Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6SGOwNgkwCU3lAkcCGBhwySu4Ik.roa
File: 6SGOwNgkwCU3lAkcCGBhwySu4Ik.roa (raw, json)
Hash identifier: X+WXkMHt3vI2LQ2LDMGxfGrEDoYcG8/+9oAedm31V9Y=
Subject key identifier: E9:21:8E:C0:D8:24:C0:25:37:94:09:1C:08:60:61:C3:24:AE:E0:89
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D1D7E962C76EDDC2D879AC9720E789FAC
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6SGOwNgkwCU3lAkcCGBhwySu4Ik.roa
Signing time: Thu 18 Jan 2024 16:54:11 +0000
ROA not before: Thu 18 Jan 2024 16:54:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
94.74.156.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 17:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:7e:96:2c:76:ed:dc:2d:87:9a:c9:72:0e:78:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 18 16:54:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9218ec0d824c0253794091c086061c324aee089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f7:2c:e4:f9:1f:a4:fd:15:92:95:40:b7:9e:
5f:cd:94:c4:7f:b5:d6:98:c1:0f:cd:09:a7:ad:99:
4f:a1:14:84:94:82:31:1b:c1:a9:90:bb:d4:18:72:
78:19:3e:02:b1:ca:89:ba:7b:22:af:d3:36:9d:53:
68:cc:88:d8:75:3a:30:d7:a7:94:82:66:93:7c:b0:
5d:35:de:69:56:59:09:6f:11:18:b7:da:11:cc:a4:
e5:50:9d:dc:7c:d3:35:e1:c3:7b:a3:a2:8c:d7:e7:
c1:14:67:fa:15:f2:26:96:07:01:b5:e7:f8:a9:cd:
57:31:c4:c1:98:63:d8:42:47:48:e7:e6:12:d5:a9:
2b:33:a7:24:62:a8:83:31:0c:19:30:52:17:56:33:
75:67:3d:39:eb:87:16:7d:85:f8:fa:60:12:47:c9:
3b:10:16:cd:28:e2:f4:b6:9c:91:1d:e8:35:67:42:
58:e7:87:6e:f8:a2:1e:e5:c6:bc:1d:9a:c9:73:77:
66:a5:df:8d:bb:54:77:33:44:8d:cf:10:e8:cf:41:
a7:a4:44:27:1c:30:bb:1e:0a:d0:69:34:2b:03:11:
e1:f7:32:e6:73:d7:6a:be:93:d3:4a:84:28:6e:3a:
b4:f2:c0:c8:e2:bb:dc:4f:f3:db:e2:a5:e8:bc:de:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:8E:C0:D8:24:C0:25:37:94:09:1C:08:60:61:C3:24:AE:E0:89
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6SGOwNgkwCU3lAkcCGBhwySu4Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0-94.74.156.255
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.132.0/24
176.46.136.0/24
176.46.138.0-176.46.142.255
176.46.145.0/24
176.46.147.0-176.46.148.255
176.46.150.0/23
176.46.153.0-176.46.158.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:76:4a:3a:59:e2:c2:15:3f:0b:fc:71:20:0d:df:7e:2c:c1:
d2:65:5c:62:6d:46:62:fe:e1:6d:f3:fc:b2:b1:f4:f4:1d:05:
b2:93:bb:bb:81:d3:b9:0b:aa:ff:16:4d:f7:38:1b:03:18:66:
27:a6:fd:d3:01:43:55:6a:f5:4d:88:39:1b:3a:17:92:91:d5:
d1:1f:1a:0b:c6:6d:b4:53:fe:f0:96:ec:74:64:11:3f:e4:a0:
6e:9a:cc:8a:fa:51:3c:2b:4b:d3:3e:56:07:62:86:17:09:23:
cf:04:89:a4:c9:ea:59:45:e0:9a:51:f6:1b:f3:48:b9:15:b8:
25:58:b2:f1:06:1e:05:74:c3:22:c0:a9:a1:16:6f:1b:5e:f8:
d5:99:78:c2:95:74:9a:85:5d:0e:79:39:83:43:17:55:03:3c:
c7:68:9d:5a:10:a7:3a:57:76:b0:a3:cf:03:33:f0:b3:3f:5a:
43:84:87:19:0f:cb:c6:75:a1:2f:18:c7:aa:5c:62:46:a0:ef:
ba:ee:58:63:33:6e:ae:08:9d:57:eb:71:95:4c:76:4e:87:f7:
3c:b8:ca:41:be:06:18:fe:23:d1:1a:cb:45:57:fd:cd:e8:5c:
9e:6b:8b:32:ce:af:32:9d:94:77:11:69:f4:16:c0:e3:e0:25:
c3:cc:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:08 2025 by rpki-client