Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/vT79_I3t6KsB2liy40jeMt26FKc.roa
File: vT79_I3t6KsB2liy40jeMt26FKc.roa (raw, json)
Hash identifier: RMBNXaxLHIRnpHEkU3+IwSgqtEPLogfKq0lzexa5cGI=
Subject key identifier: BD:3E:FD:FC:8D:ED:E8:AB:01:DA:58:B2:E3:48:DE:32:DD:BA:14:A7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0190FEDB0428B62E4D69CF01B64C1F1C77D6
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/vT79_I3t6KsB2liy40jeMt26FKc.roa
Signing time: Mon 29 Jul 2024 14:18:04 +0000
ROA not before: Mon 29 Jul 2024 14:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 07:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:db:04:28:b6:2e:4d:69:cf:01:b6:4c:1f:1c:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 29 14:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd3efdfc8dede8ab01da58b2e348de32ddba14a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:54:c2:d9:9d:de:e6:fd:f4:59:a9:cd:0f:
72:a3:61:60:96:64:6a:2b:60:01:5c:d3:c2:6c:09:
a8:38:f3:16:4f:d9:45:ac:79:9f:73:7f:43:e4:3e:
2c:ab:ff:f8:0e:40:63:50:51:f1:0d:d2:21:49:4d:
94:3d:01:e6:c4:fc:48:f3:e4:5d:b5:1e:1a:3b:bd:
7f:06:8b:13:90:ff:67:c7:c2:cb:3c:38:60:6e:cf:
8b:05:f7:35:da:a4:7d:dd:77:f9:5c:9e:e4:50:20:
fb:75:34:c5:c6:07:9b:66:e6:52:fc:ec:c9:bf:04:
14:2b:86:b4:0e:3c:ed:96:4e:b9:75:fb:c9:0c:66:
7d:51:96:dd:92:1d:ca:11:63:a0:0b:e8:58:3e:87:
49:0b:bd:61:e3:d0:12:39:b8:23:e5:27:d4:85:78:
21:99:e1:84:57:4b:d7:48:fa:9e:32:b8:6d:da:c3:
03:e3:75:01:16:ff:48:53:c7:89:5c:30:da:61:00:
87:6f:98:57:2c:bf:02:d8:ad:29:07:7b:95:e0:6a:
8f:a1:f2:28:89:90:b1:65:02:cf:69:ad:f7:e8:63:
81:a9:a3:05:59:5d:3a:d0:9b:48:de:25:35:be:f9:
0c:d7:fc:d3:0e:fc:2d:c5:22:7b:3f:12:16:2a:4f:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:FD:FC:8D:ED:E8:AB:01:DA:58:B2:E3:48:DE:32:DD:BA:14:A7
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/vT79_I3t6KsB2liy40jeMt26FKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0/22
109.203.176.0/20
176.46.132.0/24
176.46.140.0/24
176.46.145.0/24
176.46.147.0/24
176.46.151.0/24
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e3:60:98:27:cb:eb:1a:c3:a2:7c:fa:37:03:0c:a8:22:e7:
03:d3:22:15:9f:90:a8:bf:56:93:bf:f0:c9:5f:e8:61:d0:8f:
64:a1:7a:54:b0:53:ef:1f:dc:99:e0:d8:6f:cd:2c:5c:57:24:
67:a5:6e:48:ff:b6:2a:6d:59:dd:f3:2a:66:b4:70:5e:fc:9c:
9c:cd:f5:34:c9:26:47:7a:fb:b5:02:f7:da:72:72:96:45:99:
03:1d:b7:51:c4:db:1f:4a:63:43:d6:9b:02:e7:f2:55:bd:f2:
fb:fd:ad:3e:0b:c8:19:34:ef:d7:08:08:cc:e4:35:38:9a:09:
52:28:0b:7d:1b:bf:cf:cf:b0:cc:70:aa:72:f2:89:fe:c5:74:
bb:0b:33:89:65:da:2a:45:8b:55:50:9a:fb:b4:c0:80:3e:33:
cc:e3:9a:57:69:20:b1:79:78:95:8b:1f:9f:43:1b:9e:3f:98:
d6:9d:3c:e3:ef:44:70:81:9b:ea:29:8a:63:f5:fa:2b:6f:d4:
94:b0:49:b5:fd:fe:d0:15:50:30:65:0f:39:24:a3:fc:b1:06:
7b:93:09:15:4c:fe:e9:1d:4b:ec:c9:7b:d0:16:31:c3:fa:c9:
c3:b7:a1:c5:5d:8a:45:31:9a:af:aa:22:4d:5c:3e:3b:51:4e:
99:19:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:30 2025 by rpki-client