Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/E0AeTEyEGKs-B4xf94qxwx4YBPE.roa
File: E0AeTEyEGKs-B4xf94qxwx4YBPE.roa (raw, json)
Hash identifier: 5LYwMxuy2h/0sh+eOSVmgpRKsnhie20XiGT6MzNlApY=
Subject key identifier: 13:40:1E:4C:4C:84:18:AB:3E:07:8C:5F:F7:8A:B1:C3:1E:18:04:F1
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01928A69F202F95C43732F1DD02421E63DE9
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/E0AeTEyEGKs-B4xf94qxwx4YBPE.roa
Signing time: Mon 14 Oct 2024 09:44:11 +0000
ROA not before: Mon 14 Oct 2024 09:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 103.216.172.0/24 maxlen: 24
103.216.173.0/24 maxlen: 24
188.66.26.0/24 maxlen: 24
193.108.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:69:f2:02:f9:5c:43:73:2f:1d:d0:24:21:e6:3d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 14 09:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13401e4c4c8418ab3e078c5ff78ab1c31e1804f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:48:92:d8:60:8e:f7:26:ce:9a:fc:71:7c:
65:5b:4b:fe:71:bf:62:34:20:9f:cd:bb:ef:21:e6:
be:99:2b:c9:02:06:98:90:ec:b8:c8:a0:2f:c1:f3:
12:89:5b:f6:d1:00:9a:2a:d9:53:ea:12:e4:48:b6:
4d:72:b1:e6:f3:78:61:d9:92:44:ec:e7:14:d0:cc:
e2:5a:a6:93:98:65:c2:17:b2:49:2d:15:a1:5f:c6:
6f:9f:22:08:53:25:12:bb:ca:9b:3e:33:e1:56:93:
fe:81:3c:bb:23:84:6c:04:31:82:ab:bb:55:ac:ba:
61:5f:83:c0:90:11:c8:c4:5f:a5:58:6c:ad:96:9a:
b4:ae:fc:b8:24:bc:bf:4e:a3:86:65:c2:f5:7f:c3:
47:3a:2f:81:aa:a6:d1:cf:9e:dd:d1:e2:c2:d5:09:
4c:b1:e1:b8:c7:65:de:9c:9a:93:b6:fb:54:d9:b5:
26:17:bf:f8:17:ee:a9:8c:37:7f:ff:84:24:db:f2:
fb:7b:85:c2:86:a4:19:24:ed:5a:27:6e:92:58:81:
40:02:f4:e2:6b:ce:dd:36:6f:4b:0d:e8:a4:1a:4b:
a2:55:25:24:d5:93:17:8b:09:97:81:b4:31:d3:50:
f2:a4:1b:ee:fb:5c:c5:75:25:18:af:ef:94:e0:35:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:1E:4C:4C:84:18:AB:3E:07:8C:5F:F7:8A:B1:C3:1E:18:04:F1
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/E0AeTEyEGKs-B4xf94qxwx4YBPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.172.0/23
188.66.26.0/24
193.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fc:bf:dc:d8:f3:b4:ca:1b:af:53:15:93:29:1b:24:2a:8f:
e2:8e:c6:96:12:21:44:13:69:d1:6c:50:ad:0e:bb:80:e0:68:
39:14:6c:23:15:ec:1d:9c:34:6f:f7:39:02:86:c7:58:2a:a2:
6f:c1:bb:41:ae:6c:ca:c2:14:e1:79:8f:00:23:61:3b:53:70:
31:30:c9:ec:73:7e:d2:94:20:d8:e4:00:4b:cf:9f:bf:ba:27:
d2:c4:d1:ab:d5:74:aa:73:8d:3f:aa:f6:c8:a0:bf:b2:7d:7f:
6f:d1:fb:1f:59:c9:00:77:a6:f3:25:c3:31:2d:b1:15:84:37:
7a:d5:4a:51:19:30:c8:db:1f:21:23:6a:33:52:43:36:92:6d:
df:16:e1:f8:2a:fc:71:4f:54:99:aa:07:f2:52:0d:4f:1f:05:
19:1d:2a:96:38:18:a0:5c:e1:53:65:63:9b:39:bf:48:db:ee:
84:65:55:05:84:c4:ce:4e:94:ce:c8:53:79:49:69:d1:d9:fe:
68:64:2c:00:b9:31:2a:8f:90:89:e7:c0:02:3a:d5:a9:da:b5:
94:23:cd:8e:f1:6d:ef:29:0e:79:b1:66:5e:43:91:83:63:79:
9e:dc:69:03:2c:1b:e3:98:db:36:1d:7d:c8:3e:67:1d:79:54:
58:14:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:52:14 2025 by rpki-client