Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/M-cEnsq_dPOVTyKO2rjSLLnUrAM.roa
File: M-cEnsq_dPOVTyKO2rjSLLnUrAM.roa (raw, json)
Hash identifier: O0PwP+h76q9SqvyEgamcKzVaLDoL4fH1sx2IeF7CyIc=
Subject key identifier: 33:E7:04:9E:CA:BF:74:F3:95:4F:22:8E:DA:B8:D2:2C:B9:D4:AC:03
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 018FF2BB89F19AD94F902E79AF2E19A9B575
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/M-cEnsq_dPOVTyKO2rjSLLnUrAM.roa
Signing time: Fri 07 Jun 2024 12:45:27 +0000
ROA not before: Fri 07 Jun 2024 12:45:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21100
IP address blocks: 5.34.180.0/23 maxlen: 23
185.14.28.0/22 maxlen: 22
195.123.216.0/21 maxlen: 21
217.12.200.0/23 maxlen: 23
217.12.208.0/23 maxlen: 23
217.12.218.0/24 maxlen: 24
2a02:27a9::/32 maxlen: 32
2a02:27ab::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Aug 2024 14:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:bb:89:f1:9a:d9:4f:90:2e:79:af:2e:19:a9:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 7 12:45:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33e7049ecabf74f3954f228edab8d22cb9d4ac03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:6c:f5:dc:6e:6e:a5:5a:fc:d2:d8:5f:73:
a2:b7:24:aa:4e:13:b1:dc:f7:8f:1b:c3:be:a6:8a:
4c:56:7d:2d:d3:0b:8c:94:62:c5:c4:4a:23:5f:2b:
13:df:3f:19:10:f2:56:fc:2c:45:dd:5a:8e:0b:ef:
57:4b:3e:df:7a:15:bc:c5:18:ba:96:93:68:0e:80:
49:9c:52:e2:9d:76:71:7f:f9:19:e0:2e:0b:5c:5b:
01:37:bc:42:32:59:3e:a2:de:de:50:02:a8:cb:36:
77:bf:17:51:c6:9c:85:64:c5:32:71:07:0d:3d:a2:
08:14:f0:23:1d:38:e3:b9:a8:2b:52:66:96:32:c4:
dd:bc:9f:0b:0b:a8:14:85:42:39:ca:20:27:b6:a0:
ab:a5:c0:78:d4:a8:fa:99:07:44:ea:47:c0:e1:53:
09:6c:05:55:2d:b8:23:d3:42:1b:6b:fa:dc:6b:5e:
e1:33:66:7d:5b:2a:d7:e2:ab:7a:a1:81:e5:37:cf:
26:87:a3:9c:18:87:60:f1:3e:34:0c:5c:22:19:2d:
ec:31:f8:56:6d:aa:9c:f8:e4:e3:dc:35:c8:ac:9e:
50:9d:fb:98:68:2a:97:44:f2:3b:07:ad:07:bb:1e:
a1:d4:88:fb:7a:e7:6c:ec:47:a5:c0:38:93:65:26:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:04:9E:CA:BF:74:F3:95:4F:22:8E:DA:B8:D2:2C:B9:D4:AC:03
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/M-cEnsq_dPOVTyKO2rjSLLnUrAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.180.0/23
185.14.28.0/22
195.123.216.0/21
217.12.200.0/23
217.12.208.0/23
217.12.218.0/24
IPv6:
2a02:27a9::/32
2a02:27ab::/32
Signature Algorithm: sha256WithRSAEncryption
08:ff:84:5a:01:30:64:03:26:82:f1:6e:df:9b:53:61:79:2b:
56:ff:60:3a:8c:ee:6b:81:8f:bf:4a:70:4c:c9:a0:72:48:80:
c0:33:07:32:f5:b9:1c:6c:17:f3:52:44:6d:10:49:2b:d3:e6:
fa:eb:70:be:fd:4a:54:bc:86:cb:06:1e:f7:9f:96:52:75:14:
80:7c:3e:07:96:93:30:1c:ac:88:12:17:7c:ea:12:7d:46:1f:
84:a7:84:ef:50:77:55:a7:48:64:db:b5:df:60:c9:fc:45:66:
fd:fd:b3:08:d1:38:12:6e:b1:74:ef:28:d4:60:f8:6b:7a:16:
c3:23:ba:64:48:ae:49:f5:4f:5b:03:cb:a9:80:de:18:6e:31:
7b:ff:d9:19:f3:64:2a:52:32:a7:9f:2d:3a:ab:4e:d7:7f:b0:
b9:7e:44:ec:4f:9c:12:f6:64:53:2f:b7:d1:bf:0b:4f:39:6d:
aa:e9:75:78:49:38:00:4e:18:89:f5:72:7c:35:56:9d:f8:a4:
f0:5f:a6:01:4c:5e:1b:f1:52:73:ea:38:ad:14:87:5c:fb:93:
ac:dd:0c:37:2e:e2:e5:a2:43:0d:a9:67:7d:72:0d:18:d5:80:
f9:b0:7e:d6:85:33:dd:b5:84:ad:dc:61:cc:08:6a:e4:f7:d5:
d5:48:7f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:01 2025 by rpki-client