Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7M8FHD5TwMQqHSkBSeE7imxEJG0.roa
File: 7M8FHD5TwMQqHSkBSeE7imxEJG0.roa (raw, json)
Hash identifier: FXaWypDdJMjkt2eyg9IzNnfd5V9KiCWVg7nrfAmxF7c=
Subject key identifier: EC:CF:05:1C:3E:53:C0:C4:2A:1D:29:01:49:E1:3B:8A:6C:44:24:6D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282471CB9316A01C6F07C0D9BCCD2D54
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7M8FHD5TwMQqHSkBSeE7imxEJG0.roa
Signing time: Thu 02 Jan 2025 17:51:04 +0000
ROA not before: Thu 02 Jan 2025 17:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34577
IP address blocks: 37.60.141.0/24 maxlen: 32
87.120.0.0/22 maxlen: 32
87.120.12.0/24 maxlen: 32
87.120.14.0/23 maxlen: 32
87.120.44.0/23 maxlen: 32
87.120.45.119/32 maxlen: 32
87.120.178.0/23 maxlen: 32
87.120.180.0/22 maxlen: 32
87.120.184.0/23 maxlen: 32
87.120.190.0/24 maxlen: 32
87.121.48.0/22 maxlen: 32
87.121.88.0/23 maxlen: 32
93.123.40.0/22 maxlen: 32
93.123.40.0/24 maxlen: 32
93.123.41.0/24 maxlen: 32
93.123.42.0/24 maxlen: 32
93.123.43.0/24 maxlen: 32
93.123.44.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.66.0/24 maxlen: 32
93.123.67.0/24 maxlen: 32
93.123.96.0/22 maxlen: 32
94.156.123.0/24 maxlen: 32
212.73.149.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 Jan 2025 08:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:71:cb:93:16:a0:1c:6f:07:c0:d9:bc:cd:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eccf051c3e53c0c42a1d290149e13b8a6c44246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:33:b5:8a:c8:93:a0:01:43:0a:6a:df:9d:
09:c3:9a:5b:69:fa:42:04:6e:3e:13:e1:5f:20:30:
4a:70:c2:4b:8e:b5:2a:ea:25:ee:04:6a:1a:13:e7:
5f:a6:23:84:73:e1:57:4f:f8:a0:35:92:a4:e2:c8:
cb:e0:c1:d1:e0:57:56:54:3b:29:4f:dd:4f:a9:19:
34:56:43:2b:27:b3:c8:ea:dc:ed:55:1c:39:b8:92:
e7:07:dd:c4:3f:e4:1e:55:35:87:50:b0:97:10:4f:
e4:88:af:26:23:db:bb:e3:32:e4:1e:be:e1:8c:90:
53:d5:60:ae:5c:8d:a2:37:ed:f2:9f:7c:d2:84:bf:
4d:96:7c:13:2c:03:01:2b:1e:18:32:98:5e:01:17:
b3:2d:a8:54:3d:bc:0a:8a:a4:32:28:bc:a9:ff:c7:
3d:24:af:73:24:65:43:bc:3d:24:ae:12:04:eb:b0:
bc:ed:e7:7f:c4:6b:be:cf:3d:4a:b4:f7:e5:77:74:
89:86:80:6a:c8:91:7e:2b:30:c7:86:d6:c4:fe:04:
fd:63:f5:09:20:d7:fd:44:b0:39:c7:06:f0:33:e3:
76:98:55:41:24:be:0a:43:e6:d8:4d:9f:ad:f7:9f:
f7:f2:2a:e5:4c:24:6d:e1:14:29:d3:f4:a6:9a:55:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:05:1C:3E:53:C0:C4:2A:1D:29:01:49:E1:3B:8A:6C:44:24:6D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7M8FHD5TwMQqHSkBSeE7imxEJG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.185.255
87.120.190.0/24
87.121.48.0/22
87.121.88.0/23
93.123.40.0-93.123.44.255
93.123.47.0/24
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a4:1a:b6:b5:82:98:5a:ac:91:8e:a5:ba:15:68:97:63:56:
b4:6b:d2:21:b7:ab:d1:57:84:bb:4f:23:db:8c:d6:14:0a:3f:
6d:03:d7:a7:8a:de:27:9e:0c:bb:02:ba:ac:8c:93:1e:f4:a3:
3e:7f:ba:ce:0b:dd:62:97:d5:3c:92:46:56:a5:6a:16:0d:c5:
fd:92:24:bf:7c:f3:e5:8e:f8:5d:44:84:19:da:58:fe:c3:a5:
16:d7:67:a3:8f:06:ff:9f:ee:1c:d8:b1:88:d6:cd:0f:28:05:
db:39:9f:19:a0:43:33:df:cf:fc:99:30:e1:af:69:e2:5d:a5:
99:71:29:57:ef:7e:30:1d:8d:87:4a:65:98:f7:78:21:a3:4f:
52:ee:80:a8:cb:79:b5:03:f3:c5:7e:e4:b0:ff:6e:df:f0:49:
ec:2e:7e:18:f8:6b:2f:74:64:7e:fe:b0:63:d5:a1:a0:37:fa:
8a:61:97:01:2e:81:04:52:0b:2b:31:16:86:0c:cb:d3:63:2b:
58:36:c6:17:1d:96:c3:4e:46:e9:6b:b1:83:3c:5c:80:c2:b5:
d0:3d:c2:5e:ae:9c:ce:f5:94:a4:8c:4d:ec:b5:d5:72:d6:9f:
5c:e5:8a:13:68:66:6a:fe:05:d9:24:77:b8:f3:c2:49:71:07:
64:91:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:31 2025 by rpki-client