:93:37:e4:3d:91:c5:7f:db:b6:10:7a:a8:
4c:28:40:6e:7b:71:0a:ed:c2:3d:a2:d5:49:0a:52:
6b:c7:e0:89:0f:b9:04:06:54:68:7e:48:aa:19:3c:
7b:48:51:a7:43:c8:66:63:76:c2:71:31:22:c8:69:
52:c3:d9:f0:0e:d6:d8:da:a9:3e:db:a0:23:e3:f6:
a5:80:cb:58:b7:af:0f:77:a9:b6:3e:a3:88:d9:c9:
84:39:77:8f:a0:cb:aa:6a:ff:12:fb:5e:6f:ef:77:
fd:70:68:cf:5a:22:2f:33:5a:ea:ee:cb:3f:ae:c0:
2d:f9:91:26:ce:7e:00:67:eb:ed:5d:f3:57:9e:12:
ae:20:c4:ef:fc:6b:40:d2:fa:f0:1c:04:3d:63:88:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:87:99:C3:8D:BB:59:6E:F4:1D:37:CA:2E:20:C4:FF:FD:94:A8
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JAmHmcONu1lu9B03yi4gxP_9lKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/21
93.88.144.0/20
95.155.128.0-95.155.183.255
152.89.84.0/22
IPv6:
2a00:c0c0::/32
2a02:520::/32
Signature Algorithm: sha256WithRSAEncryption
5a:6d:90:eb:70:8b:82:73:50:2e:e7:41:5a:72:54:37:00:ee:
19:8d:15:3b:e8:1a:a4:52:57:26:59:70:0c:bd:49:ee:43:3e:
86:82:a1:23:3a:e9:7f:a0:b5:b9:1a:33:7f:07:cd:96:8a:b1:
a4:71:18:83:98:1d:fa:87:d9:ef:c6:b2:2f:78:e0:bc:96:20:
b6:76:88:f2:42:72:08:b5:42:47:8f:77:19:01:0c:cb:5a:00:
ae:a0:18:e5:20:12:72:94:52:f4:ff:0d:4f:3f:bd:39:ee:3e:
31:27:76:26:78:21:5b:2a:b9:01:75:1b:28:e0:c3:b7:86:db:
3f:54:d7:54:5e:6f:64:f2:62:4b:12:53:13:42:65:b4:29:88:
ee:24:3a:c4:96:08:21:0e:b2:ab:7f:ee:a6:25:50:d0:02:4f:
e7:08:f4:56:de:a1:02:0c:f4:d6:81:09:e5:83:06:a8:fb:97:
d3:18:68:e3:7d:c6:77:c7:d6:d1:1f:e7:3e:06:e1:06:52:4a:
ab:bb:b6:50:26:61:3a:65:89:bd:48:cc:d6:f8:b6:e7:8b:e0:
32:85:91:5d:0e:04:5c:76:76:a7:c9:3e:d2:99:f8:8d:ea:af:
a0:54:12:0e:46:58:18:1f:2c:8d:01:e8:7d:63:70:b3:ed:1e:
47:90:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:29:34 2025 by rpki-client