Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/X-8vkPC9HNRo5bJsDCYPe4rVTQw.roa
File: X-8vkPC9HNRo5bJsDCYPe4rVTQw.roa (raw, json)
Hash identifier: gLLOVfbphNp2ezh+j11n77aU2YkOdXudi5w/BEjCzZk=
Subject key identifier: 5F:EF:2F:90:F0:BD:1C:D4:68:E5:B2:6C:0C:26:0F:7B:8A:D5:4D:0C
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0192C40298149CF46B01881592177841C79F
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/X-8vkPC9HNRo5bJsDCYPe4rVTQw.roa
Signing time: Fri 25 Oct 2024 14:09:17 +0000
ROA not before: Fri 25 Oct 2024 14:09:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31520
IP address blocks: 93.183.220.0/22 maxlen: 22
93.183.232.0/22 maxlen: 22
109.206.32.0/19 maxlen: 24
176.102.48.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 24
176.102.56.0/21 maxlen: 24
176.112.0.0/19 maxlen: 24
176.241.128.0/19 maxlen: 24
176.241.148.0/22 maxlen: 22
185.46.248.0/22 maxlen: 24
188.247.96.0/20 maxlen: 20
188.247.116.0/24 maxlen: 24
188.247.117.0/24 maxlen: 24
188.247.118.0/24 maxlen: 24
188.247.119.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
194.29.60.0/22 maxlen: 22
195.114.141.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 14:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:02:98:14:9c:f4:6b:01:88:15:92:17:78:41:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Oct 25 14:09:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fef2f90f0bd1cd468e5b26c0c260f7b8ad54d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:df:69:16:a9:54:8a:94:bc:8f:b5:68:6d:
53:6e:23:47:6c:72:16:2a:61:d8:5f:0f:b4:b6:04:
c8:47:e1:8f:a5:5a:b5:39:76:70:97:0e:d0:8b:80:
07:88:62:ee:47:55:9e:9a:af:7b:a5:48:46:7a:c7:
f6:7e:e7:a5:38:17:39:70:7f:2f:c8:26:ba:fa:47:
9f:a1:a2:1a:6b:0c:03:73:be:64:09:65:2b:13:33:
15:bf:f5:ad:85:86:93:42:e3:cd:5a:4c:97:44:34:
10:be:d1:d6:7d:c2:ce:43:1c:7e:e2:64:e2:6f:ee:
9e:45:92:9b:e4:af:4d:29:3d:e1:3b:33:3e:bf:a6:
56:a8:18:61:65:06:e8:42:53:86:c4:f0:8a:99:a2:
f5:cf:17:0d:db:e4:c2:b3:80:69:09:0e:1d:ae:ed:
53:f2:a4:c0:2f:d1:1f:14:f1:97:83:20:db:90:af:
35:a9:19:0d:bf:33:94:55:7a:0c:e5:97:7f:47:e7:
6d:4f:94:a2:0e:c3:78:f9:c7:33:ef:ff:94:88:13:
82:95:f5:6a:af:51:e9:16:b8:69:7a:b6:82:66:c9:
b7:b6:a1:0b:c8:aa:14:4a:35:e6:70:0b:31:6b:a3:
9e:12:eb:65:c3:46:59:1a:30:c9:b0:52:63:23:92:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:2F:90:F0:BD:1C:D4:68:E5:B2:6C:0C:26:0F:7B:8A:D5:4D:0C
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/X-8vkPC9HNRo5bJsDCYPe4rVTQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.220.0/22
93.183.232.0/22
109.206.32.0/19
176.102.48.0/20
176.112.0.0/19
176.241.128.0/19
185.46.248.0/22
188.247.96.0/20
188.247.116.0/22
193.108.49.0/24
193.108.128.0/24
194.29.60.0/22
195.114.141.0-195.114.144.255
Signature Algorithm: sha256WithRSAEncryption
29:1a:7a:2c:c2:1b:c5:14:ab:3d:49:a2:25:79:ac:25:91:72:
83:fc:6f:28:43:43:39:40:97:57:e7:c8:33:e1:2a:9f:23:f7:
ca:45:24:29:a9:7e:2c:c2:1b:36:46:29:70:37:27:8c:9d:0e:
23:3c:be:6a:9c:a3:95:84:a5:15:86:3e:44:bb:5b:3f:4b:35:
e6:d6:23:ea:c9:c5:22:c6:cc:59:8a:38:8d:32:25:f3:a1:46:
14:77:19:63:63:79:52:92:4b:6d:9a:4e:6b:c7:97:b4:c1:21:
1d:64:0f:57:3d:98:bf:55:e7:ab:3e:95:1a:f7:31:9f:d9:78:
c4:62:dc:a1:ca:26:55:6a:fe:58:dd:b8:ea:ec:b1:d2:e8:a8:
e7:4c:9d:9a:5b:d8:04:92:a8:f3:4b:dc:c4:d4:83:90:2f:bc:
2e:11:af:98:37:61:1e:de:f7:78:c2:8a:68:2b:ef:b3:67:d8:
4e:41:6e:9c:4c:2e:df:5f:e3:6e:da:ab:92:91:5f:ee:ac:95:
22:ba:f1:dc:b6:6e:e9:23:78:e1:f9:3f:67:1b:51:43:44:8f:
fa:49:69:cc:68:8f:da:65:c7:11:ce:fd:51:3a:5b:c7:ee:1c:
ae:20:12:99:da:43:c2:ab:d8:7a:b0:c7:31:3b:7b:2d:33:d0:
c5:c3:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:17:00 2025 by rpki-client