Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/EFgNNRYAGt7SYsDGS0xjBMEXbxs.roa
File: EFgNNRYAGt7SYsDGS0xjBMEXbxs.roa (raw, json)
Hash identifier: FqzNvsm/yOLkklrRxRRU8UJWqaB5ggJzp59qe2ox0dI=
Subject key identifier: 10:58:0D:35:16:00:1A:DE:D2:62:C0:C6:4B:4C:63:04:C1:17:6F:1B
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0191DFFFCC7CE4B99E4DA9CA9C0AC64BA968
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/EFgNNRYAGt7SYsDGS0xjBMEXbxs.roa
Signing time: Wed 11 Sep 2024 07:32:48 +0000
ROA not before: Wed 11 Sep 2024 07:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.170.55.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:ff:cc:7c:e4:b9:9e:4d:a9:ca:9c:0a:c6:4b:a9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 11 07:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10580d3516001aded262c0c64b4c6304c1176f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:ab:6d:af:b4:3e:e8:9b:eb:89:76:c0:57:
c3:4e:aa:c2:19:e5:d8:01:10:ed:c0:1c:79:fc:8e:
9d:01:14:4b:bd:da:37:b0:50:70:2a:ba:fe:e9:f6:
9a:0e:d5:3b:7c:f8:87:d6:5b:2e:42:ea:fe:73:1b:
fe:ad:0a:38:75:c0:a2:e8:89:88:71:63:69:19:c0:
18:20:a4:9f:41:f5:bb:2c:24:e5:4a:33:83:04:cd:
ae:88:13:f4:f5:48:fa:b9:e1:d4:ea:7c:fe:c9:4d:
bf:0c:6d:73:38:60:03:42:72:1c:97:f1:e9:16:ee:
a4:9a:53:f6:d4:af:f6:46:b5:d7:18:cc:2a:88:5a:
3f:f6:2c:d9:e7:1f:50:93:f8:83:16:37:f8:5e:af:
ef:2f:bf:ab:26:f0:2e:b3:0e:af:d9:42:12:ce:b8:
ea:ef:49:8d:51:3d:a9:68:b3:45:63:77:18:b2:59:
42:54:f1:c2:a5:d3:dc:45:53:f1:be:eb:c4:46:fd:
7d:4a:77:16:57:f4:31:59:29:66:c2:24:04:42:69:
1f:e4:1e:1a:36:df:1c:02:f4:de:d1:0c:65:ff:18:
7d:c2:72:8b:eb:d3:42:cb:22:9c:72:c3:e5:b6:1b:
d2:2c:99:6b:d4:ec:be:1a:5e:af:43:0a:b9:27:f5:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:0D:35:16:00:1A:DE:D2:62:C0:C6:4B:4C:63:04:C1:17:6F:1B
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/EFgNNRYAGt7SYsDGS0xjBMEXbxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.145.0/24
37.49.147.0/24
37.49.151.0/24
94.74.147.0/24
94.74.168.0/24
94.74.173.0/24
109.203.160.0/23
176.46.129.0-176.46.130.255
176.46.132.0/22
176.46.140.0/24
176.46.145.0/24
176.46.147.0/24
176.46.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:51:24:f9:59:bf:17:30:80:e4:ee:99:5f:20:2a:d5:0a:b5:
97:29:d6:41:c6:08:7b:81:7c:d2:8f:e9:e6:68:bd:6c:d8:66:
ea:48:a5:bc:46:c1:45:55:fa:69:d2:ba:0e:98:2d:f9:0c:d2:
07:f1:7f:d3:23:1d:f6:17:99:3c:d2:66:c3:13:1c:79:26:be:
cf:6c:22:58:58:b5:8b:5b:2f:ff:9f:47:1c:9f:41:75:7e:8e:
5a:ef:48:4a:5c:a9:05:6d:ae:8d:83:c2:3e:a0:01:ac:36:e6:
79:55:ca:44:7b:ed:3e:2c:9b:56:95:99:c9:9f:9f:bc:cc:d7:
50:6d:fb:4e:a0:4c:43:c7:44:da:44:a5:d5:f9:94:bd:f8:7e:
d7:d0:d6:28:09:6a:7d:d4:44:a4:1d:cc:a5:0d:a0:75:a9:da:
57:b7:16:59:3d:83:62:56:04:10:b8:42:40:c2:27:65:45:e7:
69:0a:b0:0f:ed:cd:a4:d9:20:62:f7:a9:ce:05:77:f1:16:21:
9d:8c:9f:cb:57:24:f6:e9:86:a0:2c:d6:47:b7:1b:1e:18:fe:
5f:07:4e:27:0f:99:8e:ad:ba:6d:d5:58:c8:86:dc:61:3f:18:
4d:ab:a1:30:66:32:82:90:1d:23:9e:32:98:3f:b4:c9:2f:40:
f2:bb:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:33 2025 by rpki-client