Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/pvuIm4oX46i-G9rIehNqzu0dR20.roa
File: pvuIm4oX46i-G9rIehNqzu0dR20.roa (raw, json)
Hash identifier: KymbnqnWnIW1V3vX0QgT+b2MWzvp7T2NjvFo1nKhiAE=
Subject key identifier: A6:FB:88:9B:8A:17:E3:A8:BE:1B:DA:C8:7A:13:6A:CE:ED:1D:47:6D
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 018DBCB25B4DB5ED7DE6AB2294E10442EF29
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/pvuIm4oX46i-G9rIehNqzu0dR20.roa
Signing time: Sun 18 Feb 2024 14:50:21 +0000
ROA not before: Sun 18 Feb 2024 14:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200184
IP address blocks: 67.63.56.0/21 maxlen: 24
67.63.61.0/24 maxlen: 24
80.75.216.0/24 maxlen: 24
2a13:f800::/29 maxlen: 64
2a13:f800:1001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Feb 2024 19:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:b2:5b:4d:b5:ed:7d:e6:ab:22:94:e1:04:42:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Feb 18 14:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6fb889b8a17e3a8be1bdac87a136aceed1d476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:71:b9:de:60:2e:3b:59:d3:59:3a:ae:de:
61:2a:a1:9e:64:ac:b0:ba:56:f5:04:15:d9:b3:68:
94:b7:c0:a2:68:94:c7:1f:cb:e1:a9:c6:53:57:2e:
47:3c:69:e7:f7:4f:05:58:70:3e:0b:b7:2b:16:08:
5b:0a:2d:f6:9c:8a:32:20:a2:5e:9c:99:33:48:bc:
f5:09:7b:fd:3c:09:02:d1:ba:58:a2:82:c5:b0:fc:
b4:8c:27:6e:cb:a3:c0:1b:92:84:cd:20:0d:7c:e5:
cb:88:ee:01:8c:aa:e7:13:e7:c6:f8:5a:bc:8d:30:
d2:9c:16:ae:12:fc:a4:b7:3c:f1:c8:34:cc:fb:94:
55:15:ca:e3:b8:f9:35:17:fc:f5:f9:40:e7:49:ea:
2b:0d:33:94:01:ad:d1:82:29:59:62:4a:e5:d7:d5:
43:01:ef:5e:9f:46:9e:28:d6:9b:14:c9:7c:a8:2f:
57:ea:31:55:21:d7:42:6f:46:55:69:2d:c6:25:88:
34:12:5f:68:c4:89:72:71:05:04:0e:42:cf:d9:65:
0e:22:5a:2d:d4:09:b9:c2:16:2d:fe:08:0b:bf:0a:
54:42:96:53:9e:ba:31:ed:ba:bb:b0:c2:4b:d9:fc:
16:cb:7e:81:64:b9:34:8d:39:68:7e:5d:3f:0c:af:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FB:88:9B:8A:17:E3:A8:BE:1B:DA:C8:7A:13:6A:CE:ED:1D:47:6D
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/pvuIm4oX46i-G9rIehNqzu0dR20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.56.0/21
80.75.216.0/24
IPv6:
2a13:f800::/29
Signature Algorithm: sha256WithRSAEncryption
40:98:bb:16:63:01:f7:8b:ef:d2:9a:5b:8a:d3:ca:eb:50:a4:
12:dd:92:e7:16:48:fa:f1:0b:0b:86:81:1b:86:8f:f1:1c:01:
67:fd:61:85:5a:3e:76:e3:69:12:7b:08:5d:39:d8:5d:3e:36:
13:22:76:22:57:76:66:9d:7b:24:16:27:a2:19:17:38:e0:b2:
51:ee:34:6a:13:cf:6d:05:4e:0f:e1:6a:cc:6a:d4:f6:c0:9d:
8b:21:b7:3e:c7:fe:34:13:4f:67:4c:ac:0c:34:45:20:05:d5:
cd:db:61:10:ad:00:67:96:13:88:7f:78:41:36:bf:95:53:cd:
61:df:8f:37:6e:8d:1c:b1:d1:dd:69:36:2f:4e:34:db:73:80:
e8:b6:4c:0c:19:c0:79:14:25:fc:d3:e7:87:51:34:d0:83:cd:
35:9a:27:12:34:ca:b8:31:fc:88:0c:ab:dd:8e:0e:0a:6a:87:
aa:53:a2:ed:bb:2f:dd:c6:34:86:f7:ee:80:a5:62:9c:10:2b:
f2:37:f2:3a:c6:f1:dc:dd:82:4d:a7:86:e6:fe:58:84:df:50:
77:db:b7:72:b5:47:d4:c3:86:db:cf:25:b9:29:f1:68:cc:47:
23:5c:21:7f:31:62:ec:34:8b:5b:b2:8d:64:30:52:bd:75:5d:
7c:93:3f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:36 2025 by rpki-client