Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/1fX_o1fuhNK3qTQGAAGI96loxJ4.roa
File: 1fX_o1fuhNK3qTQGAAGI96loxJ4.roa (raw, json)
Hash identifier: FwQamVp5KXzTmzIRAB27Fw3m8k8pj6AF0azz/0kPA4w=
Subject key identifier: D5:F5:FF:A3:57:EE:84:D2:B7:A9:34:06:00:01:88:F7:A9:68:C4:9E
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 018CC26D261B37915DB0BAD45BB671BFE92C
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/1fX_o1fuhNK3qTQGAAGI96loxJ4.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15796
IP address blocks: 213.55.128.0/24 maxlen: 24
213.55.128.0/17 maxlen: 24
213.55.131.0/24 maxlen: 24
213.55.132.0/24 maxlen: 24
213.55.141.0/24 maxlen: 24
213.55.206.0/24 maxlen: 24
213.55.224.0/22 maxlen: 22
213.55.220.0/22 maxlen: 22
213.55.240.0/22 maxlen: 22
213.55.244.0/22 maxlen: 22
213.55.147.0/24 maxlen: 24
51.154.248.0/22 maxlen: 22
51.154.252.0/22 maxlen: 22
213.55.184.0/23 maxlen: 23
213.55.188.0/23 maxlen: 23
213.55.192.0/24 maxlen: 24
213.55.193.0/24 maxlen: 24
213.55.194.0/24 maxlen: 24
213.55.195.0/24 maxlen: 24
51.154.0.0/16 maxlen: 16
2a04:ee40::/29 maxlen: 29
2a04:ee42:1::/64 maxlen: 64
2a04:ee41::/41 maxlen: 41
2a04:ee41:80::/41 maxlen: 41
2a04:ee42:53::/64 maxlen: 64
2a04:ee42:2::/64 maxlen: 64
2a04:ee40:2000::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:26:1b:37:91:5d:b0:ba:d4:5b:b6:71:bf:e9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5f5ffa357ee84d2b7a93406000188f7a968c49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:eb:68:94:b0:46:69:d4:1b:2c:a2:e1:93:
4f:e8:d3:91:d2:42:e6:b5:3d:bb:96:3c:b7:f0:97:
75:06:a7:20:9f:8d:dc:19:66:e5:ed:92:62:26:93:
98:ed:58:e1:17:c7:d9:d4:bd:3b:b7:4d:52:f1:56:
d2:62:bc:d9:2e:ba:6b:97:65:bf:9d:47:be:21:ca:
f9:cd:31:e0:c0:49:62:a6:31:da:f0:f9:6b:bd:de:
4c:be:6c:9c:0a:77:27:08:4c:2c:5e:68:41:06:77:
eb:83:0b:e8:42:cb:f2:23:af:6e:f2:33:e1:da:2a:
dd:ef:e4:d6:40:66:a2:d7:d7:13:54:12:53:d9:46:
0f:de:02:cd:ef:5f:7b:73:04:8d:2b:c4:37:e4:e0:
97:30:b7:7e:8d:3a:b5:5a:0d:9d:b1:f0:8b:b9:81:
c8:84:6b:ff:d9:9d:8c:9d:b5:b9:7e:f2:19:4f:f9:
8e:a2:fe:73:97:e9:e5:08:d7:20:ff:94:66:b4:2a:
6c:c8:ef:88:42:bc:ff:f3:7c:ad:45:b0:d0:49:8a:
ae:63:d5:45:04:28:c7:d5:2d:73:9e:67:c0:84:58:
22:bf:83:2e:d3:eb:45:dc:55:67:c4:39:a0:6b:d2:
67:eb:21:e6:80:62:6e:cf:40:6b:14:8b:05:55:91:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:FF:A3:57:EE:84:D2:B7:A9:34:06:00:01:88:F7:A9:68:C4:9E
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/1fX_o1fuhNK3qTQGAAGI96loxJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.154.0.0/16
213.55.128.0/17
IPv6:
2a04:ee40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:cd:cf:b7:1c:19:57:4c:b9:e4:96:9b:69:bd:4f:86:d1:9e:
76:41:b6:4e:e6:e9:a6:40:68:0a:79:cb:6d:f2:2c:98:0d:d7:
cc:9d:77:a2:05:85:b9:bf:3b:0e:99:18:f9:f9:4d:fe:c0:c4:
7d:e9:25:b4:20:86:17:bc:20:a9:69:7b:68:d0:a2:3d:6d:dd:
c2:fd:4a:1d:08:49:83:63:f0:d9:fa:51:54:9c:f3:0d:7c:ff:
2c:64:63:78:22:f8:9b:15:94:0f:3d:40:e2:b3:0f:b5:5a:d0:
c0:06:70:19:c0:f7:c2:0d:3b:dc:b6:69:7a:b3:13:2e:e0:f2:
7e:7b:c6:3b:4b:11:61:8b:bf:4c:a7:75:f1:7e:e1:84:8d:ce:
85:f6:6f:21:a9:cc:31:8b:f3:ab:53:60:9a:13:02:46:1e:2c:
7a:3d:f2:2d:b1:f6:c7:4e:9f:0e:6a:08:61:d1:e9:8e:e7:a9:
5d:8f:7f:ea:c1:85:52:13:9c:b8:b7:8d:1a:5d:99:f3:0b:e3:
de:70:2c:05:ef:86:09:1e:33:3a:9e:f4:a2:d6:81:c6:69:25:
7f:a0:83:69:ee:f4:a2:be:74:bc:bb:1e:8a:03:10:d9:86:98:
a5:9c:05:6b:4b:82:ab:c4:ce:ad:d1:9d:eb:46:c1:ef:8c:8b:
68:5f:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:57 2025 by rpki-client