Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/7-tubwSPDf-2wpFzfQMH8x7t5Q4.roa
File: 7-tubwSPDf-2wpFzfQMH8x7t5Q4.roa (raw, json)
Hash identifier: MVFpIxvv8V5Wh2/kMNTWeVVwMo1ZGNO2A8IkLKtsxXE=
Subject key identifier: EF:EB:6E:6F:04:8F:0D:FF:B6:C2:91:73:7D:03:07:F3:1E:ED:E5:0E
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 018CC56DF3462D74B2D31F607CE248DCAED0
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/7-tubwSPDf-2wpFzfQMH8x7t5Q4.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56786
IP address blocks: 84.21.178.0/24 maxlen: 24
84.21.179.0/24 maxlen: 24
84.21.176.0/22 maxlen: 24
84.21.176.0/24 maxlen: 24
84.21.177.0/24 maxlen: 24
2a0d:f540::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f3:46:2d:74:b2:d3:1f:60:7c:e2:48:dc:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efeb6e6f048f0dffb6c291737d0307f31eede50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:9b:3f:f1:df:f0:95:93:82:40:10:00:c7:
70:3c:f4:03:11:ac:1c:8e:44:67:3b:3b:be:4f:c1:
6c:94:e0:f2:5d:f5:2a:3f:a2:25:56:e6:ff:ec:62:
e8:4f:52:4a:82:d1:fc:58:12:90:f6:86:57:62:e1:
45:d3:c7:02:05:47:ab:7b:2b:a1:d5:cd:36:5a:3c:
e0:c3:8b:5a:00:1c:41:56:b6:3e:92:2b:1d:99:cc:
64:b3:72:11:68:53:6b:8b:18:62:9c:94:c7:8f:66:
c2:43:5c:4c:ea:88:79:91:f0:8d:05:c6:93:96:2b:
7d:97:a1:a5:7d:87:ab:43:69:21:45:0a:60:52:e2:
2d:9e:78:73:82:f0:ae:e6:66:83:ab:74:11:59:05:
5c:3d:91:40:2e:d0:d4:ac:be:d0:b8:86:cc:ad:88:
fe:42:91:30:ec:88:08:3f:1c:ea:39:cc:24:47:16:
b7:c4:ef:b5:d1:c6:d2:ad:ec:6d:9a:93:90:58:41:
9b:c0:13:40:3f:fd:e0:8c:c4:b7:4d:1d:d8:4c:9b:
21:30:39:97:c9:7d:c5:05:7e:83:a6:f2:35:b5:30:
2b:4c:bd:d3:a3:8c:01:ae:b6:bd:00:fa:9b:c3:4d:
5c:0b:d8:3b:28:eb:c2:92:73:6c:ff:1c:73:36:80:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EB:6E:6F:04:8F:0D:FF:B6:C2:91:73:7D:03:07:F3:1E:ED:E5:0E
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/7-tubwSPDf-2wpFzfQMH8x7t5Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.176.0/22
IPv6:
2a0d:f540::/29
Signature Algorithm: sha256WithRSAEncryption
1c:89:0e:d4:08:98:1a:d9:d0:d8:8e:e7:6c:fc:28:a8:12:d6:
1e:73:e9:5c:59:db:6a:75:82:19:80:d3:3c:d5:2d:68:1c:98:
1d:28:c1:fa:73:17:0d:18:24:b1:bd:9d:5b:35:5a:12:22:3d:
35:c0:02:b2:ec:4a:d7:c2:06:6a:55:e4:04:fc:d6:50:62:60:
1c:94:ef:40:59:19:8b:0d:68:3a:3b:b7:2b:3a:64:2e:4e:67:
75:01:62:b5:95:41:f1:3f:3b:8b:77:66:0a:79:0e:f6:09:d4:
e6:1b:c5:35:ef:96:46:34:6a:46:91:1f:a5:eb:e4:b1:a7:fb:
60:23:99:37:8f:da:ef:ad:98:30:68:07:95:c5:10:c1:1c:0b:
3d:85:50:be:47:df:b2:27:88:62:6d:8e:af:9d:3c:55:75:54:
f6:71:37:d3:04:f9:45:f8:29:5c:f9:ff:fa:a3:96:9d:f1:48:
64:b4:5b:86:9d:12:ef:49:3f:04:1b:4c:bc:dc:8d:59:2e:cf:
e5:db:03:71:d2:f5:0f:f7:49:15:00:03:58:af:56:fe:7d:41:
60:3a:7f:0a:68:c9:a6:e4:fd:0d:51:8e:16:0b:0e:ed:a9:07:
d2:a1:7f:00:1c:61:da:34:2a:d7:e9:d9:1e:f6:7f:ec:aa:38:
17:6d:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:26 2025 by rpki-client