Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/fumu1wABeUwzwVskW_23Wb8hwsw.roa
File: fumu1wABeUwzwVskW_23Wb8hwsw.roa (raw, json)
Hash identifier: E0oSh7fsoPR4hy2ulHV2qFGLmFaBLv8zrqw1rFIePDg=
Subject key identifier: 7E:E9:AE:D7:00:01:79:4C:33:C1:5B:24:5B:FD:B7:59:BF:21:C2:CC
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019196F8A553BA50661AF585A9E2CDF0917D
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/fumu1wABeUwzwVskW_23Wb8hwsw.roa
Signing time: Wed 28 Aug 2024 03:12:43 +0000
ROA not before: Wed 28 Aug 2024 03:12:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25052
IP address blocks: 31.133.101.0/24 maxlen: 24
83.229.80.0/24 maxlen: 24
83.229.81.0/24 maxlen: 24
109.207.77.0/24 maxlen: 24
109.207.78.0/24 maxlen: 24
185.162.127.0/24 maxlen: 24
185.220.206.0/24 maxlen: 24
2a06:c5c0:400::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:96:f8:a5:53:ba:50:66:1a:f5:85:a9:e2:cd:f0:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Aug 28 03:12:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee9aed70001794c33c15b245bfdb759bf21c2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:72:51:a5:89:ee:c2:79:bb:d7:19:87:f1:
b7:6c:31:72:95:9a:4b:00:bc:e5:e8:3f:d4:80:60:
e2:16:83:67:d3:c1:62:ff:7f:60:c4:5c:dc:79:c9:
18:bc:a8:ee:d1:28:b7:54:22:ad:0f:22:05:83:98:
ad:09:32:93:5a:57:0b:7f:d3:74:f6:93:9d:72:43:
59:99:e0:b5:72:d4:37:9a:67:1f:e1:76:9e:a7:7e:
5a:08:74:74:7c:23:94:f9:81:e4:32:dd:af:00:3f:
a1:b6:7a:79:8c:3a:55:3c:bb:64:9a:6b:b7:31:37:
03:f2:ec:67:30:0a:2e:3b:a2:9c:4b:13:50:35:67:
11:cc:07:ce:31:c4:cb:3f:87:5d:ad:33:95:73:34:
71:22:6f:78:1a:f8:b9:95:c8:bb:57:97:5c:89:9b:
23:74:b2:7c:48:b4:50:67:b0:05:e0:4b:fe:48:fd:
96:9b:74:78:e3:f1:a4:8e:cd:5c:f7:c3:a5:9c:f2:
3f:37:ab:6e:d9:46:51:8c:9f:a6:10:49:24:49:46:
bd:45:84:d0:ee:21:93:c5:5f:b6:fe:08:32:c5:68:
75:81:25:61:09:99:cf:8a:ec:ed:7b:e8:0c:2d:5d:
f3:25:69:20:f9:14:3a:57:c7:7c:df:e9:4f:63:d1:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:AE:D7:00:01:79:4C:33:C1:5B:24:5B:FD:B7:59:BF:21:C2:CC
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/fumu1wABeUwzwVskW_23Wb8hwsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.101.0/24
83.229.80.0/23
109.207.77.0-109.207.78.255
185.162.127.0/24
185.220.206.0/24
IPv6:
2a06:c5c0:400::/48
Signature Algorithm: sha256WithRSAEncryption
06:72:af:9f:74:21:ba:ba:71:59:56:2b:61:85:bc:6e:ba:ae:
32:ea:1a:c5:62:a5:a6:3f:95:e6:9c:4d:1b:c6:d5:82:6a:5f:
2c:56:c5:2a:d8:70:ce:67:5b:53:18:88:a4:5b:d2:9e:0e:26:
5e:95:ca:29:df:1b:0a:99:33:37:61:c6:39:c5:8f:fb:27:43:
59:2c:33:0f:c8:1e:04:18:67:0b:e3:7a:35:da:fc:de:83:a1:
42:10:36:57:0d:00:8b:fa:62:de:cd:d2:f8:60:47:96:7d:ac:
77:49:82:a5:85:34:c5:51:5e:5c:c1:4b:aa:7a:ae:17:05:f2:
50:8a:f6:1b:11:1c:ba:d8:4e:17:07:a2:39:b4:2e:b7:01:7f:
b7:6e:46:95:aa:1a:91:7d:fb:61:5f:73:a6:a9:4a:b0:87:ae:
3f:a7:0f:0c:6a:8b:13:af:e1:40:85:65:29:2c:9f:c4:8f:ba:
1a:32:44:85:80:d8:ca:0b:8e:0b:51:3e:e1:ec:60:e9:61:54:
a6:2f:23:e2:c0:3a:c9:bf:ce:dd:7c:01:7b:1f:b7:19:2f:c7:
d1:15:63:0b:21:53:19:93:7b:99:13:d3:e3:6b:72:96:2e:c4:
2c:1f:c5:ab:73:c1:bb:55:b7:7e:66:48:a9:f1:fe:51:90:55:
d5:c7:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:00 2025 by rpki-client