Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eflQh_E3XXDubLqKmOILkH32AYA.roa
File: eflQh_E3XXDubLqKmOILkH32AYA.roa (raw, json)
Hash identifier: bDd34ZhLPCkG8FT+1+hA+IXMo/2+94XIpbyxWMQdoHg=
Subject key identifier: 79:F9:50:87:F1:37:5D:70:EE:6C:BA:8A:98:E2:0B:90:7D:F6:01:80
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0190822F079AC89A1408AA020483CD7321E5
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eflQh_E3XXDubLqKmOILkH32AYA.roa
Signing time: Fri 05 Jul 2024 09:17:18 +0000
ROA not before: Fri 05 Jul 2024 09:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5503
IP address blocks: 62.171.192.0/18 maxlen: 24
185.192.228.0/22 maxlen: 24
194.154.0.0/19 maxlen: 24
194.238.32.0/19 maxlen: 24
194.238.64.0/19 maxlen: 24
213.18.192.0/18 maxlen: 24
217.177.0.0/18 maxlen: 24
217.177.64.0/19 maxlen: 24
217.179.0.0/17 maxlen: 24
217.179.192.0/18 maxlen: 24
217.180.0.0/21 maxlen: 24
217.180.8.0/22 maxlen: 24
217.180.24.0/21 maxlen: 24
217.180.32.0/22 maxlen: 24
217.180.48.0/22 maxlen: 24
217.181.0.0/18 maxlen: 24
217.181.64.0/19 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Sep 2024 21:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:2f:07:9a:c8:9a:14:08:aa:02:04:83:cd:73:21:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 5 09:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79f95087f1375d70ee6cba8a98e20b907df60180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:c9:f5:11:4c:4f:4c:c6:6b:04:f3:4c:8f:
ac:77:bc:a5:fc:67:c6:03:71:85:89:c0:10:5a:f4:
f7:d3:2d:6d:78:e4:a7:87:33:8c:a2:b6:90:2d:d3:
a4:74:b9:2f:0f:64:f3:cd:62:d2:ba:90:1c:8f:8d:
14:d1:fb:b0:14:44:52:c1:e2:b8:22:d6:05:2d:09:
79:a3:18:a8:88:86:d6:f4:e1:30:d7:cc:68:86:95:
54:0f:4a:a7:d8:5c:84:d8:27:ee:33:14:54:d0:ad:
0b:20:77:3f:36:06:12:95:40:b5:87:ed:54:c5:02:
a5:4e:ba:42:e1:60:ca:0c:5b:a1:2d:0f:99:7e:ca:
69:1e:33:47:bc:02:8f:41:14:b9:01:e4:36:38:bf:
4b:5d:49:d0:94:78:d8:0a:5a:50:b4:69:31:c6:b2:
9e:85:3b:f3:df:7c:25:15:e3:2c:46:8f:71:6c:fb:
c0:22:a9:16:a0:c3:f1:33:c0:7f:34:03:4a:dc:3f:
46:76:61:91:c8:c9:a2:63:e6:a3:4b:bf:96:3d:08:
92:e5:9b:13:ca:1d:da:fa:6c:0d:2a:4c:e8:ce:fb:
ff:55:09:36:43:8e:c0:f0:c2:d4:ba:e9:79:33:1a:
ac:2e:0b:9f:87:c4:34:a9:ad:9a:61:62:56:fe:0a:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:50:87:F1:37:5D:70:EE:6C:BA:8A:98:E2:0B:90:7D:F6:01:80
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eflQh_E3XXDubLqKmOILkH32AYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0/18
185.192.228.0/22
194.154.0.0/19
194.238.32.0-194.238.95.255
213.18.192.0/18
217.177.0.0-217.177.95.255
217.179.0.0/17
217.179.192.0-217.180.11.255
217.180.24.0-217.180.35.255
217.180.48.0/22
217.181.0.0-217.181.95.255
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:cd:75:8e:21:d1:fe:76:b4:c6:57:ee:df:a9:ea:b6:66:15:
c4:87:90:5a:44:e6:d4:ea:77:e5:85:b3:c6:ab:fd:91:5b:e3:
cc:8d:ee:10:ca:63:2d:57:c8:5b:48:0e:22:bf:d7:ec:0f:e5:
ea:72:f0:3e:2b:13:a9:50:8e:79:b0:77:a7:66:45:e2:60:9d:
34:8a:9e:eb:85:b6:c6:bd:17:90:ac:1d:d4:d8:f3:3e:69:09:
4d:fa:fe:9d:4e:7f:97:c9:3a:e2:ca:f2:e7:8f:82:20:77:33:
c1:54:f7:68:af:5e:50:fd:6c:26:05:37:e8:1a:d0:67:d8:b1:
9d:03:b3:7d:a3:99:b1:ed:0d:ea:53:1e:b2:98:8e:fe:87:93:
a4:cc:71:10:4e:a3:e5:06:8c:4c:5e:3e:9b:f1:12:62:02:d7:
c0:85:d7:d2:9d:66:80:ea:ee:7c:f8:9d:74:1f:fb:3a:a6:a2:
e2:56:b7:db:4a:e3:9b:3a:2d:fe:fd:4c:e6:ec:24:30:ae:2e:
90:45:26:7e:fa:90:5a:05:f2:ff:a3:2c:e5:76:e0:b8:6d:cf:
64:e6:47:3f:30:6b:2c:0c:4b:95:24:09:4a:05:6c:c8:aa:86:
89:af:ce:62:c8:30:06:b8:34:5d:03:ad:7a:08:c7:bc:b4:3a:
55:0c:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 01:02:12 2024 by rpki-client on console-ams.rpki-client.org