Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XIIeufov-Emsgpx1_eluRwwrrgI.roa
File: XIIeufov-Emsgpx1_eluRwwrrgI.roa (raw, json)
Hash identifier: eyGKJsNXcKxfxcYHzw7viSa11TMQ9O+c4reP0YkmGEc=
Subject key identifier: 5C:82:1E:B9:FA:2F:F8:49:AC:82:9C:75:FD:E9:6E:47:0C:2B:AE:02
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019001234C993960D7175C21B8E7B5F0C180
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XIIeufov-Emsgpx1_eluRwwrrgI.roa
Signing time: Mon 10 Jun 2024 07:53:28 +0000
ROA not before: Mon 10 Jun 2024 07:53:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 79.99.76.0/24 maxlen: 24
82.152.110.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 14:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:23:4c:99:39:60:d7:17:5c:21:b8:e7:b5:f0:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 07:53:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c821eb9fa2ff849ac829c75fde96e470c2bae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:7e:f1:f8:74:34:61:ce:46:f1:fb:f6:bd:
43:f2:73:f1:c6:24:53:4c:0d:e7:d7:e0:a1:ad:de:
26:8c:1c:68:ba:fa:eb:07:1a:ec:94:ac:e4:36:ff:
c1:96:11:3f:21:2e:4e:2a:93:c3:1c:b5:97:3e:8c:
a1:9a:45:f6:65:9c:5f:84:84:cd:66:cc:0f:ee:a6:
ad:04:c6:3a:08:1c:82:37:f2:3f:5a:36:80:36:ab:
6f:9b:fc:4d:48:e9:2f:cb:9f:21:f9:2f:ba:c7:28:
ab:bf:c8:0f:85:ae:a1:be:3e:ba:4f:0a:f5:8d:d5:
22:cb:2c:30:fa:9a:1e:96:58:d8:63:e6:ef:56:00:
81:38:3f:e7:94:79:e3:33:12:af:f9:8d:db:50:fe:
4e:22:75:53:ab:c3:ed:5d:d5:18:a4:f7:5f:d8:9b:
07:5e:a5:fd:5f:bb:37:a3:72:3c:5e:c8:bf:a6:80:
83:66:75:a9:0a:9b:6b:14:d9:7a:38:ad:e4:2a:67:
d7:4f:56:0f:8b:ed:fe:61:18:ec:74:85:18:80:fc:
37:d2:eb:cf:cf:bb:a4:20:23:d7:2e:be:a6:61:32:
6b:dc:d1:12:f2:4a:75:4b:60:95:74:ef:1b:61:65:
fb:f6:55:8a:6a:58:13:d5:31:d2:b5:94:3d:b5:7b:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:1E:B9:FA:2F:F8:49:AC:82:9C:75:FD:E9:6E:47:0C:2B:AE:02
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XIIeufov-Emsgpx1_eluRwwrrgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.76.0/24
82.152.110.0/24
82.153.66.0/24
213.218.213.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
04:37:3b:85:de:16:73:2a:e5:bb:71:02:82:d8:63:6e:b5:95:
0e:e0:fa:7f:33:6e:67:29:d8:0f:11:58:4a:9a:b7:f7:7a:cd:
9d:03:32:76:4d:0b:80:00:03:0c:4c:d2:f1:ba:59:4c:97:16:
ab:39:05:41:7e:d7:85:cc:5e:a9:8f:e9:7e:a7:e8:5f:67:b1:
24:82:28:3c:7f:5e:74:86:d5:d0:8d:bf:47:c9:ce:37:5f:05:
88:d4:31:0a:74:c3:8e:cf:e1:12:d6:de:ae:7f:1e:0d:8f:48:
0c:94:df:39:dd:57:65:0f:98:5d:2f:a9:a4:dc:5f:28:64:70:
69:4f:27:74:b7:13:00:14:63:e1:d5:24:9b:89:b5:e0:b3:f3:
c8:c9:6f:45:49:c5:4e:52:fe:42:a7:9f:cb:ee:b7:23:73:95:
0d:1a:17:21:62:aa:d2:68:81:b4:be:0a:2a:07:7c:de:ad:1e:
a8:92:69:17:72:e4:cd:69:f5:b5:20:e7:82:df:c5:0f:89:ed:
16:28:7d:b1:b0:c1:d3:84:b3:4c:c2:6c:02:c0:7c:e0:4b:7c:
91:ee:cf:97:16:fe:74:b6:6c:e2:29:9e:bf:59:45:27:ba:00:
8b:c8:db:18:98:17:22:28:56:56:fe:72:01:32:7d:d3:8e:15:
46:a2:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:16:13 2025 by rpki-client