Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/0Y1KlOUS5GzjMfgcPHyrKsrkeRg.roa
File: 0Y1KlOUS5GzjMfgcPHyrKsrkeRg.roa (raw, json)
Hash identifier: Reqvh0B6athn+pZqIfD7PTti0PaiByhWjU1l91LsLtI=
Subject key identifier: D1:8D:4A:94:E5:12:E4:6C:E3:31:F8:1C:3C:7C:AB:2A:CA:E4:79:18
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01910E2D2235CBD427E073A425321165DF7C
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/0Y1KlOUS5GzjMfgcPHyrKsrkeRg.roa
Signing time: Thu 01 Aug 2024 13:42:04 +0000
ROA not before: Thu 01 Aug 2024 13:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201565
IP address blocks: 89.35.206.0/24 maxlen: 24
89.35.207.0/24 maxlen: 24
94.176.184.0/24 maxlen: 24
94.176.185.0/24 maxlen: 24
185.11.232.0/22 maxlen: 22
185.59.96.0/22 maxlen: 22
185.62.248.0/24 maxlen: 24
185.62.249.0/24 maxlen: 24
185.62.250.0/24 maxlen: 24
185.62.251.0/24 maxlen: 24
185.91.148.0/24 maxlen: 24
185.91.149.0/24 maxlen: 24
185.91.150.0/24 maxlen: 24
185.91.151.0/24 maxlen: 24
2a03:7e40::/36 maxlen: 36
2a03:7e40:1000::/36 maxlen: 36
2a03:7e40:2000::/36 maxlen: 36
2a03:7e40:3000::/36 maxlen: 36
2a03:7e40:4000::/36 maxlen: 36
2a03:7e40:5000::/36 maxlen: 36
2a03:7e40:6000::/36 maxlen: 36
2a03:7e40:7000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 02 Aug 2024 09:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:2d:22:35:cb:d4:27:e0:73:a4:25:32:11:65:df:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Aug 1 13:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d18d4a94e512e46ce331f81c3c7cab2acae47918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:7b:27:79:27:d5:8f:5d:ef:38:e3:08:a9:
4d:b3:ee:80:25:16:6d:4f:55:91:79:e0:33:77:e2:
94:06:54:37:18:a8:4d:b4:1d:cd:52:5d:2f:c3:15:
3d:40:46:f8:5a:b6:b0:2c:a8:f7:2e:c5:3e:dc:5a:
b9:a1:ab:9c:28:ef:a6:12:08:65:c5:98:51:83:3d:
89:c6:aa:c6:a6:b0:b4:f9:90:cd:9a:dc:e2:f2:1c:
9b:0a:0c:4f:7a:f0:6f:40:db:f8:76:7c:bd:7a:03:
33:ca:5a:48:7b:16:23:03:a0:37:c8:a8:17:ac:5e:
b9:fb:10:d0:4a:43:a4:74:49:65:44:3a:b7:76:91:
76:ba:4c:92:1d:9c:87:ba:e5:84:78:56:ae:ba:5d:
bf:91:6b:c7:6f:3a:84:cb:06:c6:4a:52:19:3c:fd:
90:39:0c:ed:ff:22:9e:f9:f3:2b:b2:35:d7:81:70:
27:39:de:5a:96:3b:22:dd:54:55:0f:05:e8:23:a4:
5d:ab:84:85:2c:e4:7e:ae:49:dd:55:c4:67:0a:6c:
73:ae:32:21:35:03:63:34:9d:3e:92:b4:b1:6d:20:
ba:5e:67:7e:15:15:5e:9e:00:21:bd:2b:69:86:2f:
0d:7b:6a:bf:81:89:07:26:29:e2:b7:ab:eb:0a:15:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:4A:94:E5:12:E4:6C:E3:31:F8:1C:3C:7C:AB:2A:CA:E4:79:18
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/0Y1KlOUS5GzjMfgcPHyrKsrkeRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.62.248.0/22
185.91.148.0/22
IPv6:
2a03:7e40::/33
Signature Algorithm: sha256WithRSAEncryption
57:15:b8:21:f8:74:d6:51:49:26:03:e3:63:15:c9:bf:23:94:
9f:37:26:f5:40:07:32:fb:c7:5b:94:6e:b9:fc:fc:0b:6e:e9:
bc:98:40:3b:33:87:b9:24:c6:6f:bf:85:cb:7b:b9:5b:48:8a:
32:2c:9e:1c:87:7c:84:28:23:61:dc:98:70:9c:dc:1f:a9:c1:
e9:74:0b:c2:02:85:12:16:f3:70:cd:ae:64:f9:f7:21:0f:44:
c0:c4:9c:51:28:fb:66:34:3b:fd:c7:ac:59:5a:12:e9:97:94:
4c:29:c6:9f:a0:e9:b1:3c:47:e4:92:3e:bd:34:69:e7:29:04:
2f:1a:5c:f8:51:ae:f8:01:88:63:c9:09:f8:a9:23:e3:45:3b:
37:2c:0e:99:49:3f:64:01:b8:e9:9e:fe:57:51:5a:87:82:61:
e3:ab:d4:db:22:84:eb:7d:56:49:d6:0c:e8:79:6e:46:7c:a5:
5b:83:04:95:31:3b:47:53:14:86:19:67:6d:49:e5:fc:50:50:
a5:b3:c0:25:85:3e:52:5b:49:52:12:57:64:2c:9e:9a:77:14:
f7:70:24:11:11:48:06:7f:f8:02:15:86:46:cf:04:7d:38:d0:
7c:ff:f1:64:d1:c9:35:b5:ef:51:66:50:69:06:48:45:9e:e9:
67:be:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:47:06 2025 by rpki-client