Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/64UTvAzOsNa1GtUterRReG50Zs4.roa
File: 64UTvAzOsNa1GtUterRReG50Zs4.roa (raw, json)
Hash identifier: sE92OB3NqFpiBIOF20uqRiRSBzRX1fm8jE6v6rRTihc=
Subject key identifier: EB:85:13:BC:0C:CE:B0:D6:B5:1A:D5:2D:7A:B4:51:78:6E:74:66:CE
Certificate issuer: /CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Certificate serial: 0190A670E29ABF526EACBA56B76124476B8A
Authority key identifier: 9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/64UTvAzOsNa1GtUterRReG50Zs4.roa
Signing time: Fri 12 Jul 2024 10:15:34 +0000
ROA not before: Fri 12 Jul 2024 10:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44705
IP address blocks: 81.91.189.0/24 maxlen: 24
185.175.128.0/22 maxlen: 22
188.124.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:70:e2:9a:bf:52:6e:ac:ba:56:b7:61:24:47:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Validity
Not Before: Jul 12 10:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb8513bc0cceb0d6b51ad52d7ab451786e7466ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:8c:43:46:9c:15:a8:49:74:b7:cf:22:a4:
f0:ac:e5:56:34:42:14:f4:5b:15:1b:d0:a8:84:9b:
11:16:52:c0:50:f3:28:88:58:d5:d1:10:7d:a0:3d:
a9:e9:be:ac:6f:4f:32:8c:85:74:b4:6d:94:5b:40:
05:76:12:d6:cb:ac:69:aa:34:f0:33:b0:96:2b:5f:
45:c5:37:79:be:72:ea:b2:bf:70:13:8b:1a:a2:a5:
24:36:6f:6f:1b:50:b0:e2:da:31:66:2a:65:3b:44:
da:c8:38:d2:71:bb:df:fa:3f:14:12:6c:cb:e8:57:
ce:9a:e8:e1:4f:3c:d8:3a:34:a7:2a:d6:ba:57:b3:
3f:06:ec:ad:03:f5:dd:4c:39:7f:4d:10:f7:b2:7d:
31:16:e7:50:77:9a:fd:40:6d:ec:87:d6:0f:6e:5e:
c9:6c:68:fc:ab:1b:3d:73:52:5d:62:b8:93:19:ce:
ac:02:33:58:4d:26:8f:52:4d:63:44:71:64:68:00:
d9:2d:fe:10:c6:f1:76:04:d8:4a:13:72:8e:09:25:
89:ec:1d:87:29:a0:fc:3e:96:11:ad:bb:06:63:dd:
6b:ee:3e:2e:1a:c3:fe:de:80:9a:b6:eb:68:92:36:
bf:5a:44:8e:77:76:63:7c:03:5e:71:99:d9:cd:89:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:13:BC:0C:CE:B0:D6:B5:1A:D5:2D:7A:B4:51:78:6E:74:66:CE
X509v3 Authority Key Identifier:
keyid:9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/64UTvAzOsNa1GtUterRReG50Zs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.189.0/24
185.175.128.0/22
188.124.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:fd:2b:86:95:5a:69:af:11:8d:0e:fa:be:03:23:99:83:5c:
35:e7:d6:14:a0:0e:d7:b0:58:9b:9e:7a:63:7d:a6:d3:e4:16:
fa:6e:c8:5a:40:7d:9e:85:ef:e8:82:b9:05:28:5d:75:28:2c:
5c:19:86:ae:aa:1b:47:a5:3d:ea:a2:43:27:75:13:82:16:3f:
ab:12:50:bd:fc:f8:d7:db:f5:df:71:d6:66:e8:92:2d:e0:ee:
21:14:5b:06:0c:db:00:66:e3:e9:c2:5c:e0:bd:2e:1b:3c:e1:
ec:1d:a0:36:fd:3c:b8:40:91:00:da:e0:3a:ae:26:c7:5f:65:
44:d2:3d:55:d2:69:07:92:90:9c:40:54:8a:b3:59:a3:7a:25:
e1:0c:7a:dc:48:6d:2f:3a:71:0f:d4:a4:7d:69:aa:de:26:56:
a6:57:f3:c3:9b:7f:71:84:07:ec:61:84:09:48:bd:96:69:14:
d7:a8:37:0c:a7:3f:e6:63:35:44:5f:4e:7f:44:26:23:2b:b3:
ec:d7:44:e4:d6:3f:05:b2:1d:5f:bc:2a:f7:c5:42:48:aa:76:
06:32:00:e0:af:5a:58:1b:df:26:9b:71:c8:6c:f2:53:03:6e:
84:b1:0c:71:ca:d3:0c:4d:47:f3:cd:30:8d:2d:70:8b:21:31:
5e:46:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:05 2025 by rpki-client