Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/I3WMxNMIzO-BxmBGo-MoNoOAWaY.roa
File: I3WMxNMIzO-BxmBGo-MoNoOAWaY.roa (raw, json)
Hash identifier: PEGMmYgESOo4RhHAW+j1BmN3s655OJMkQTSTX8z1sv0=
Subject key identifier: 23:75:8C:C4:D3:08:CC:EF:81:C6:60:46:A3:E3:28:36:83:80:59:A6
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194DC4043BF584DA55F6806E883C3E5DDE9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/I3WMxNMIzO-BxmBGo-MoNoOAWaY.roa
Signing time: Thu 06 Feb 2025 17:13:06 +0000
ROA not before: Thu 06 Feb 2025 17:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
85.208.10.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 16:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:40:43:bf:58:4d:a5:5f:68:06:e8:83:c3:e5:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 6 17:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23758cc4d308ccef81c66046a3e32836838059a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:06:e3:09:67:8f:31:00:2a:5e:f0:fa:e1:
42:4b:86:36:36:cc:c5:bd:b2:de:dc:67:45:8a:0f:
20:71:38:73:8e:1c:63:e3:50:ad:71:2b:ff:97:5d:
c4:61:75:63:76:09:54:00:87:93:29:7e:38:71:22:
93:ee:a2:c1:87:48:46:a5:d2:03:1a:c9:7e:61:42:
ae:23:eb:94:93:0c:48:01:31:6e:7d:e3:17:b9:1f:
a8:91:4e:84:dc:40:23:d0:4f:ac:6e:56:e0:84:50:
97:c7:c5:c3:eb:52:2f:ad:f4:8c:15:40:6b:9f:e8:
61:c7:4b:bf:1a:55:16:93:50:8d:e7:3e:e1:70:96:
c5:75:ff:5a:f8:db:fd:70:39:c2:77:ea:70:01:45:
48:4a:19:0d:27:46:d8:81:ee:e9:25:96:0a:53:34:
9f:1e:5b:62:2d:28:58:1e:82:61:80:2f:b6:3b:9c:
99:7a:2a:d2:33:c9:68:84:e0:7b:3b:73:06:2a:28:
21:22:5d:f8:f7:b7:f1:4d:aa:c5:1d:85:e1:00:04:
bb:a2:de:5a:83:e0:ff:f3:e8:0b:53:58:81:8d:e7:
a8:b0:cb:f8:7f:9a:6d:0e:51:33:f0:3b:70:cc:5e:
06:10:27:f2:69:d0:3a:f4:13:31:f6:73:4a:e4:76:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:8C:C4:D3:08:CC:EF:81:C6:60:46:A3:E3:28:36:83:80:59:A6
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/I3WMxNMIzO-BxmBGo-MoNoOAWaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0-14.102.232.255
77.111.96.0/22
85.208.10.0/24
94.229.210.0/24
94.229.212.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:96:b8:62:d1:c1:97:40:ed:df:8a:32:ef:12:d6:90:75:5d:
4e:5e:6f:bd:6a:92:a9:1a:c1:03:4b:bc:a0:3f:79:12:36:d4:
ee:f1:2c:cd:d5:6a:d4:15:09:d1:f3:27:00:76:ba:3e:65:8f:
d2:9b:fe:81:3b:24:4c:c1:09:32:35:ac:46:a1:3d:b7:2c:61:
e1:a2:5d:32:1d:b6:ce:97:81:bd:bf:10:5f:36:1a:3c:db:80:
68:71:25:ec:9c:78:f6:5c:e1:99:bb:c9:63:68:53:c3:2b:d9:
a0:47:0a:15:83:34:8c:0c:8e:9f:93:4d:eb:ca:7c:7b:fe:eb:
2b:24:87:dc:b3:bd:2e:2d:b7:2b:23:9e:66:07:e2:8b:e8:d9:
60:45:c2:95:12:d2:76:a7:9e:4b:a1:da:b7:9c:b8:7b:93:13:
66:97:ff:d5:d2:b7:c3:f6:dc:99:55:ab:84:ec:4d:f5:1d:10:
5b:5a:bb:fa:27:17:33:14:d7:11:2a:08:a8:92:64:4d:71:ed:
2f:d0:de:4b:90:b8:92:0e:c8:94:27:bf:0e:14:b4:80:0d:48:
ed:ba:53:6b:3e:6a:4c:c5:29:c2:9e:f8:c3:15:a2:e6:4d:b5:
d8:81:de:13:75:0c:e5:98:75:a1:a5:5a:aa:79:94:85:c4:07:
fd:70:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:47 2025 by rpki-client