Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5ucVPfTkTkNckXJttgJBTf1rHDw.roa
File: 5ucVPfTkTkNckXJttgJBTf1rHDw.roa (raw, json)
Hash identifier: S7GYYaUSzk43Db/yHmxR/DgBMXUybWwjmeEMo+WNrXU=
Subject key identifier: E6:E7:15:3D:F4:E4:4E:43:5C:91:72:6D:B6:02:41:4D:FD:6B:1C:3C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01912CBD3CF2352B3D9706F64FE9080E3F0E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5ucVPfTkTkNckXJttgJBTf1rHDw.roa
Signing time: Wed 07 Aug 2024 12:08:04 +0000
ROA not before: Wed 07 Aug 2024 12:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 85.254.8.0/21 maxlen: 21
85.254.13.0/24 maxlen: 24
85.254.63.0/24 maxlen: 24
85.254.117.0/24 maxlen: 24
85.254.118.0/23 maxlen: 23
85.254.123.0/24 maxlen: 24
217.24.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 19 Aug 2024 06:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:bd:3c:f2:35:2b:3d:97:06:f6:4f:e9:08:0e:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e7153df4e44e435c91726db602414dfd6b1c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:d8:00:96:d6:fa:33:78:25:4b:38:6b:95:
db:6f:b4:77:12:bd:7a:9f:f8:ba:db:ce:ba:bf:a4:
6e:18:09:c0:d4:d6:3f:a6:72:be:d5:b8:0a:6b:50:
a0:e8:72:e8:86:e4:70:cc:10:08:38:c6:fb:8e:f1:
ca:5e:47:54:29:26:e2:34:71:c2:bb:b1:96:d1:4c:
40:ba:09:bd:ea:50:72:47:0e:99:a7:d9:a4:3e:d4:
1e:8c:cc:de:4f:9d:39:67:b1:97:4d:c6:d1:76:4c:
3a:30:ea:04:68:4c:36:4a:c2:c7:38:61:a5:06:2c:
b0:84:f6:2c:ca:f5:2e:59:bf:0e:c9:b0:fd:f7:06:
3d:12:ad:37:6d:5f:de:ca:d7:43:1f:5e:66:59:00:
94:66:b2:00:60:0b:62:2d:e4:ed:d9:1c:d2:22:ad:
31:c9:02:c8:43:09:98:48:79:26:d4:d1:ca:0f:0c:
73:d6:92:46:fe:18:38:d2:2e:f8:2c:03:6f:f3:03:
91:9b:9c:5d:fd:2f:cd:90:28:46:0a:4c:63:d3:c6:
65:09:5e:6d:43:09:97:9d:8b:57:92:d8:4a:45:e9:
bf:d8:3a:28:b7:d6:74:12:f5:e0:a5:81:c3:59:4e:
fb:ac:66:fb:ab:0b:4d:78:71:1f:e1:11:4d:8e:a9:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:15:3D:F4:E4:4E:43:5C:91:72:6D:B6:02:41:4D:FD:6B:1C:3C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5ucVPfTkTkNckXJttgJBTf1rHDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.8.0/21
85.254.63.0/24
85.254.117.0-85.254.119.255
85.254.123.0/24
217.24.64.0/20
Signature Algorithm: sha256WithRSAEncryption
45:69:1c:f7:32:c5:f4:85:08:d9:0a:c7:97:64:2d:ed:27:35:
9c:ef:df:39:ff:1a:82:40:04:01:fe:77:34:84:f7:7f:a2:1c:
9c:73:1e:bb:63:9b:a6:67:e1:5d:fd:f4:ec:78:6a:79:49:3d:
bc:fc:52:1b:8f:03:a9:aa:20:c8:fb:54:12:38:6e:b2:66:2c:
48:b8:af:5c:cd:d3:84:8c:29:25:e0:02:d9:14:f3:40:3b:8d:
96:db:3f:3a:c2:ce:e5:7c:ab:52:45:34:0f:15:68:5f:79:c3:
71:5b:bc:00:24:a0:55:d2:17:b7:97:a2:d7:86:d2:44:44:2a:
d0:40:b7:d6:65:ac:5b:c0:00:8d:8d:23:8f:68:bb:09:6f:50:
02:2f:6f:b1:d4:98:25:f1:fa:f9:11:70:a8:30:81:bc:16:53:
df:c1:aa:c1:ae:49:f8:31:51:06:17:2b:16:c5:53:43:3b:75:
12:8f:bb:f1:6a:f7:3a:be:00:61:c3:03:1b:fa:e8:aa:ba:79:
a7:d0:a6:f6:4c:ad:3d:07:e2:a0:d4:c2:e4:75:8e:10:d7:ec:
a8:9f:c0:35:e9:06:dd:6a:af:c7:8f:0e:15:a8:d6:03:8d:56:
ec:b1:af:3f:10:05:69:c1:4c:dd:61:fb:24:c3:4e:62:ac:7c:
fe:1f:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:50 2025 by rpki-client