Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/XE_rZ_t1fyYBDf9JB7EDTEJNxak.roa
File: XE_rZ_t1fyYBDf9JB7EDTEJNxak.roa (raw, json)
Hash identifier: O6nu2UOh4PWq24sEhqKh8X53oh+C3WF6ruDZmG5El18=
Subject key identifier: 5C:4F:EB:67:FB:75:7F:26:01:0D:FF:49:07:B1:03:4C:42:4D:C5:A9
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0193CA2156476EBC37D842B842CEACA8407A
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/XE_rZ_t1fyYBDf9JB7EDTEJNxak.roa
Signing time: Sun 15 Dec 2024 11:43:22 +0000
ROA not before: Sun 15 Dec 2024 11:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57456
IP address blocks: 31.24.87.0/24 maxlen: 24
45.152.122.0/24 maxlen: 24
185.124.64.0/24 maxlen: 24
193.26.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:21:56:47:6e:bc:37:d8:42:b8:42:ce:ac:a8:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Dec 15 11:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c4feb67fb757f26010dff4907b1034c424dc5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:c6:fa:af:82:4c:10:3d:2e:eb:c1:43:ed:
41:6d:c6:9d:cc:3f:bd:15:78:67:37:88:b9:19:03:
31:62:a2:32:61:96:77:ec:7d:ce:8d:39:53:3f:9e:
c6:31:ce:96:7f:60:9f:7f:c0:b7:26:63:cb:9c:cd:
97:ab:02:ad:2b:e1:42:75:e5:f9:ea:20:63:52:06:
45:d6:fe:be:d9:98:7f:71:df:ad:fb:33:62:c2:2d:
95:fb:a5:33:c9:dd:af:3d:66:0c:0a:c9:27:c3:56:
97:8c:e9:9e:52:da:83:0f:ec:03:05:f7:f4:96:e7:
c3:6c:62:bf:f8:34:9c:73:b3:21:fb:c0:e5:ef:30:
7f:c9:4d:c3:df:cd:c0:de:9c:09:48:98:4c:c6:1c:
52:ce:55:a5:98:a0:8b:f2:01:d6:a9:5b:42:ad:67:
7d:32:e9:c5:e7:25:7d:93:03:ec:ca:32:2e:b4:86:
f9:ac:ad:7e:32:31:fa:2b:05:65:de:64:20:bd:91:
b2:e2:d8:f4:2d:82:fa:1c:ea:3b:cd:9a:79:63:3a:
aa:59:27:7e:0c:91:aa:8e:82:e4:3d:00:7d:be:c9:
7e:99:b8:5d:7d:4c:32:f7:bd:d2:f2:6e:58:17:bd:
60:7d:75:32:09:c7:12:92:85:4d:6a:bc:ac:0b:9d:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:EB:67:FB:75:7F:26:01:0D:FF:49:07:B1:03:4C:42:4D:C5:A9
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/XE_rZ_t1fyYBDf9JB7EDTEJNxak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.87.0/24
45.152.122.0/24
185.124.64.0/24
193.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:55:a9:7c:4d:d7:e2:18:ca:61:a6:74:cf:08:d0:5d:a4:db:
36:07:95:00:c8:f5:b8:1e:4b:16:35:91:6a:7c:8f:37:d6:b4:
4f:e9:c5:01:38:24:31:3f:00:78:02:c2:35:ee:03:e4:94:e4:
49:21:c9:23:6c:4b:d1:e5:c6:0c:be:34:f5:5d:4a:5c:9c:ac:
5d:c6:bd:de:71:56:85:ba:24:cd:2c:c9:4b:ed:6b:6a:5e:a9:
e0:d9:93:30:b7:19:86:9d:ed:61:77:81:0a:63:28:a5:c6:42:
c4:ad:95:73:e7:96:1d:c2:ae:b2:51:12:9e:0b:94:ab:d0:ef:
e1:c3:c4:f9:9f:78:69:9a:be:5d:02:38:6c:5e:27:c4:f5:92:
4a:a4:45:05:ad:22:9c:c2:3a:8f:75:cd:06:aa:27:1c:94:26:
d3:44:e6:ae:1d:68:42:6f:a6:cb:81:9e:55:8b:e3:6e:38:c8:
3b:9a:fa:5f:22:eb:06:5b:69:d0:48:74:3a:4c:27:81:14:44:
8e:b5:17:ec:d7:67:0b:b6:85:ec:bd:c0:c9:ac:11:43:c1:8e:
aa:da:92:61:c9:77:87:25:c4:49:25:5f:f9:87:21:d1:d5:97:
73:be:70:11:0e:06:1f:85:44:b1:27:11:0e:a7:de:5f:32:0f:
40:54:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:52 2025 by rpki-client