Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/fEDFhDMadleOi4y7G8iCte4RsT8.roa
File: fEDFhDMadleOi4y7G8iCte4RsT8.roa (raw, json)
Hash identifier: o4Mo4gj+S8EqIZK0HULSNWQ7biLCpzxcnF13/lrqeOI=
Subject key identifier: 7C:40:C5:84:33:1A:76:57:8E:8B:8C:BB:1B:C8:82:B5:EE:11:B1:3F
Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial: 018CC5DC16BC8463A7CEEEEAAB11F467CFBA
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/fEDFhDMadleOi4y7G8iCte4RsT8.roa
Signing time: Mon 01 Jan 2024 16:29:44 +0000
ROA not before: Mon 01 Jan 2024 16:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213095
IP address blocks: 185.21.130.0/24 maxlen: 24
91.239.56.0/24 maxlen: 24
163.114.159.0/24 maxlen: 24
2a07:fb40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:16:bc:84:63:a7:ce:ee:ea:ab:11:f4:67:cf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c40c584331a76578e8b8cbb1bc882b5ee11b13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:9e:27:48:4b:ff:e8:5f:96:c7:90:e2:4e:
5b:4d:c8:ff:17:4a:99:c2:b1:30:c7:dc:3d:a2:45:
24:eb:d9:9a:b2:93:46:12:ac:ba:c3:73:a1:e0:ba:
22:fe:6d:7a:39:cb:ed:dd:4a:48:5f:85:8f:d4:7f:
6b:46:95:17:8c:d2:c4:e3:60:4c:8f:b2:3b:61:62:
06:e2:5f:1f:48:20:3f:5a:31:70:f8:9c:c6:9f:7a:
d9:37:a3:10:9e:bc:f3:f2:1b:3f:2f:92:ce:8c:e4:
3d:5e:13:19:16:82:30:19:a4:49:4d:8d:20:e3:8a:
b6:eb:aa:b3:99:6a:5b:50:b3:b5:1f:07:2f:6c:a6:
c6:37:7c:9d:ed:d2:67:f5:76:02:fa:6f:27:44:41:
7b:74:79:67:85:b2:98:fb:46:50:af:3a:cc:07:cb:
57:91:d4:9a:85:f1:7e:1f:b0:f3:ba:b4:2e:9f:f2:
56:3e:89:50:f5:f3:10:ab:8e:3e:cb:fb:10:17:e4:
7a:37:e2:f4:0f:7a:e1:40:db:6d:49:63:9d:4f:9c:
98:5f:3e:ac:bd:ee:7e:e7:e9:e8:94:fb:57:0d:8e:
74:1c:d5:18:31:ed:23:c7:60:49:4e:bc:33:30:d8:
03:3f:21:c6:dd:bc:91:17:5e:d9:84:65:f8:96:0f:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:C5:84:33:1A:76:57:8E:8B:8C:BB:1B:C8:82:B5:EE:11:B1:3F
X509v3 Authority Key Identifier:
keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/fEDFhDMadleOi4y7G8iCte4RsT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.56.0/24
163.114.159.0/24
185.21.130.0/24
IPv6:
2a07:fb40::/29
Signature Algorithm: sha256WithRSAEncryption
17:d9:0a:d7:53:68:81:91:49:ce:f1:2c:7e:27:ca:59:75:43:
6b:71:37:83:8f:0a:16:a4:f4:7a:ca:48:b1:84:25:66:94:f4:
e0:4c:7d:58:87:18:23:3d:c7:71:5b:58:29:19:f5:67:88:3d:
1c:10:b3:9f:5c:85:26:a6:ba:2f:5b:10:5c:4d:f9:15:42:e7:
3f:9b:5b:ce:f7:be:6c:07:05:d3:20:0c:39:66:8d:46:71:38:
b7:25:f3:a8:29:31:37:c5:05:92:6e:59:b5:6f:c5:16:99:5e:
c8:3f:75:a1:75:0f:4c:46:fd:77:09:72:c5:36:d3:3f:cb:a9:
69:e1:ee:7e:ec:bb:88:78:2f:30:06:0a:2a:30:57:5f:8a:6e:
59:22:dd:19:d9:6c:04:53:ac:d1:46:8b:f0:d0:d8:8e:ce:32:
a6:f6:b9:e7:9c:28:6a:ce:1b:51:de:6a:62:af:71:04:6c:0e:
7a:77:c1:da:90:3f:35:75:a3:b2:49:20:74:5f:53:9d:5d:4e:
c7:8a:37:fd:d0:7c:10:7b:bf:28:d0:6f:92:a1:a3:47:2d:77:
20:72:02:a5:60:bb:d3:b4:d1:44:af:99:5f:5a:00:6e:9d:90:
a0:2b:08:d8:0a:8a:7a:ac:38:ba:6b:af:6c:51:dc:61:b3:d3:
12:04:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:34 2025 by rpki-client