Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_nm0WDY99Oiz71Rwll4dwlU3_VM.roa
File: _nm0WDY99Oiz71Rwll4dwlU3_VM.roa (raw, json)
Hash identifier: mXxjnhiKyXp6DZuS7DRXqbSCn298UZ8jm8iOaH4EanE=
Subject key identifier: FE:79:B4:58:36:3D:F4:E8:B3:EF:54:70:96:5E:1D:C2:55:37:FD:53
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01918EEF25099654D16D969F4F6F210CA7ED
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_nm0WDY99Oiz71Rwll4dwlU3_VM.roa
Signing time: Mon 26 Aug 2024 13:45:22 +0000
ROA not before: Mon 26 Aug 2024 13:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28860
IP address blocks: 81.27.144.0/24 maxlen: 24
81.27.149.0/24 maxlen: 24
81.27.150.0/24 maxlen: 24
81.27.151.0/24 maxlen: 24
81.27.152.0/24 maxlen: 24
81.27.158.0/24 maxlen: 24
217.24.112.0/20 maxlen: 20
217.24.112.0/24 maxlen: 24
217.24.113.0/24 maxlen: 24
217.24.114.0/24 maxlen: 24
217.24.115.0/24 maxlen: 24
217.24.116.0/24 maxlen: 24
217.24.117.0/24 maxlen: 24
217.24.118.0/24 maxlen: 24
217.24.120.0/24 maxlen: 24
217.24.121.0/24 maxlen: 24
217.24.122.0/24 maxlen: 24
217.24.123.0/24 maxlen: 24
217.24.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 10:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:ef:25:09:96:54:d1:6d:96:9f:4f:6f:21:0c:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 26 13:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe79b458363df4e8b3ef5470965e1dc25537fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:33:20:e1:3c:e4:7b:5d:1a:c4:0b:88:f9:
3b:84:25:1c:d6:4d:19:e7:bc:24:1e:e3:68:04:d6:
bc:17:0c:78:fe:d3:ae:b8:e0:f1:0d:55:9f:c0:0b:
b0:e1:97:59:10:a4:87:bd:3e:3d:8d:6b:58:df:0a:
08:f4:40:de:3f:dd:75:9c:0c:17:3a:d3:1f:6f:30:
b8:14:2c:65:6a:ae:27:34:21:06:0d:12:3d:86:7f:
ca:14:60:6d:e6:aa:7f:3e:3f:79:8d:35:8b:82:75:
16:10:46:79:e2:ed:e7:05:d3:bc:b8:10:6d:ee:05:
cf:22:1f:f4:03:0a:a3:e1:1b:18:f7:f8:a0:55:ee:
1d:90:a9:0f:48:44:61:4a:83:0f:f8:e0:50:25:5d:
4d:f0:2d:3d:4c:c5:2a:aa:bc:f8:53:80:fd:7a:5b:
e5:1d:c4:78:d4:2b:21:38:cb:55:4f:07:71:b1:d4:
18:ee:d8:75:0d:67:ac:b5:b7:da:06:c8:79:78:2a:
54:76:72:02:8a:e3:c4:aa:93:6a:49:0d:9e:70:6e:
5a:81:a9:f7:96:a8:2c:1d:38:9e:41:8f:bd:86:45:
f5:07:7e:37:d0:79:84:b2:e3:7c:f7:61:8d:44:40:
63:16:f2:f7:46:35:5b:68:8e:6d:73:03:eb:31:c4:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:B4:58:36:3D:F4:E8:B3:EF:54:70:96:5E:1D:C2:55:37:FD:53
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_nm0WDY99Oiz71Rwll4dwlU3_VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.144.0/24
81.27.149.0-81.27.152.255
81.27.158.0/24
217.24.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:6e:e7:f7:89:8c:23:3f:f1:d1:5c:21:09:44:97:21:a7:a5:
40:ab:84:38:4a:89:1c:36:86:ad:a8:30:ae:e6:3e:fb:9a:b3:
f6:69:32:ef:84:5c:2e:4d:99:51:9a:f5:db:79:37:d3:8e:00:
48:d3:0f:b5:9b:5d:2b:57:e0:03:b2:ca:22:97:28:93:e5:d3:
59:3e:56:0f:6d:c5:12:bf:b4:eb:06:02:44:36:e6:97:3b:84:
6e:15:c2:3d:2f:6c:cf:fe:17:13:7f:ee:29:13:f7:03:a5:24:
65:27:f3:18:a4:22:f0:72:77:2f:04:0e:b1:6e:9b:3c:dd:a9:
f0:64:66:8f:bd:c0:7a:47:36:9f:8e:14:8f:18:a1:b5:9e:94:
70:fc:77:e5:82:fa:cb:52:48:7c:f6:7e:9a:6d:c8:d9:16:69:
94:f2:1e:17:5c:e1:d1:ff:a1:0b:0f:1d:d4:4d:41:4f:4a:ea:
a2:37:93:19:8d:b6:80:bf:d6:5a:6f:ec:db:d0:f5:15:fa:5f:
04:22:02:b4:f7:aa:09:26:4c:9c:26:2b:b8:0a:c6:f0:bf:9d:
d0:20:65:8f:33:96:ad:9c:67:7e:9c:15:7b:9b:3a:53:7e:cf:
05:dd:34:5c:16:df:b2:b5:4a:1c:6b:fd:e4:57:fd:76:ac:49:
b6:f5:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:47 2025 by rpki-client