Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/r8umSy4j1RnbWQJ85PptcZPZ4vE.roa
File: r8umSy4j1RnbWQJ85PptcZPZ4vE.roa (raw, json)
Hash identifier: 3d7wbdcHM7N/dZO/DiTVGg38SIc2qS0nmdx8OyJGyNE=
Subject key identifier: AF:CB:A6:4B:2E:23:D5:19:DB:59:02:7C:E4:FA:6D:71:93:D9:E2:F1
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0191D7882CB0AB3766F54165A08D893818E3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/r8umSy4j1RnbWQJ85PptcZPZ4vE.roa
Signing time: Mon 09 Sep 2024 16:05:11 +0000
ROA not before: Mon 09 Sep 2024 16:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 2.59.40.0/24 maxlen: 24
2.59.41.0/24 maxlen: 24
2.59.42.0/24 maxlen: 24
2.59.43.0/24 maxlen: 24
45.93.201.0/24 maxlen: 24
45.153.70.0/24 maxlen: 24
45.153.71.0/24 maxlen: 24
80.76.60.0/24 maxlen: 24
91.198.220.0/24 maxlen: 24
93.93.207.0/24 maxlen: 24
176.53.160.0/24 maxlen: 24
176.53.161.0/24 maxlen: 24
176.53.162.0/24 maxlen: 24
176.53.163.0/24 maxlen: 24
185.113.250.0/24 maxlen: 24
185.192.246.0/24 maxlen: 24
185.192.247.0/24 maxlen: 24
185.251.20.0/24 maxlen: 24
193.160.208.0/24 maxlen: 24
193.160.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 10:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:88:2c:b0:ab:37:66:f5:41:65:a0:8d:89:38:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 9 16:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afcba64b2e23d519db59027ce4fa6d7193d9e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:10:2e:36:df:2c:ac:9c:bf:61:53:66:e2:
bc:85:f6:1f:a1:fa:57:a1:41:c3:4a:3c:fb:c9:99:
e0:d3:64:68:07:d6:6a:d2:59:81:9a:45:35:14:73:
76:7a:eb:61:7b:22:23:8f:e5:f8:92:98:6a:42:d1:
7c:19:08:b2:db:25:e8:43:3c:f8:41:c4:25:cf:b5:
7e:10:09:e0:e4:64:c8:b0:a4:b0:af:f1:60:bc:a7:
ec:e4:11:dd:92:39:8a:65:18:a5:f5:d1:fa:c8:34:
c0:05:64:55:49:f3:b1:93:36:f7:6b:90:62:bf:57:
ec:73:0f:ec:ec:a3:21:86:cc:c5:7c:22:c4:f2:0d:
a2:a8:85:c2:bf:c4:d3:4c:da:01:55:03:d1:63:e8:
9d:86:2f:c1:ac:10:54:26:40:b6:23:47:14:fe:dc:
3a:f2:d7:90:02:93:a3:c3:5f:e2:a3:87:00:01:a4:
72:3f:30:2e:a4:3b:cc:d0:2c:32:1d:f1:a0:76:9c:
8e:7c:12:ed:7d:fe:2b:13:c7:04:e6:71:37:7e:9b:
07:65:8e:94:f8:a2:fb:6a:b9:05:57:eb:aa:23:a7:
4c:17:f2:ca:b5:5d:50:60:a7:b7:77:ce:0c:78:8b:
9a:05:d6:67:0a:82:96:2d:a6:7a:2f:b3:ce:b0:69:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:A6:4B:2E:23:D5:19:DB:59:02:7C:E4:FA:6D:71:93:D9:E2:F1
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/r8umSy4j1RnbWQJ85PptcZPZ4vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.40.0/22
45.93.201.0/24
45.153.70.0/23
80.76.60.0/24
91.198.220.0/24
93.93.207.0/24
176.53.160.0/22
185.113.250.0/24
185.192.246.0/23
185.251.20.0/24
193.160.208.0/23
Signature Algorithm: sha256WithRSAEncryption
43:66:4e:0a:9b:ba:37:f3:b5:41:11:fd:9f:c3:73:44:a8:c1:
af:8e:a9:4c:f7:c0:cc:92:e3:8d:d1:dc:a7:fd:bf:58:9d:f6:
aa:0b:f6:b0:5c:aa:e5:2e:a0:0e:14:ad:f6:46:da:63:a6:6f:
8e:12:8f:c6:19:e6:3c:c5:90:d2:45:9a:da:10:df:93:c6:04:
43:a9:64:87:d7:1a:4e:b8:9c:c5:92:11:e6:b1:b7:08:cb:b6:
71:22:56:42:15:cc:1e:be:4c:1a:e5:28:4f:90:45:39:f9:eb:
53:83:1a:c3:cb:1e:da:2f:9f:b4:23:c5:ea:58:4a:28:44:33:
c4:9d:fd:28:b5:ab:cc:09:10:ca:51:b2:0f:ac:d2:40:7d:70:
c6:97:4d:ae:80:53:fb:f5:c3:e0:d3:03:e6:0c:81:82:f6:1f:
92:9b:15:b5:a5:a6:91:79:1a:ea:07:82:18:ba:0e:22:5f:ff:
c4:0d:22:3d:95:7f:ac:9d:39:a9:d8:f7:f4:e2:93:07:68:2a:
27:66:f0:2f:59:ea:c5:31:1d:97:91:1e:5b:5c:af:73:a9:ed:
11:ab:d8:db:b3:a9:d1:39:71:7c:d1:5f:06:78:0c:fd:e4:85:
49:ed:43:e5:bd:9b:e0:64:3e:87:68:d8:f8:be:2a:78:c6:36:
da:10:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:05 2025 by rpki-client