Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/eCUWeZi9vEa9vUc8Z6_9dwgRlG8.roa
File: eCUWeZi9vEa9vUc8Z6_9dwgRlG8.roa (raw, json)
Hash identifier: IKvBU3nCuar2xrU6g3GtYTgpt46eQAiIx1RfbHtwSzs=
Subject key identifier: 78:25:16:79:98:BD:BC:46:BD:BD:47:3C:67:AF:FD:77:08:11:94:6F
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 0190B61BE935C642B92A1B3BD0AB6243CCFA
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/eCUWeZi9vEa9vUc8Z6_9dwgRlG8.roa
Signing time: Mon 15 Jul 2024 11:16:40 +0000
ROA not before: Mon 15 Jul 2024 11:16:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14670
IP address blocks: 65.181.111.0/24 maxlen: 24
88.135.73.0/24 maxlen: 24
190.92.168.0/22 maxlen: 24
190.92.172.0/24 maxlen: 24
190.92.173.0/24 maxlen: 24
192.243.110.0/24 maxlen: 24
192.250.225.0/24 maxlen: 24
192.250.231.0/24 maxlen: 24
193.30.117.0/24 maxlen: 24
195.250.24.0/24 maxlen: 24
195.250.26.0/24 maxlen: 24
199.103.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 08:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:1b:e9:35:c6:42:b9:2a:1b:3b:d0:ab:62:43:cc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jul 15 11:16:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7825167998bdbc46bdbd473c67affd770811946f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:46:e6:39:b3:6b:77:60:f0:e5:a3:0f:46:
1c:f6:ed:a4:27:fc:3a:2c:f8:17:b4:fe:d6:4b:b0:
54:0c:4e:75:eb:1a:ae:cd:83:53:85:63:8a:9b:6e:
75:db:a2:be:03:c7:02:44:2d:19:0c:62:30:35:c6:
29:31:9a:d4:d4:8e:a6:c7:e0:76:4e:84:d3:93:d6:
f9:51:16:66:d1:0e:3a:eb:1a:11:cf:ee:a9:8b:a2:
e7:42:78:51:e0:a1:0b:aa:f2:28:f6:d7:34:3e:44:
b6:a5:68:2a:51:14:63:6d:dc:07:ce:12:b6:e2:a0:
b2:03:cb:eb:b9:a3:ca:c7:5b:39:96:6a:22:fe:5a:
dd:27:1c:9f:af:ff:83:53:3a:d3:87:af:4b:0a:85:
9c:d7:71:88:06:b3:da:90:af:82:2f:50:76:aa:c6:
31:aa:25:2d:b0:18:d8:7f:57:a5:34:72:51:6c:79:
ce:6d:3b:98:75:d7:92:2b:29:d3:7e:22:bd:95:e8:
4b:b4:cc:4c:09:e0:4b:e4:28:db:b7:49:e1:58:15:
7b:01:ab:4b:e7:4e:cb:19:ac:7a:6c:b9:0b:92:f9:
75:d8:53:a8:3a:d7:e1:a0:4c:fc:d8:d3:00:be:14:
e4:e7:9c:b7:0f:a1:b5:41:77:60:88:7a:ac:66:25:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:16:79:98:BD:BC:46:BD:BD:47:3C:67:AF:FD:77:08:11:94:6F
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/eCUWeZi9vEa9vUc8Z6_9dwgRlG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.111.0/24
88.135.73.0/24
190.92.168.0-190.92.173.255
192.243.110.0/24
192.250.225.0/24
192.250.231.0/24
193.30.117.0/24
195.250.24.0/24
195.250.26.0/24
199.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7d:9f:90:89:3c:d2:53:21:8b:1a:e8:ee:51:77:d9:3a:76:
fe:47:f0:10:5c:58:99:c1:32:a6:97:c2:66:dc:fe:4a:fc:f8:
67:75:4b:05:a7:a3:e2:8d:e8:f2:2e:59:84:eb:30:c9:c9:29:
03:32:89:e6:0d:ed:37:fe:75:8e:40:9a:dd:df:55:da:d3:87:
ca:2c:c5:5c:64:7a:56:3f:fe:a6:71:2f:01:58:1a:09:5e:d3:
6a:13:17:09:1e:7a:88:c7:8e:fd:a2:6c:f0:49:8a:cc:6c:ae:
ea:fc:93:1e:7c:e1:96:1e:a3:d0:2f:06:1c:18:c2:46:5a:d7:
68:dc:2c:72:1a:c4:58:31:2c:68:21:5c:2d:77:e0:b9:7c:f9:
63:71:83:21:eb:6b:73:48:f8:39:6c:f8:77:b2:9a:a4:aa:b8:
82:14:9c:05:45:fa:cf:05:d1:24:ab:97:6f:d3:02:84:7c:f1:
ae:c4:78:62:45:70:17:29:f5:b8:9a:4d:a5:85:00:bc:b1:67:
df:08:42:0e:e7:c6:ba:83:b2:5e:be:60:e2:65:9a:f6:2f:a2:
49:b2:41:a8:e6:7d:b2:39:a3:57:99:d5:01:d7:68:00:65:13:
a8:be:19:68:38:00:62:6a:27:cb:f4:25:41:00:cb:87:d5:53:
f1:7b:00:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:34 2025 by rpki-client