Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Th_wVQnfgutAcFbkdJc-IS2rn9U.roa
File: Th_wVQnfgutAcFbkdJc-IS2rn9U.roa (raw, json)
Hash identifier: WA5BKX1x1Gc396y8cS72Y61PEDV0cg21bkUz8Fq9NNI=
Subject key identifier: 4E:1F:F0:55:09:DF:82:EB:40:70:56:E4:74:97:3E:21:2D:AB:9F:D5
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193AD776299E8734BDDD53EC740F262DAEB
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Th_wVQnfgutAcFbkdJc-IS2rn9U.roa
Signing time: Mon 09 Dec 2024 22:08:22 +0000
ROA not before: Mon 09 Dec 2024 22:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 213.18.224.0/20 maxlen: 24
217.177.0.0/21 maxlen: 24
217.181.64.0/22 maxlen: 24
217.181.72.0/22 maxlen: 24
217.181.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:77:62:99:e8:73:4b:dd:d5:3e:c7:40:f2:62:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 9 22:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e1ff05509df82eb407056e474973e212dab9fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:46:50:2f:62:52:58:fb:dc:f8:78:6e:57:
23:d0:91:4e:1b:e8:4b:a0:36:3d:b3:28:7c:00:c4:
5c:2f:e6:cb:93:24:13:dd:e9:a4:aa:80:bb:75:0d:
a8:ae:89:cc:e9:fd:4b:c4:2f:6f:a1:d0:1f:a3:00:
23:d0:5c:02:5a:de:ce:ae:28:0a:6e:60:b4:d5:03:
ec:6a:75:55:a9:1d:71:04:f2:1f:2b:99:4f:d0:bd:
19:53:f2:f9:62:89:84:ff:9b:6d:2d:c9:b4:a9:e1:
fe:64:c5:c2:6e:eb:29:3d:ee:ba:b0:e9:07:fd:73:
f9:33:56:9a:b2:e4:df:44:45:cb:ea:ce:23:13:83:
ec:34:80:fd:3b:95:41:0b:47:a2:d1:cf:3a:07:20:
33:86:23:55:51:2c:a4:56:2e:87:58:9e:50:b4:75:
ba:8e:2f:5c:16:ff:14:4d:92:23:52:57:db:bf:bb:
76:aa:65:f5:93:0b:98:d6:b3:b2:31:c0:39:0d:c5:
60:1e:bd:f0:fe:fb:3a:cb:dd:18:83:5d:b9:fe:57:
a4:ce:f5:b2:c0:91:7e:b2:82:27:31:24:e2:96:8b:
c3:95:8c:ee:81:68:81:df:9f:69:95:51:cf:7d:52:
59:43:39:98:3a:6a:d7:16:3a:4a:0d:c4:f8:28:20:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:F0:55:09:DF:82:EB:40:70:56:E4:74:97:3E:21:2D:AB:9F:D5
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Th_wVQnfgutAcFbkdJc-IS2rn9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.224.0/20
217.177.0.0/21
217.181.64.0/22
217.181.72.0/22
217.181.80.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b7:ba:e0:3b:a5:f1:d8:49:8f:a8:c9:cd:c3:de:25:57:c3:
c0:69:95:ba:1b:ca:ca:fd:5a:ac:4c:62:47:61:0c:d5:9c:f5:
92:1b:b7:38:f4:3e:df:33:13:28:e9:98:26:ed:2e:8c:39:02:
4c:a0:fc:6a:01:8a:fc:b5:7b:8b:5e:d4:c4:40:41:71:4e:74:
df:9f:63:f7:55:13:3b:70:64:92:ea:ce:5b:17:9a:9f:9e:53:
2b:4d:37:ee:c8:3d:11:56:de:af:5c:7b:f0:f3:88:88:7c:37:
6e:ad:3c:f4:d5:dc:c4:1c:94:a7:34:1a:f0:99:7b:4b:00:c4:
9f:ed:04:5d:82:8e:41:25:36:cb:b1:78:52:20:95:68:63:c6:
99:a9:d8:41:f2:f4:61:84:a2:8d:26:4f:93:41:5c:1c:bf:14:
c0:09:ca:a1:26:91:7f:ca:1c:99:0b:b6:35:d0:37:83:21:d8:
82:b9:3f:f0:cc:2a:d8:b2:4d:63:a8:31:da:4e:3a:e2:1e:a7:
84:9a:08:a0:fd:2b:dd:0b:ec:4c:b2:44:18:9e:04:d1:d5:d8:
7e:ee:4d:08:fa:b3:cd:14:72:ce:f7:10:18:14:e7:a7:ee:ae:
e7:52:25:fa:fd:d4:e0:9d:6b:82:8e:1e:4e:9f:5a:f5:67:ae:
f9:cf:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:53 2025 by rpki-client