Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/Cu5TbnXkrspSWpxANgUOLSa6Wqc.roa
File: Cu5TbnXkrspSWpxANgUOLSa6Wqc.roa (raw, json)
Hash identifier: R1A8AGWt2Yq75mk/oYXCmEfwPYhL3jvulidyYyN8kZg=
Subject key identifier: 0A:EE:53:6E:75:E4:AE:CA:52:5A:9C:40:36:05:0E:2D:26:BA:5A:A7
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 018CC86EF8F72AB9354F1D778A889EA777BF
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/Cu5TbnXkrspSWpxANgUOLSa6Wqc.roa
Signing time: Tue 02 Jan 2024 04:29:25 +0000
ROA not before: Tue 02 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29283
IP address blocks: 85.184.64.0/19 maxlen: 19
89.33.144.0/21 maxlen: 21
85.184.78.0/24 maxlen: 24
94.199.120.0/21 maxlen: 21
185.6.62.0/24 maxlen: 24
185.6.60.0/22 maxlen: 22
185.6.60.0/24 maxlen: 24
185.6.61.0/24 maxlen: 24
213.174.96.0/19 maxlen: 19
213.174.127.0/24 maxlen: 24
2a02:6c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 18 Mar 2024 14:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f8:f7:2a:b9:35:4f:1d:77:8a:88:9e:a7:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 2 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aee536e75e4aeca525a9c4036050e2d26ba5aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:cc:80:32:d3:10:f7:9b:72:35:ab:6e:5d:
73:8c:1a:09:d6:ad:e3:69:a4:6a:86:e2:b3:47:a5:
b6:62:23:fc:6a:07:88:85:bd:5b:a2:ce:ca:f7:6a:
ad:93:39:da:5f:6d:d3:d8:19:cd:81:ba:e4:f1:bc:
95:c9:d8:6a:0c:45:c3:af:0d:33:f0:ad:e1:19:87:
2e:f9:9a:48:5c:fe:67:09:8e:ad:a8:82:ed:e8:6d:
27:ed:13:1a:6f:57:cb:03:9e:82:91:12:dc:ec:e5:
34:d3:98:3d:0e:aa:fa:f3:5c:45:00:95:5b:08:97:
19:07:cb:2a:31:af:3e:2e:12:be:58:f0:bc:e1:ac:
7d:1a:12:a7:46:a7:5d:fb:6f:b3:ff:59:e8:e2:cd:
b5:40:81:83:67:93:41:a7:6d:81:0e:e6:7f:11:d2:
bc:aa:2e:d1:df:77:17:de:d9:3e:07:df:89:e2:4a:
58:87:a8:db:31:ae:26:83:34:c7:83:b4:b5:2e:7f:
af:0d:94:0a:b4:45:13:7b:6c:8d:9a:3e:38:b5:b9:
d1:fe:d9:35:30:83:8a:be:45:37:68:eb:af:08:6b:
fe:80:98:e9:3d:10:41:4e:8b:0e:c1:5f:c0:9e:bd:
c9:b5:db:92:b3:36:17:87:17:d5:5c:f5:d8:cc:13:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:53:6E:75:E4:AE:CA:52:5A:9C:40:36:05:0E:2D:26:BA:5A:A7
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/Cu5TbnXkrspSWpxANgUOLSa6Wqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.64.0/19
89.33.144.0/21
94.199.120.0/21
185.6.60.0/22
213.174.96.0/19
IPv6:
2a02:6c40::/32
Signature Algorithm: sha256WithRSAEncryption
2b:48:44:dc:8c:ea:a2:40:55:d5:44:ad:e8:64:cd:8f:d4:22:
2c:c4:0c:70:0f:ef:0c:45:49:c2:42:1a:f5:6c:f1:8b:7e:04:
5f:df:2f:f2:72:12:38:bb:77:c0:02:fd:23:8a:b6:7a:b4:70:
fa:48:68:83:d1:6c:c4:74:f6:72:3e:5a:62:ab:08:7f:2d:4b:
db:33:77:b8:a9:25:87:48:a9:8f:c4:9b:98:3e:04:75:dc:7a:
5b:5c:be:e0:16:88:80:98:ac:0e:c9:5e:ac:fd:0b:5a:7d:28:
f1:33:f2:c6:06:40:2f:6f:f6:83:12:ba:49:e2:6e:54:f5:b3:
d2:d8:e3:9c:c0:90:53:40:5d:5e:25:d9:67:fb:84:e2:be:6c:
45:1a:d0:79:8f:42:98:03:57:02:57:e7:9d:2e:64:1a:bf:81:
10:34:15:52:78:05:90:7d:d6:ba:d2:fd:39:3f:78:cb:a5:ce:
74:dc:9f:f1:45:57:b1:ff:bf:f0:e0:d9:52:96:19:7b:79:91:
ac:ba:54:7c:64:04:80:44:de:1b:70:84:07:47:9f:d1:3a:83:
e6:1e:49:52:be:e6:a1:ac:da:a5:1f:85:66:d3:f3:e3:8e:38:
55:e4:d3:4e:cf:c5:d0:fd:78:a8:ba:87:77:bf:fa:57:92:52:
2d:0d:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:12 2024 by rpki-client on console-ams.rpki-client.org