Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eVLNSPnTZwJz1s466wWSvpHhQ4E.roa
File: eVLNSPnTZwJz1s466wWSvpHhQ4E.roa (raw, json)
Hash identifier: gjwH+NkOP8mAYm0MqDivOHxbYF8wR9aXnh8FTZRI5RU=
Subject key identifier: 79:52:CD:48:F9:D3:67:02:73:D6:CE:3A:EB:05:92:BE:91:E1:43:81
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018EF60C043646668CCB43AAF2EDB13F1AB7
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eVLNSPnTZwJz1s466wWSvpHhQ4E.roa
Signing time: Fri 19 Apr 2024 11:09:26 +0000
ROA not before: Fri 19 Apr 2024 11:09:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34358
IP address blocks: 89.34.107.0/24 maxlen: 24
89.35.204.0/24 maxlen: 24
89.39.189.0/24 maxlen: 24
176.223.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:0c:04:36:46:66:8c:cb:43:aa:f2:ed:b1:3f:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 19 11:09:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7952cd48f9d3670273d6ce3aeb0592be91e14381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:b1:55:5e:c6:20:6c:49:48:79:b0:10:a9:
c5:86:32:83:c1:f8:9e:9c:90:a6:3d:a5:12:06:4b:
14:11:24:c2:0b:b6:0c:6e:c6:28:e3:39:1f:b6:30:
af:ea:c5:d4:9c:13:37:6a:f4:c1:c7:88:05:09:c3:
f6:17:4b:73:6e:87:df:17:23:a1:01:9e:52:cb:43:
ca:1f:19:f2:f7:e5:6c:f1:6b:6f:c9:52:9f:5c:7a:
7f:f9:b1:00:8f:54:d3:b3:f9:f3:0e:a2:0b:c8:b2:
76:51:c2:e7:14:fb:0f:5e:c6:08:a8:ba:69:6d:cb:
16:c4:1d:f5:74:f5:81:04:25:c7:1b:d2:78:1c:36:
80:22:a4:5c:db:2b:46:42:73:59:17:fe:c9:db:80:
47:af:b3:03:d9:70:40:9f:9c:06:d4:ef:f3:f0:e5:
4e:87:13:89:c6:5a:b9:c3:bf:82:f1:14:49:c7:8f:
93:cd:24:26:2f:e2:43:2c:48:d2:38:e6:1b:60:8b:
3b:1d:53:1e:8f:29:54:64:06:fa:7b:34:0b:23:22:
49:bc:00:1d:7c:67:fa:c4:c6:39:59:91:6f:b3:65:
1a:0b:9c:46:e2:23:0d:76:68:65:71:5e:b9:85:e4:
0e:21:c9:ae:63:54:dd:67:1e:a2:d4:33:c9:18:6f:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:CD:48:F9:D3:67:02:73:D6:CE:3A:EB:05:92:BE:91:E1:43:81
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eVLNSPnTZwJz1s466wWSvpHhQ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.107.0/24
89.35.204.0/24
89.39.189.0/24
176.223.166.0/24
Signature Algorithm: sha256WithRSAEncryption
13:dd:26:e1:83:9f:df:14:d5:76:b7:2e:04:ad:59:45:70:37:
b0:76:11:82:b7:df:8d:3e:9c:46:4a:ae:67:f6:49:3a:38:c7:
31:40:d5:59:4e:ec:e7:6f:d0:e9:c8:6d:0d:ac:8d:f8:f3:c6:
c3:7c:ab:65:74:8c:82:e6:c1:02:d6:64:5b:49:a3:94:8c:a6:
10:a1:3b:0f:f9:39:87:0d:ed:e2:33:bc:ed:23:af:03:ac:2b:
b9:85:72:d6:40:3e:49:87:e7:42:67:20:8d:19:30:49:68:01:
61:2f:fe:30:6a:60:27:a1:cf:5f:4d:d2:08:19:d4:52:d3:00:
bc:84:2e:ed:40:1d:6e:d4:b1:59:1c:d8:e2:a8:87:6f:35:54:
35:df:e5:be:a1:e5:a8:13:69:96:05:f8:4e:1a:95:55:93:ae:
f1:d4:c4:a3:60:9d:67:34:e2:b5:ad:51:4e:62:2b:0e:8d:99:
e8:21:8a:20:68:c7:22:97:bd:a6:c5:d8:b4:2e:aa:23:5a:5b:
59:0e:10:d8:64:6f:0f:9d:35:41:9f:74:88:4d:d3:93:b9:c7:
0a:bf:40:e7:72:c9:6f:a1:4d:d4:05:8b:ab:b8:ad:58:62:e3:
90:95:9e:8c:68:de:d7:2a:a4:71:0b:30:62:44:70:0c:dc:e5:
f2:7b:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:56 2025 by rpki-client