Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9RbdKPEk5Zeg-TAbZENukofktFI.roa
File: 9RbdKPEk5Zeg-TAbZENukofktFI.roa (raw, json)
Hash identifier: Vf1QjfmNqEu+Hhc1U+JHo0rXDqjV2lzW4nu8pUAvSPk=
Subject key identifier: F5:16:DD:28:F1:24:E5:97:A0:F9:30:1B:64:43:6E:92:87:E4:B4:52
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019426D864A73F7852A632BAD6BF444558B4
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9RbdKPEk5Zeg-TAbZENukofktFI.roa
Signing time: Thu 02 Jan 2025 11:48:23 +0000
ROA not before: Thu 02 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.170.55.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 09:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:64:a7:3f:78:52:a6:32:ba:d6:bf:44:45:58:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f516dd28f124e597a0f9301b64436e9287e4b452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:a9:93:d7:3d:ba:a9:73:36:64:12:46:19:
c4:23:d9:59:de:e8:b8:40:65:bb:c5:94:27:ac:72:
b8:09:9e:24:db:e2:3b:c6:71:31:4d:ca:c4:89:d8:
89:5d:77:46:1f:86:d1:71:80:e0:b7:a3:7b:72:f7:
c7:7a:2e:38:0a:af:86:da:09:22:f1:e8:99:48:82:
34:08:6d:6e:d3:aa:13:b0:ae:32:e6:c6:78:5b:cf:
c4:95:e6:9a:9a:6a:fc:dc:ed:0b:72:f0:2e:da:85:
3c:32:e7:03:ff:73:f1:3b:8e:8e:d3:49:79:8a:fe:
d6:d7:50:05:13:74:d3:e5:46:07:19:f2:6a:ad:78:
8c:76:50:ff:44:99:6d:b5:7e:bf:f2:15:58:d0:8d:
de:c6:1b:24:fa:32:41:7c:7c:8a:c4:ae:9e:d1:20:
0c:c7:1d:e1:99:24:43:a7:cc:d2:27:7c:f2:12:fc:
a4:64:37:26:a4:80:c0:71:6a:8b:33:5d:8a:64:7d:
35:99:b6:63:7b:83:de:bc:01:c4:d3:03:9a:9e:59:
b0:22:2d:6d:93:e7:b8:ff:ff:d8:6e:50:2e:54:f5:
25:29:cb:3e:b9:29:9f:eb:08:45:d7:5e:35:32:2c:
dd:5a:aa:34:8b:17:8b:20:9f:38:dc:84:48:6a:10:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:DD:28:F1:24:E5:97:A0:F9:30:1B:64:43:6E:92:87:E4:B4:52
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9RbdKPEk5Zeg-TAbZENukofktFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.145.0/24
37.49.147.0/24
37.49.151.0/24
94.74.147.0/24
94.74.168.0/24
94.74.173.0/24
109.203.160.0/23
176.46.129.0-176.46.130.255
176.46.133.0-176.46.135.255
176.46.147.0/24
Signature Algorithm: sha256WithRSAEncryption
11:de:5a:db:8d:51:b2:46:46:49:4f:54:e6:ea:c4:41:36:a0:
6a:5a:13:04:05:0d:99:05:48:c4:3f:cf:8d:e1:ac:d8:67:7c:
17:f6:f5:e0:ef:72:61:5b:0d:19:08:60:e1:c8:88:a1:f9:57:
e3:e5:fe:1d:1e:17:14:8e:f7:f7:8f:92:db:fb:35:22:87:c7:
19:86:7b:20:de:a9:43:d7:04:75:03:4e:a7:98:f3:ef:e4:da:
11:00:cb:6a:6e:2e:d9:35:17:34:28:f6:5e:9e:f3:84:13:de:
85:4d:99:3d:92:fa:ba:6c:99:d1:85:c7:67:ea:72:df:2e:80:
f4:a2:e0:b0:17:5f:9c:9d:96:cf:85:7e:1b:d1:27:1b:8b:4c:
9a:8a:bc:29:2c:3a:45:7f:c8:10:8a:d0:bc:91:b9:5d:66:fc:
b0:f2:ed:c6:21:22:07:7f:ea:0d:d1:f6:35:80:5e:08:7d:ff:
6a:4e:8d:ca:c0:6d:af:94:6a:3a:c1:39:62:16:0b:8d:59:3c:
ce:7e:ea:eb:25:50:1e:fb:a9:30:16:8e:98:5b:75:0c:79:5f:
40:96:e9:2a:04:cf:50:24:b7:f4:f8:d5:e9:24:d7:f0:e2:04:
e1:ba:d8:83:ee:ae:6f:65:90:ca:14:05:e8:73:d1:67:2d:39:
7e:52:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:54 2025 by rpki-client