Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/pPEGFB2UDqVSXXWE8Tgsf8A5NNk.roa
File: pPEGFB2UDqVSXXWE8Tgsf8A5NNk.roa (raw, json)
Hash identifier: 0obbNevdsG3cBAg2cMx0T541hdh3Tc5qaJMCQwBXnYY=
Subject key identifier: A4:F1:06:14:1D:94:0E:A5:52:5D:75:84:F1:38:2C:7F:C0:39:34:D9
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 018CC5001A5249C6059FF5DEFCC7B8BE458A
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/pPEGFB2UDqVSXXWE8Tgsf8A5NNk.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48135
IP address blocks: 151.89.128.0/17 maxlen: 17
193.111.46.0/24 maxlen: 24
94.127.84.0/22 maxlen: 22
94.127.83.0/24 maxlen: 24
94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.86.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.87.0/24 maxlen: 24
151.89.232.0/22 maxlen: 22
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.54.0/24 maxlen: 24
185.51.13.0/24 maxlen: 24
185.51.12.0/24 maxlen: 24
185.51.14.0/24 maxlen: 24
185.51.15.0/24 maxlen: 24
151.89.0.0/17 maxlen: 17
151.89.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 13 Feb 2024 09:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1a:52:49:c6:05:9f:f5:de:fc:c7:b8:be:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4f106141d940ea5525d7584f1382c7fc03934d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:7c:0c:01:a6:94:f7:61:21:3e:73:20:98:
e4:26:d3:fa:b6:c2:a2:6d:6f:1c:9d:f1:9e:3a:d9:
c9:d2:7e:21:87:f8:29:6f:10:a7:77:48:3f:94:9f:
3f:c9:6f:47:ce:85:85:cf:06:4f:ec:2f:07:81:2a:
6b:45:46:b6:c2:28:9b:40:8e:8b:5d:df:a9:11:c7:
f0:90:54:df:b4:8e:bc:25:bd:55:d8:26:27:41:99:
d3:42:ff:44:a6:3f:95:c0:4f:84:8d:c6:5d:a6:67:
ca:09:b7:80:39:22:f6:3e:75:e1:eb:80:06:19:ad:
91:b8:5f:18:f5:64:00:a7:82:4f:31:60:90:c3:35:
01:fc:46:b0:d5:b0:08:76:76:fb:30:f9:01:2c:ef:
84:f0:00:03:cc:4a:39:eb:8a:0f:70:86:40:a6:6f:
a6:61:42:25:95:6c:49:b5:7a:39:70:31:86:9a:9f:
ca:5f:d7:cd:97:c2:13:17:20:a7:14:7c:ed:ef:ed:
8f:7f:38:39:3b:90:cc:25:90:44:3d:67:5d:0c:f2:
63:05:e8:d1:31:05:08:5e:ab:9a:93:56:47:15:62:
a0:5a:65:cd:0a:f0:a3:c3:47:71:d1:ed:f4:73:06:
4f:2f:3c:16:44:05:72:85:59:a5:e5:b1:d3:3b:4f:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:06:14:1D:94:0E:A5:52:5D:75:84:F1:38:2C:7F:C0:39:34:D9
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/pPEGFB2UDqVSXXWE8Tgsf8A5NNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
185.51.12.0/22
193.111.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fd:5b:da:ba:ad:ce:e3:ae:46:fe:e2:2e:4c:ee:ee:7f:e1:
c7:af:fa:e9:66:15:28:92:3d:8e:1a:e4:ab:e3:a3:09:ac:ff:
39:12:ab:b1:81:e4:fd:dc:24:25:18:7e:58:ee:4b:0a:0d:c4:
1b:b7:56:1b:39:6d:4d:72:27:e8:67:ad:df:23:f0:20:fe:e8:
78:4c:14:71:12:2f:56:a6:3d:f3:06:d1:65:f2:26:16:76:27:
35:ab:6c:15:af:97:5c:47:a9:35:d5:0f:41:4f:2b:c8:fc:2f:
38:49:d0:45:6f:1d:98:20:e4:5c:85:c4:13:25:e5:1e:c6:53:
55:75:ee:0c:ee:88:78:ce:0e:82:6f:ae:42:fe:ca:01:fd:23:
dc:8e:b8:37:81:ab:d0:9e:52:e5:79:bf:2d:09:87:92:97:ec:
88:8e:e4:ac:25:bb:29:b3:f9:e6:84:8f:b0:83:d8:79:95:61:
b7:d5:94:f4:53:00:ce:44:af:a1:ea:e1:a7:64:13:9f:e8:30:
b7:10:de:1f:bf:aa:16:40:9e:d3:d3:7a:2b:9d:d5:47:40:4d:
7f:d7:06:0a:fe:bc:12:ee:a2:5d:6a:2d:3b:22:2e:d9:33:79:
4f:1e:0c:ad:38:5d:0c:da:95:4d:76:8b:fd:17:ec:75:59:14:
97:61:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:47 2025 by rpki-client