Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/tFEYE-1d3XcEKYw3vWRcJB0k9NI.roa
File: tFEYE-1d3XcEKYw3vWRcJB0k9NI.roa (raw, json)
Hash identifier: tB1s3LslDxGuuzZtVMAJtE6PIXxMs8tak89zzIy+LL0=
Subject key identifier: B4:51:18:13:ED:5D:DD:77:04:29:8C:37:BD:64:5C:24:1D:24:F4:D2
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 0193876CBB4FAFC91E6533CA937C5114E1DE
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/tFEYE-1d3XcEKYw3vWRcJB0k9NI.roa
Signing time: Mon 02 Dec 2024 12:51:10 +0000
ROA not before: Mon 02 Dec 2024 12:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40966
IP address blocks: 185.67.164.0/22 maxlen: 22
185.67.164.0/24 maxlen: 24
185.67.165.0/24 maxlen: 24
185.67.166.0/24 maxlen: 24
185.67.167.0/24 maxlen: 24
217.112.32.0/20 maxlen: 20
217.112.36.0/23 maxlen: 23
217.112.42.0/23 maxlen: 23
217.112.44.0/24 maxlen: 24
217.112.45.0/24 maxlen: 24
217.112.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:6c:bb:4f:af:c9:1e:65:33:ca:93:7c:51:14:e1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Dec 2 12:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4511813ed5ddd7704298c37bd645c241d24f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:03:01:3b:4d:53:74:b6:9f:39:58:e3:63:
5d:74:69:f3:29:e5:05:48:c4:17:24:1f:4a:47:1e:
e1:ee:ff:6a:17:84:94:8f:5b:be:64:4a:a2:62:27:
d5:3d:5e:71:f5:ba:80:69:42:e3:21:59:bf:51:61:
e2:f2:fd:ef:1f:ed:0e:0e:84:93:a4:2d:82:20:1a:
0c:bd:6b:27:ec:a6:c4:f7:ab:ad:d8:cf:f3:d8:cb:
28:c8:d5:ce:7a:69:01:1f:84:52:0a:22:4f:3c:3d:
d2:91:18:56:8c:e9:e9:d2:9d:af:a4:eb:54:6e:48:
96:64:69:00:e6:10:8c:55:08:61:84:68:15:62:d1:
54:07:44:84:17:f1:a1:86:1d:70:52:24:b8:82:d4:
19:d7:8d:cb:a7:85:e7:03:1c:94:2c:33:ab:be:e1:
81:c7:f2:f6:d6:3d:5f:1d:a2:5c:12:e4:66:90:0e:
fd:5b:7f:56:5d:3e:13:67:a0:a9:ae:7f:f9:ea:bc:
61:e2:28:6a:8f:0b:fb:7d:61:58:0f:6c:96:03:8a:
8b:07:0a:17:b7:e1:4d:69:fb:cf:dd:aa:bc:cc:12:
75:c2:49:35:18:55:5c:53:fe:ca:25:f1:2e:0b:05:
e1:2e:c6:09:5d:92:e6:dd:5c:36:79:22:e8:ec:5e:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:18:13:ED:5D:DD:77:04:29:8C:37:BD:64:5C:24:1D:24:F4:D2
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/tFEYE-1d3XcEKYw3vWRcJB0k9NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.164.0/22
217.112.32.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:9f:12:4c:4c:b3:ca:a2:fc:c0:48:3f:3a:13:e2:cc:fb:51:
98:8c:42:17:bf:b0:b8:45:93:05:56:71:d1:a5:a7:8f:29:a2:
6e:0c:5e:09:05:45:43:3b:b3:5e:b7:ac:fb:7d:ec:d7:f1:3d:
f0:90:6f:4a:00:73:dd:ea:8f:13:38:8c:b1:21:19:76:4d:94:
0c:57:e0:84:15:e8:e0:da:28:47:d9:21:86:91:67:f3:ba:ed:
0a:7e:54:52:28:fa:d8:d4:51:4b:c1:8f:e2:8a:91:d8:66:45:
b8:97:dc:22:e7:48:c5:10:88:5d:d4:c4:33:fc:f8:a2:b0:b9:
b5:5b:9e:5f:c2:7a:50:2d:be:f5:95:b7:33:8e:57:ba:22:5f:
6c:22:22:5e:51:08:9b:e9:69:c0:2d:97:8a:72:79:5c:96:13:
71:03:49:48:91:89:26:00:ab:9f:01:35:ff:96:de:e1:9a:9c:
2c:30:56:2b:d0:c4:11:2e:c6:b4:bc:d3:23:83:dd:ff:dd:0c:
e6:51:52:7f:37:ce:b3:b3:0e:ce:31:33:6a:b1:06:9a:6b:6b:
75:53:70:c7:16:b1:14:b9:89:cd:d6:15:18:ba:69:73:6e:82:
b9:7f:dc:bf:23:70:65:b1:94:d8:26:ac:9e:af:6a:86:40:74:
1a:61:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:12 2025 by rpki-client