Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/ec5wxpnwxEfLQDJaBMByK6BZQ-4.roa
File: ec5wxpnwxEfLQDJaBMByK6BZQ-4.roa (raw, json)
Hash identifier: OjVmj3BS0HQGMSG9/wIYOmZ1izRneOq7XOLzgmgIOlk=
Subject key identifier: 79:CE:70:C6:99:F0:C4:47:CB:40:32:5A:04:C0:72:2B:A0:59:43:EE
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019126E9D665E9DA4CE4FD02061BDADDC53B
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/ec5wxpnwxEfLQDJaBMByK6BZQ-4.roa
Signing time: Tue 06 Aug 2024 08:59:04 +0000
ROA not before: Tue 06 Aug 2024 08:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 45.13.171.0/24 maxlen: 24
185.189.224.0/24 maxlen: 24
185.198.51.0/24 maxlen: 24
185.207.174.0/24 maxlen: 24
195.245.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 10:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:e9:d6:65:e9:da:4c:e4:fd:02:06:1b:da:dd:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Aug 6 08:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79ce70c699f0c447cb40325a04c0722ba05943ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:41:33:ad:42:17:99:37:47:21:8f:9a:e5:
db:cc:5b:74:4e:94:8d:a7:5e:4c:20:4a:2e:c0:fb:
b5:38:5c:ed:f9:b0:73:da:f4:31:2c:b9:0f:d1:00:
e1:0a:97:47:d0:89:d7:95:c7:a3:c6:f3:ca:2a:86:
ff:3b:cb:21:31:5d:01:dc:75:33:26:45:30:1a:ec:
b6:e9:aa:6f:46:6a:af:ca:36:a7:ed:c0:d7:99:9f:
d9:89:33:6c:64:1d:c7:fc:0c:35:d8:9b:e5:34:94:
2b:4b:7a:dd:48:8f:b8:40:0e:68:27:eb:0d:82:20:
8a:a0:36:4f:a9:07:89:86:c1:11:91:58:48:6c:48:
6a:90:96:15:29:3e:8b:d5:a4:65:37:e1:32:47:bd:
ce:ae:07:df:74:84:b2:6f:09:fd:75:ab:b9:42:9c:
6d:82:72:84:f0:ee:40:3f:13:88:20:2d:6f:82:eb:
89:6a:af:c5:cc:b0:fd:24:1a:f4:db:1b:ca:ac:7b:
62:1e:70:ba:c2:da:49:c6:34:53:f6:95:23:ab:20:
73:95:85:f8:d8:4b:a4:29:8b:2d:cb:e9:85:32:9f:
db:fc:d8:dd:ca:d5:d3:4f:5a:0d:b2:cf:89:7f:b3:
cb:bd:1c:8d:70:b2:c3:0b:4e:b6:2f:18:2f:00:0c:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CE:70:C6:99:F0:C4:47:CB:40:32:5A:04:C0:72:2B:A0:59:43:EE
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/ec5wxpnwxEfLQDJaBMByK6BZQ-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.171.0/24
185.189.224.0/24
185.198.51.0/24
185.207.174.0/24
195.245.89.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5e:09:09:11:3f:a0:c6:04:df:e5:37:c1:e5:32:ae:31:e3:
83:02:84:93:09:2d:7c:d7:60:9c:bc:52:84:73:e5:e0:93:83:
06:64:bd:4b:17:38:fb:23:cb:0d:c4:cc:bd:32:8f:e5:e2:0b:
78:4b:75:cb:2e:e2:f8:60:81:69:8b:f7:54:c7:7b:3b:fb:7d:
47:2d:ca:b7:66:b2:8d:68:b4:1d:a0:e6:6b:0c:d3:bb:ff:0c:
56:af:f5:8a:d4:51:ca:aa:51:6b:19:2e:64:9c:40:92:05:09:
ee:e4:2d:1a:66:2f:6a:08:cd:a5:ca:2b:7e:87:18:f2:f3:84:
c3:2b:88:30:d3:13:8c:68:05:5a:7a:d5:be:84:ee:73:1c:23:
c1:bf:f9:cb:5b:85:88:24:93:1e:a9:3a:f6:f1:de:14:ba:ca:
42:fd:1c:1c:db:d9:71:2c:6a:52:18:9e:4f:2d:ba:aa:28:42:
9a:77:29:0c:4f:3d:66:88:d7:4f:13:f8:22:59:c2:69:af:b5:
6d:c4:6a:f2:19:ab:aa:d0:6d:e1:ec:11:21:e0:2a:d7:25:db:
e8:10:2e:0c:a0:4d:5f:11:6c:2b:0e:ce:35:16:cf:49:36:4a:
02:f5:81:fb:81:99:5a:4b:96:a8:be:8d:f8:ac:cc:ef:1b:86:
41:02:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:35 2025 by rpki-client