Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6pBxQlYhiiq9iZ5GnpoUOdDk1es.roa
File: 6pBxQlYhiiq9iZ5GnpoUOdDk1es.roa (raw, json)
Hash identifier: u6Av2JfCkQnBLrBAgzmSWrVixFFd3xv1EXbVTJbSOM4=
Subject key identifier: EA:90:71:42:56:21:8A:2A:BD:89:9E:46:9E:9A:14:39:D0:E4:D5:EB
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018EE6E317E7ABFFB3792DFD8F7F63598C59
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6pBxQlYhiiq9iZ5GnpoUOdDk1es.roa
Signing time: Tue 16 Apr 2024 12:30:26 +0000
ROA not before: Tue 16 Apr 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
31.130.144.0/21 maxlen: 21
31.130.152.0/22 maxlen: 22
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 17
77.233.192.0/19 maxlen: 19
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 20
91.204.128.0/22 maxlen: 22
94.141.160.0/19 maxlen: 19
94.141.162.0/23 maxlen: 23
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/22 maxlen: 22
2a00:e78::/33 maxlen: 33
2a00:e78::/34 maxlen: 34
2a00:e78:6000::/36 maxlen: 36
2a00:e79::/32 maxlen: 32
2a00:e79::/36 maxlen: 36
2a00:e7a::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:e3:17:e7:ab:ff:b3:79:2d:fd:8f:7f:63:59:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Apr 16 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea90714256218a2abd899e469e9a1439d0e4d5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:ed:43:5f:cd:19:ad:f1:e7:07:de:0d:20:
06:a1:ec:b2:4b:af:37:70:ab:43:08:a7:95:4e:c4:
97:47:65:16:8e:72:ba:5d:1b:cf:60:73:d0:7e:66:
fc:8e:cc:81:93:f7:f8:3d:5b:44:95:61:8f:16:a5:
73:0f:ea:4d:4d:79:a1:0a:b4:09:2c:b6:61:a8:6d:
72:33:2e:d2:76:3a:86:75:78:d3:11:a3:b2:46:00:
82:98:63:c5:54:94:0b:a3:c6:a0:1b:aa:ab:11:6d:
7e:af:b7:cd:69:a8:d4:ad:7c:a4:2f:29:d5:ae:d9:
34:88:a7:ca:ce:95:69:71:f2:55:7e:69:29:04:41:
a3:36:43:78:d4:0a:00:41:eb:4e:33:53:32:e6:f4:
09:3f:49:54:81:25:c4:3a:ce:87:08:2f:8c:dc:50:
ff:a7:92:f6:48:5b:01:2c:19:be:84:34:1d:37:35:
2c:43:da:3e:b2:3e:0f:46:a2:ae:67:8f:aa:8b:ec:
68:a5:ea:87:5c:ac:02:fb:84:2c:0b:47:b9:0a:be:
55:ae:14:2b:f3:11:b9:8e:22:02:1e:21:e9:06:cc:
b8:fd:7d:cb:af:f9:e9:b5:39:0c:77:6d:e5:4a:31:
a6:4f:be:23:fa:f4:3f:f8:64:2c:3a:8a:82:74:a7:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:90:71:42:56:21:8A:2A:BD:89:9E:46:9E:9A:14:39:D0:E4:D5:EB
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6pBxQlYhiiq9iZ5GnpoUOdDk1es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
31.130.144.0-31.130.155.255
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/22
IPv6:
2a00:e78::/33
2a00:e79::-2a00:e7b:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:75:fc:f0:00:e4:ee:d6:1f:21:70:a7:03:97:f5:51:ae:6f:
59:17:9e:61:62:66:c5:1b:51:6b:e7:de:1e:71:ea:cf:d9:a1:
56:d5:ae:7e:2b:03:20:28:39:d3:5d:f2:1d:4a:a8:96:8e:71:
69:df:3f:c7:f6:3a:f8:5b:ab:ca:b0:bd:ab:b8:b2:5f:8b:c2:
42:c5:1e:85:4e:13:6c:a7:f1:eb:28:f4:03:fa:74:ed:60:99:
24:16:ef:be:4b:5e:9b:a0:87:60:e8:86:72:9c:a9:c7:aa:11:
50:f3:d7:8d:6d:a1:93:63:9a:29:02:4f:00:6e:b3:d3:98:dc:
c3:11:07:0e:c7:b3:b7:05:9b:44:16:f1:70:a1:55:8c:40:8b:
7f:6d:75:a6:2f:8e:75:0d:2f:dc:db:69:9d:ac:3e:f3:1b:49:
90:f3:00:e2:3f:d0:7c:ff:9f:77:aa:3c:f7:d0:a9:0c:e2:86:
3a:7e:71:bf:c3:70:83:d9:a9:f2:f4:f3:ed:b3:5f:84:fe:57:
cd:4e:e6:e7:ae:6c:7a:22:9a:27:6a:aa:65:cc:44:4d:ab:71:
f9:96:73:82:6e:d6:da:b2:2d:2f:fd:fc:b7:7d:4a:19:b1:c0:
55:c8:31:6f:7a:53:bf:35:a1:34:de:b0:2b:e7:6e:b6:38:3d:
50:c5:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:59 2025 by rpki-client