Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/hE_eqix1NaaKP8n1Ks6NaJ5P1gY.roa
File: hE_eqix1NaaKP8n1Ks6NaJ5P1gY.roa (raw, json)
Hash identifier: WY2HM8F4Mjm2cUgO52dRW3BpYKrM3OZ6aY0S95X5IrA=
Subject key identifier: 84:4F:DE:AA:2C:75:35:A6:8A:3F:C9:F5:2A:CE:8D:68:9E:4F:D6:06
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC7933D6DACB68222717DCAE987FAAC52
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/hE_eqix1NaaKP8n1Ks6NaJ5P1gY.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31400
IP address blocks: 5.183.95.0/24 maxlen: 24
45.86.163.0/24 maxlen: 24
46.30.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3d:6d:ac:b6:82:22:71:7d:ca:e9:87:fa:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=844fdeaa2c7535a68a3fc9f52ace8d689e4fd606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:13:30:31:47:c1:46:d6:0f:34:99:c6:99:
ef:6a:a9:e2:ec:ee:19:06:3a:3a:b8:be:25:b6:70:
ae:8b:db:bb:4e:fc:ed:ab:2d:18:5a:ac:6a:66:ec:
99:59:52:7b:3a:89:b0:34:8a:e8:f6:7f:58:39:92:
8c:63:19:3f:e0:9a:e4:e5:6a:e6:7d:ba:72:45:8e:
1d:53:61:c3:7d:b9:85:f8:28:32:18:2a:c0:fb:6b:
b0:f8:ac:52:77:a4:26:a9:3a:84:3a:35:13:71:e2:
6d:7f:a4:67:f8:81:4f:23:71:d6:6a:02:b7:49:e4:
fb:50:c1:5e:4c:88:c3:48:c9:60:57:da:48:3a:b0:
cf:e8:df:00:05:24:5a:21:4f:f5:fa:5b:8d:f8:92:
b5:51:8e:b9:05:07:df:1a:4e:14:d7:db:fa:40:e4:
67:81:5f:3f:63:8c:b6:13:06:4b:4c:99:bf:87:16:
2b:e4:6d:9a:f0:a1:b4:a2:e5:8a:9f:b2:c8:36:a0:
be:a2:c9:57:f0:8c:d7:8a:b5:2e:a9:53:f2:1a:79:
d8:26:8e:12:eb:47:bc:56:c7:81:c6:c1:7a:0d:2d:
d8:a7:b5:80:6f:6e:07:aa:d0:9e:dd:de:f1:29:c0:
74:4c:e8:93:5c:8b:ec:62:5c:6a:55:8b:ba:86:5c:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:DE:AA:2C:75:35:A6:8A:3F:C9:F5:2A:CE:8D:68:9E:4F:D6:06
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/hE_eqix1NaaKP8n1Ks6NaJ5P1gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.95.0/24
45.86.163.0/24
46.30.189.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f2:fc:b4:9b:36:17:77:49:29:c6:00:ea:f3:d9:91:39:df:
a0:81:eb:76:07:2c:9b:b7:7b:a9:c7:5b:9b:81:fd:b4:6a:7a:
c1:23:56:01:a0:3f:6d:4c:e7:63:cf:44:fa:59:81:4a:44:76:
6b:24:1e:21:79:34:ac:ba:60:d7:2b:25:35:24:32:72:a0:37:
bd:eb:4c:7d:d1:dc:8b:8b:77:5f:34:f5:93:0e:a1:60:54:eb:
69:57:a4:3f:94:8b:7e:ec:d0:76:da:01:85:74:76:8a:a8:32:
04:3a:bd:53:3d:d4:5e:62:76:77:8f:dd:ef:e4:89:77:a3:dd:
72:73:9d:83:34:51:fc:17:64:b7:65:4c:07:84:98:87:32:0a:
76:6a:22:88:2c:e2:95:0a:d7:e4:9a:d8:16:53:95:e4:48:30:
3f:02:bc:10:1e:87:f3:ca:14:fd:3a:34:d3:10:1c:23:86:b6:
dc:99:f8:b6:c0:d2:1f:cc:5b:00:e3:74:d2:62:c0:fa:64:05:
20:12:6e:fd:fa:1f:75:cc:56:2d:81:f6:67:21:67:f0:07:ba:
b7:fd:3e:46:d9:6e:2a:ff:f1:d6:6a:d8:42:30:1b:ee:e9:60:
4f:22:c9:f3:1b:1f:d0:fb:a0:2d:f7:e1:5b:e0:ba:96:55:82:
1c:b3:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:49 2025 by rpki-client