Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/h8PZ5pPUes1Wci7zDMjjYM9KMkg.roa
File: h8PZ5pPUes1Wci7zDMjjYM9KMkg.roa (raw, json)
Hash identifier: ljYQXEJQuRIEDFAmmkTRFmBV6lNWKI+QTChD6kw9TiA=
Subject key identifier: 87:C3:D9:E6:93:D4:7A:CD:56:72:2E:F3:0C:C8:E3:60:CF:4A:32:48
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 018CC3B70561F90419887743FE28CBE5510B
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/h8PZ5pPUes1Wci7zDMjjYM9KMkg.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21346
IP address blocks: 195.22.158.0/24 maxlen: 24
193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:05:61:f9:04:19:88:77:43:fe:28:cb:e5:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c3d9e693d47acd56722ef30cc8e360cf4a3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:73:40:fb:bd:a4:18:27:59:27:d8:d6:a7:
d9:70:b5:8d:cd:fe:61:b6:73:76:94:02:8c:a6:5e:
15:0d:86:0a:83:98:7d:2c:42:56:96:9c:fe:05:ad:
bc:72:dc:c2:a3:73:18:b7:5a:77:b0:d8:bf:3f:e4:
ee:d4:21:d3:73:32:ba:7b:eb:fe:1a:60:e1:72:80:
e1:a0:9e:8e:8d:08:66:9d:b6:d0:a9:a1:37:60:a7:
b4:d4:de:c3:f0:d6:b8:0a:9d:fa:d7:d5:ee:6c:55:
50:6e:8b:fa:1c:dc:e1:5e:78:bf:18:74:0f:bd:d9:
38:60:e7:f5:0f:a6:7d:b3:97:96:08:7b:80:15:4f:
bf:6f:b9:99:97:37:49:6b:86:58:4e:2b:16:0c:b1:
33:7d:0d:07:c1:28:cb:61:b6:0c:9f:73:56:e2:19:
8c:69:37:08:e5:4f:5b:54:b1:19:6a:75:0f:c2:f1:
81:4c:a5:54:85:8a:0c:42:58:10:8c:81:c7:17:fd:
c3:ab:55:b5:1a:de:d0:76:80:00:b7:d3:b4:ad:e4:
4a:2c:c0:50:8f:df:1f:43:bb:70:29:57:9a:3c:60:
9b:23:94:b2:e4:a4:37:2b:cb:86:0b:77:11:19:fe:
57:d2:ac:2e:9d:9b:23:2c:b4:e3:f3:6c:38:41:42:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:D9:E6:93:D4:7A:CD:56:72:2E:F3:0C:C8:E3:60:CF:4A:32:48
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/h8PZ5pPUes1Wci7zDMjjYM9KMkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:6f:ea:fe:24:1a:63:bc:aa:3a:4a:82:14:30:40:3d:ab:76:
56:cb:23:b5:6e:8d:64:31:3a:c4:a8:d8:6a:5b:0c:ce:2a:7c:
74:84:91:f9:68:5b:6d:e4:80:6e:68:57:77:f9:71:1b:42:e2:
18:7a:8c:e9:99:ce:30:a1:9d:3a:a0:cc:1c:71:c3:61:6e:e6:
6f:82:78:86:8a:55:68:56:07:3c:c4:6f:69:fe:49:cf:4f:ff:
aa:16:e5:c5:33:4f:53:ac:8d:94:d8:e1:9d:d2:a7:68:02:15:
bb:b8:62:c5:d3:19:1e:cb:07:90:f1:e9:ad:d8:df:a9:1c:70:
df:b7:ad:d8:54:c8:dc:2b:a9:93:f4:e0:c0:de:06:21:c8:b3:
a3:af:f5:7b:b2:61:fc:6e:2f:ed:a6:4d:4c:b9:08:7c:bb:aa:
07:d0:c3:c0:1a:74:ea:a7:e4:c7:7f:fb:69:62:1f:6d:50:d4:
98:cc:ef:1a:33:41:76:2d:82:51:3f:6c:65:39:03:b2:b4:f1:
fe:d3:ea:23:ab:69:bb:8f:27:69:56:4c:59:90:3e:21:bd:0d:
b8:30:cb:44:3c:b7:5e:93:d0:52:3f:0c:c4:7c:48:f4:d3:e7:
9d:28:2f:1c:36:b6:36:6b:37:e1:60:c8:7f:1a:e7:7c:fb:93:
c7:48:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:01:29 2025 by rpki-client