Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fwecs1uQ5_xg9h58zRLBALoVHeI.roa
File: fwecs1uQ5_xg9h58zRLBALoVHeI.roa (raw, json)
Hash identifier: Hbij2AtpB0csnXQ73Bq+0wl1NUpMS6WxdSwPoKzX8+Q=
Subject key identifier: 7F:07:9C:B3:5B:90:E7:FC:60:F6:1E:7C:CD:12:C1:00:BA:15:1D:E2
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019312B0DF6EC6540E5DC74F519DB005BF8E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fwecs1uQ5_xg9h58zRLBALoVHeI.roa
Signing time: Sat 09 Nov 2024 20:50:01 +0000
ROA not before: Sat 09 Nov 2024 20:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394814
IP address blocks: 94.131.80.0/20 maxlen: 24
94.131.176.0/23 maxlen: 24
94.131.182.0/23 maxlen: 24
94.131.184.0/22 maxlen: 22
94.131.188.0/22 maxlen: 24
95.164.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 21:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:12:b0:df:6e:c6:54:0e:5d:c7:4f:51:9d:b0:05:bf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Nov 9 20:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f079cb35b90e7fc60f61e7ccd12c100ba151de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:ed:21:fc:e0:bf:f2:6a:19:bd:75:04:0d:
2a:d2:6b:1e:54:e1:e5:e6:d3:2e:ac:2f:d7:a9:50:
68:c7:b8:73:c8:fb:5c:6e:df:e8:d8:94:df:2c:63:
a3:21:ca:21:6d:4f:d3:4d:2c:ae:98:1f:3f:00:a4:
13:07:cc:32:43:53:14:18:b0:b0:e8:a8:d6:6d:32:
3d:3d:75:d1:5e:ed:f6:53:25:cc:73:a3:d8:9b:fe:
3e:89:b8:10:67:80:55:6a:58:fa:d8:53:64:37:57:
29:a5:bf:77:67:75:05:bb:77:52:43:2d:22:25:3a:
6c:72:87:3e:ed:27:d3:2b:39:6d:9b:41:f3:8e:1b:
65:d6:d6:3e:0b:09:af:9a:8a:6c:5a:91:76:b8:73:
af:53:27:85:d5:cf:51:42:3c:39:3c:eb:b2:5c:5e:
d1:98:31:a1:05:6b:85:35:74:47:f6:c3:74:4b:e1:
60:df:b2:14:0b:39:2f:65:61:ca:33:bc:7f:4a:b9:
b2:58:f6:66:e2:1b:6a:4d:91:7c:1f:ae:d9:83:06:
ab:ea:8a:02:a9:92:6f:28:44:e1:ff:23:58:48:a4:
dd:b1:b4:68:5f:7e:ec:b0:9e:cf:8a:80:fe:46:3c:
a1:04:2a:5f:9f:2b:c6:d0:39:98:f1:e6:ea:09:a6:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:9C:B3:5B:90:E7:FC:60:F6:1E:7C:CD:12:C1:00:BA:15:1D:E2
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fwecs1uQ5_xg9h58zRLBALoVHeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
94.131.176.0/23
94.131.182.0-94.131.191.255
95.164.144.0/20
Signature Algorithm: sha256WithRSAEncryption
44:91:8b:5d:5c:fb:09:32:b0:73:04:f6:62:90:ce:d0:ea:96:
83:31:89:38:c4:2a:39:7d:8b:76:bf:e0:f2:52:cf:ad:ba:09:
04:eb:bf:7a:51:bc:3a:f8:21:f0:04:a8:13:6d:7c:6f:23:2d:
e3:88:8b:c0:b1:40:78:82:48:39:de:bb:fc:1a:64:79:36:2c:
07:66:4e:55:48:c0:6b:37:98:01:01:72:3e:1f:21:86:fc:b9:
93:a7:03:53:7f:cf:70:44:11:42:e3:97:82:a4:c2:3e:54:7c:
06:65:00:e4:54:45:a1:38:e1:e0:e6:d1:53:d6:13:45:b5:9f:
30:18:43:03:0f:70:42:33:12:10:7d:dd:c6:f6:96:9b:2a:c8:
2e:86:f0:d4:c1:21:b7:40:24:d5:eb:31:c7:61:81:20:c8:3a:
2a:43:be:c8:da:47:bf:a8:f2:3e:4b:29:d1:16:83:1f:8e:82:
52:13:11:7b:7e:56:11:9f:73:89:79:a5:fa:9b:81:29:e5:eb:
2a:00:a7:3b:c8:3e:a3:c5:5e:60:12:ea:9a:d7:d3:0e:c1:e8:
99:8f:99:09:68:9b:5e:f8:c7:4b:e3:3a:e8:2d:05:80:0e:5d:
fe:08:ea:9b:f7:56:0a:3c:56:99:68:8f:f1:78:f2:5b:7a:08:
17:2c:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:36 2025 by rpki-client