Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/2c6hz6o5_xm1BSWXU0lGDXn3U6w.roa
File: 2c6hz6o5_xm1BSWXU0lGDXn3U6w.roa (raw, json)
Hash identifier: VHTcN0nN/fcw77Pa3yp7+aHIq83tM9B6faZbwBvLZJ8=
Subject key identifier: D9:CE:A1:CF:AA:39:FF:19:B5:05:25:97:53:49:46:0D:79:F7:53:AC
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 0191FF0B7D2A5F48BE49193FA2CF31F3E7D8
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/2c6hz6o5_xm1BSWXU0lGDXn3U6w.roa
Signing time: Tue 17 Sep 2024 08:13:48 +0000
ROA not before: Tue 17 Sep 2024 08:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212301
IP address blocks: 5.252.206.0/24 maxlen: 24
45.67.232.0/24 maxlen: 24
45.67.233.0/24 maxlen: 24
91.230.149.0/24 maxlen: 24
185.130.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:0b:7d:2a:5f:48:be:49:19:3f:a2:cf:31:f3:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Sep 17 08:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9cea1cfaa39ff19b50525975349460d79f753ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:b1:76:72:bc:e6:81:ff:9a:f8:35:8c:33:
7f:7c:3b:4a:b6:1d:e1:27:e1:f4:1c:c0:fd:f5:c1:
ec:05:b2:db:24:6b:35:fc:4e:2f:c1:32:8e:b6:f7:
00:43:17:4b:03:79:77:27:71:f2:57:83:ae:02:4e:
63:35:7d:08:85:14:fe:2e:45:31:74:af:9c:f8:0a:
a4:53:6e:c9:39:c0:9c:04:29:2a:58:48:62:04:cc:
6c:f6:37:76:3f:2a:0c:69:58:56:81:56:87:7a:9c:
ee:93:4a:e1:cc:41:45:13:19:77:2e:92:7f:32:b9:
ff:a5:51:f6:2f:ee:9d:60:00:8c:bf:e0:37:9f:a0:
9f:9e:ab:ed:ca:2c:59:2a:ee:82:f9:83:03:15:96:
6d:83:1b:61:00:84:11:75:29:55:f1:81:84:71:6b:
30:ac:01:00:ac:0d:53:2a:e2:02:dd:37:e6:1d:28:
06:32:89:17:de:c1:33:33:ee:94:4d:cd:2d:db:6c:
fc:ee:79:1f:63:fa:2e:a6:78:48:fa:d3:0e:0f:e8:
bd:fe:13:c1:40:98:5a:10:4d:8d:a3:47:f8:da:a0:
52:0d:4c:92:fa:50:98:cd:5a:7e:85:04:89:06:1b:
7f:c7:46:03:8f:67:b8:e2:cf:42:99:15:03:33:81:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CE:A1:CF:AA:39:FF:19:B5:05:25:97:53:49:46:0D:79:F7:53:AC
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/2c6hz6o5_xm1BSWXU0lGDXn3U6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.206.0/24
45.67.232.0/23
91.230.149.0/24
185.130.56.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2c:b4:a6:79:45:09:d3:a7:cd:42:f9:67:d0:ad:5a:fa:33:
47:6b:7d:35:44:46:e1:a2:f2:3f:77:50:20:02:82:58:dd:7e:
b3:46:25:df:3b:8d:93:6c:18:c9:c7:ef:0c:f1:52:96:e8:78:
40:74:d1:e1:b0:fb:2b:cd:04:81:d3:4e:63:0f:6e:cc:ae:68:
76:4b:da:20:c9:73:e7:80:75:11:57:15:cc:45:25:73:b1:7f:
6f:54:c1:75:5a:33:68:89:ce:dd:98:51:6f:2b:a6:c2:d6:db:
1c:3c:f6:84:18:cf:2c:81:7d:2d:9d:12:48:e9:9d:95:2c:1c:
93:d6:14:1f:aa:fb:66:b5:9f:12:38:e0:ea:9e:19:bc:83:0c:
64:a0:9c:4d:3b:84:85:7f:6d:62:d2:84:59:55:2c:b6:23:70:
6a:ee:e4:cb:0e:90:32:b5:62:ed:cb:fb:0b:21:a3:41:6c:21:
d8:99:39:f0:37:ea:9c:a6:0a:99:16:3d:df:33:d4:19:e4:87:
3b:5b:84:19:49:e9:4b:2c:ec:65:a6:fd:39:d2:6f:59:41:89:
8a:4a:ab:57:ea:53:de:1b:61:ac:85:a7:c8:f6:21:42:ed:b2:
c8:a3:a4:46:ec:78:cc:25:87:9e:44:68:30:4d:c0:ad:a4:6f:
b3:27:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:54 2025 by rpki-client