Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/E33Bhn5nnBOHcRlF0GNxVGu5G3g.roa
File: E33Bhn5nnBOHcRlF0GNxVGu5G3g.roa (raw, json)
Hash identifier: JPKsy1n0tRano1E+4vHCIyCPK0haBkC73t6ct8aCwk0=
Subject key identifier: 13:7D:C1:86:7E:67:9C:13:87:71:19:45:D0:63:71:54:6B:B9:1B:78
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0193539BA7B00DD0264589929BB1AD227459
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/E33Bhn5nnBOHcRlF0GNxVGu5G3g.roa
Signing time: Fri 22 Nov 2024 11:22:10 +0000
ROA not before: Fri 22 Nov 2024 11:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60341
IP address blocks: 185.32.232.0/22 maxlen: 22
185.45.116.0/22 maxlen: 22
185.47.20.0/22 maxlen: 22
185.50.92.0/22 maxlen: 24
2a00:c660::/29 maxlen: 29
2a00:c660::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 23 Dec 2024 13:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:9b:a7:b0:0d:d0:26:45:89:92:9b:b1:ad:22:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Nov 22 11:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=137dc1867e679c1387711945d06371546bb91b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:a9:3c:80:ce:a4:2f:a7:f6:2b:df:b5:91:
38:b0:09:41:ef:d4:67:c3:e3:97:a2:7f:db:81:02:
50:56:02:c9:5b:d6:17:b4:2d:49:c9:7c:f6:ba:38:
e3:52:b5:9d:93:cf:68:ed:93:b9:58:f8:01:4d:91:
da:5b:d9:71:f8:03:9c:1a:40:63:5b:56:8e:03:fc:
45:ed:7c:9b:86:ed:5b:dc:3d:d0:9e:5c:60:d3:85:
f3:6f:07:9d:a2:56:99:42:68:ad:dc:24:89:17:28:
50:cb:f4:90:2f:d1:de:f1:70:dc:df:1f:bb:3c:ba:
15:37:64:b3:57:4a:42:9c:a8:d0:c1:7c:2b:ae:cd:
fe:7c:4c:16:df:38:f6:7a:ef:b0:0e:ce:77:ea:0d:
dd:06:c8:9f:c8:dc:df:0f:43:8b:42:fc:08:c0:4b:
01:e9:df:e7:2b:7c:8c:e9:fe:56:7c:c1:0e:08:35:
7f:7d:dc:47:c0:98:ce:aa:73:0e:d8:52:27:19:45:
79:ae:0f:5d:d3:27:ee:4b:16:b9:23:f8:c4:ac:0b:
13:41:6b:9e:be:04:68:6f:68:a6:bb:13:3b:b4:21:
0d:7f:cb:91:0b:2c:f0:c4:42:d2:59:2b:30:ba:85:
8f:d1:6e:64:0d:61:c7:38:61:bd:35:2a:8c:ca:f5:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7D:C1:86:7E:67:9C:13:87:71:19:45:D0:63:71:54:6B:B9:1B:78
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/E33Bhn5nnBOHcRlF0GNxVGu5G3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.232.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
IPv6:
2a00:c660::/29
Signature Algorithm: sha256WithRSAEncryption
4f:14:b6:0d:38:4d:d6:50:b3:40:0d:76:3d:26:6c:f5:a3:27:
3e:c7:3d:29:f3:e5:5d:80:de:51:64:c4:c6:71:e0:14:f9:6a:
88:11:4d:16:5e:af:20:96:bc:a7:02:b3:4b:9f:46:63:ac:d0:
e6:38:e6:1b:e9:45:de:b6:c2:83:2c:7b:20:29:14:20:b4:0a:
da:db:77:e1:a4:45:39:49:7d:f1:13:dd:b9:c3:65:fb:74:c6:
c8:2d:dc:2d:a4:b8:0b:c2:a2:2d:2c:e6:b7:a1:f4:d1:d9:28:
65:83:c8:9b:03:45:92:73:15:d5:fb:2f:86:91:2b:56:2a:f8:
8c:ab:bc:7c:92:27:f7:1f:75:cc:69:2b:1a:7e:4b:de:0e:79:
8e:41:5d:7b:21:fc:cf:2e:a9:8a:9d:6d:50:08:33:0f:04:4a:
ad:01:12:f1:b8:65:3c:b5:2d:e5:16:9a:8e:4c:e6:8f:41:fe:
25:0f:8b:45:20:d0:14:5a:71:06:16:cc:28:4e:0a:d4:ff:bf:
dd:08:3c:a6:93:36:96:be:49:7e:79:ec:46:d4:76:82:79:0a:
14:c9:63:1f:d4:71:94:1f:82:12:f6:dd:31:4a:28:4c:f5:55:
59:c0:4f:6b:17:dc:a8:4a:79:3f:5b:fb:03:23:86:c6:c6:fd:
59:13:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:07:57 2025 by rpki-client