Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/RaJhzNn1xK1nNWcTHuA4lmd1hDQ.roa
File: RaJhzNn1xK1nNWcTHuA4lmd1hDQ.roa (raw, json)
Hash identifier: uSZY3V2+aj1drTgEXiBgkW7ULcNfv3st7JeLNCNf6lM=
Subject key identifier: 45:A2:61:CC:D9:F5:C4:AD:67:35:67:13:1E:E0:38:96:67:75:84:34
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 0193924CD8875A5E59C23087FBF2D517320F
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/RaJhzNn1xK1nNWcTHuA4lmd1hDQ.roa
Signing time: Wed 04 Dec 2024 15:32:09 +0000
ROA not before: Wed 04 Dec 2024 15:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64437
IP address blocks: 5.104.141.0/24 maxlen: 24
5.104.142.0/24 maxlen: 24
5.104.143.0/24 maxlen: 24
37.143.35.0/24 maxlen: 24
37.143.38.0/24 maxlen: 24
37.143.39.0/24 maxlen: 24
37.156.228.0/24 maxlen: 24
37.156.252.0/22 maxlen: 24
89.38.160.0/24 maxlen: 24
176.126.232.0/24 maxlen: 24
176.126.233.0/24 maxlen: 24
176.126.234.0/24 maxlen: 24
185.107.36.0/24 maxlen: 24
185.107.38.0/24 maxlen: 24
185.107.100.0/24 maxlen: 24
185.107.101.0/24 maxlen: 24
185.107.102.0/24 maxlen: 24
185.107.103.0/24 maxlen: 24
212.92.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:4c:d8:87:5a:5e:59:c2:30:87:fb:f2:d5:17:32:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Dec 4 15:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45a261ccd9f5c4ad673567131ee0389667758434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:d9:10:00:dd:d9:c6:96:12:39:32:bb:23:
77:52:99:58:fb:cb:9f:0d:30:3b:d5:a3:1f:59:0a:
ba:bb:21:04:8e:c8:b8:8b:16:35:18:4e:52:09:e5:
bc:80:8d:ff:31:de:68:9e:e6:38:78:fb:38:00:e1:
28:f4:2c:95:1a:89:3f:69:ff:0f:f7:d5:71:2f:a0:
ab:c5:fe:2a:0e:bd:5e:0f:58:29:a9:fd:02:cc:38:
b4:b9:d8:a1:86:fe:63:0a:c3:90:f3:ad:23:83:9d:
0e:8d:e8:35:e0:4b:c0:e6:c1:b5:e5:0d:30:cc:19:
c9:6e:11:d7:23:99:83:51:c9:ea:f7:68:9b:a6:33:
49:05:a2:ba:ed:2b:0e:55:15:52:24:9b:b6:76:91:
d5:a4:06:c2:a5:d7:c4:02:ba:77:a0:44:6c:b1:c4:
76:63:f9:ac:33:80:a5:6a:1c:26:2e:50:58:ef:7c:
a7:df:69:81:f2:5f:6a:d0:4d:21:2d:3f:5a:bc:56:
2c:9b:48:96:f8:be:2b:da:a1:0b:54:33:5e:c8:26:
a7:79:fc:50:9d:25:fe:cc:47:ef:1f:cc:e7:61:76:
07:f9:9c:7e:84:6d:bf:cb:f9:ff:39:31:4d:5a:27:
59:23:94:83:cc:82:9a:d0:9e:cf:40:5f:84:ea:70:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:61:CC:D9:F5:C4:AD:67:35:67:13:1E:E0:38:96:67:75:84:34
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/RaJhzNn1xK1nNWcTHuA4lmd1hDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.141.0-5.104.143.255
37.143.35.0/24
37.143.38.0/23
37.156.228.0/24
37.156.252.0/22
89.38.160.0/24
176.126.232.0-176.126.234.255
185.107.36.0/24
185.107.38.0/24
185.107.100.0/22
212.92.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:46:ee:6b:10:2e:e3:a2:66:0b:ae:ad:d8:33:f7:86:f1:ef:
2f:64:7f:b4:28:8a:58:52:43:dc:fd:16:76:7f:e0:62:69:a9:
82:2c:cb:7d:a4:e4:48:1d:c6:76:8c:40:9a:ec:61:55:fb:54:
80:25:4d:27:ee:fe:32:00:1d:0e:65:ed:ad:47:1b:cd:8d:70:
55:ef:a4:37:7d:67:fd:84:12:10:02:2e:87:b4:dd:3e:3c:ba:
d3:89:ec:15:7d:1b:3e:31:63:02:e5:03:a0:76:8c:85:c7:5a:
a2:cc:88:9a:0d:cc:27:8d:fd:7d:1a:d8:87:4b:31:74:50:90:
13:bd:eb:74:8e:fb:f2:6b:1b:53:1c:72:13:c3:fa:ef:69:60:
4d:16:b8:56:f7:15:71:46:de:e2:03:17:bb:73:7d:84:d5:77:
b6:35:df:14:82:44:07:0f:e9:a9:6d:ea:94:f3:3b:57:40:8c:
e8:d2:c0:f5:3b:a6:bf:7e:01:93:79:12:14:ed:6f:74:82:27:
2d:83:15:16:5b:41:88:6f:6a:32:13:29:43:25:64:1c:7b:0b:
31:ed:af:12:af:e6:58:59:e9:c9:e7:69:37:7d:f3:a3:ed:3c:
8f:b6:e3:f3:52:eb:6e:f3:ec:aa:5e:4d:6a:72:b8:6f:f7:ae:
db:0b:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:14:33 2025 by rpki-client