Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/O029PIEBpLiIyCWUg57Rm5HuamI.roa
File: O029PIEBpLiIyCWUg57Rm5HuamI.roa (raw, json)
Hash identifier: ExrE+SSmLrVcB6bTurCl/Phq5Hh4Kf9HMcgvMb1F2Ok=
Subject key identifier: 3B:4D:BD:3C:81:01:A4:B8:88:C8:25:94:83:9E:D1:9B:91:EE:6A:62
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018EA82BC78953E6AC3A9BDBEDAC443DC922
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/O029PIEBpLiIyCWUg57Rm5HuamI.roa
Signing time: Thu 04 Apr 2024 08:13:44 +0000
ROA not before: Thu 04 Apr 2024 08:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
31.130.144.0/21 maxlen: 21
31.130.152.0/22 maxlen: 22
45.151.60.0/22 maxlen: 24
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 17
77.233.192.0/19 maxlen: 19
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 20
91.204.128.0/22 maxlen: 22
94.141.160.0/19 maxlen: 19
94.141.162.0/23 maxlen: 23
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/22 maxlen: 22
2a00:e78::/33 maxlen: 33
2a00:e78::/34 maxlen: 34
2a00:e78:6000::/36 maxlen: 36
2a00:e79::/32 maxlen: 32
2a00:e79::/36 maxlen: 36
2a00:e7a::/31 maxlen: 31
Validation: Failed, certificate revoked on Tue 16 Apr 2024 12:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:2b:c7:89:53:e6:ac:3a:9b:db:ed:ac:44:3d:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Apr 4 08:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b4dbd3c8101a4b888c82594839ed19b91ee6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:92:e7:72:5c:a3:e6:0f:34:16:8e:eb:54:
8c:03:c2:bf:d7:e1:31:88:ac:1f:4e:c5:c9:ed:6e:
7b:82:ef:9e:52:ba:d3:3c:9e:80:00:4a:76:33:56:
15:60:e1:fe:e2:0c:8f:bb:0b:f2:88:aa:2f:a1:9a:
ea:28:e4:79:ec:01:b1:4a:71:b2:e4:54:05:18:04:
11:79:e3:11:36:b3:e9:4a:d3:0c:b7:6b:9b:a8:f5:
d3:ce:5c:6c:ad:fa:ff:3f:ca:28:67:d6:d1:52:98:
0c:69:9a:58:88:af:c1:71:3a:ab:97:05:61:b1:f0:
f4:68:5b:14:60:a5:c7:d2:0a:be:f3:f8:99:fc:cf:
cf:e3:46:75:0c:7a:30:14:08:0e:22:79:0a:48:f9:
48:5f:c8:94:ed:44:94:f2:ab:47:b6:65:f9:f1:92:
38:95:3b:69:1d:47:67:ab:ee:50:ff:18:19:dd:2f:
2d:e2:bd:91:9c:38:23:e3:b7:7f:d4:e9:cc:4a:96:
1f:f0:26:2d:b8:ea:89:78:53:eb:4b:bd:5b:17:bc:
7a:87:12:e5:e2:70:b7:e5:90:8a:00:0f:07:05:09:
95:e1:4b:0d:5b:bb:ef:4b:0c:1c:22:ba:84:42:12:
99:2c:e5:05:17:61:86:ce:95:ca:33:cd:d3:dc:e9:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:BD:3C:81:01:A4:B8:88:C8:25:94:83:9E:D1:9B:91:EE:6A:62
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/O029PIEBpLiIyCWUg57Rm5HuamI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
31.130.144.0-31.130.155.255
45.151.60.0/22
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/22
IPv6:
2a00:e78::/33
2a00:e79::-2a00:e7b:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:92:1e:b8:9d:34:6e:c4:c8:12:98:b1:98:49:35:7e:a5:2e:
6f:50:34:66:35:30:b3:31:6a:6a:36:26:13:1f:3c:0a:1d:ea:
1b:f0:0e:6a:c2:d8:ef:0a:9c:d8:41:fd:84:7f:c5:8d:38:79:
7f:4c:96:45:46:29:aa:09:bb:fb:a8:21:2c:4d:0b:fa:56:af:
46:8f:15:5b:8f:e7:ca:2a:90:f9:bb:a0:f2:11:82:2d:5a:61:
68:b4:aa:f6:c4:80:51:75:b7:af:46:82:6f:39:85:c8:cb:c2:
d3:29:8e:cb:99:d3:06:9e:b7:1b:1b:8a:3a:24:a5:15:2d:95:
f6:7b:48:e5:ee:d6:df:fd:c2:dc:70:3f:2c:c3:f3:3d:49:4b:
e2:6b:77:00:3e:ab:1d:75:08:9d:f6:2e:bc:40:56:53:a6:93:
9f:6d:af:7c:cd:80:40:e2:d0:00:59:77:01:5e:bd:b8:eb:49:
46:97:ec:d7:a0:d2:f2:00:48:c3:e6:96:5f:51:65:6c:6d:82:
24:8d:b3:14:76:9e:01:39:68:60:44:31:2e:e8:b5:d8:5b:31:
1c:4e:4b:32:77:ad:af:a8:be:d6:e0:01:a9:99:62:71:fc:bd:
76:1a:a6:62:56:7c:3c:f7:67:81:0f:9d:ed:e5:63:c9:62:2b:
52:c8:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:45 2024 by rpki-client on console-ams.rpki-client.org