Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EAApBhomETPK-Fi3qfXSmFoRa8U.roa
File: EAApBhomETPK-Fi3qfXSmFoRa8U.roa (raw, json)
Hash identifier: j5QuQ7av05tpAgYti3ne4aPdocpi3ZJjA6NCMcl3RP8=
Subject key identifier: 10:00:29:06:1A:26:11:33:CA:F8:58:B7:A9:F5:D2:98:5A:11:6B:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019408B35BD70D7EB4ACEFF2A26AE24D8C22
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EAApBhomETPK-Fi3qfXSmFoRa8U.roa
Signing time: Fri 27 Dec 2024 15:19:19 +0000
ROA not before: Fri 27 Dec 2024 15:19:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 45.88.91.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
194.59.30.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:b3:5b:d7:0d:7e:b4:ac:ef:f2:a2:6a:e2:4d:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 27 15:19:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100029061a261133caf858b7a9f5d2985a116bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:1e:eb:b0:46:81:68:ee:92:3b:d6:19:53:
51:83:16:e3:0c:97:df:c1:d7:30:59:f9:95:15:79:
f7:a4:1a:0f:d2:1c:ee:0f:77:f5:a2:de:bd:e7:ea:
12:24:cf:0e:4a:88:3c:e5:5b:b3:92:1e:b7:33:0c:
c1:8d:f3:fb:a7:f9:ac:87:78:d1:51:dc:e5:5d:07:
a6:7c:ec:7b:67:08:6c:a5:f1:50:69:f3:9a:19:76:
1a:69:58:ac:3f:b0:96:3f:e5:fc:b9:0b:25:97:78:
a9:19:77:7c:81:d5:0f:94:48:33:c1:ac:84:f2:95:
90:46:a4:f6:26:36:3c:c8:3b:87:49:21:7d:1c:ea:
ee:dc:84:74:83:16:5b:47:74:78:a9:01:57:a2:ae:
dc:24:e3:18:16:f7:e0:ec:d0:1d:81:39:69:b5:52:
10:76:31:3b:b7:af:72:21:73:0d:89:f3:92:0b:2d:
44:6e:92:ad:a2:89:40:dd:87:b0:8a:eb:a6:a1:4d:
61:fb:50:fd:92:d1:72:62:20:ce:dc:27:9e:e4:ad:
55:24:5e:c8:9b:45:36:19:8b:24:21:53:83:15:33:
ea:a9:07:e9:0e:c9:0b:ab:17:cb:0d:1c:75:34:7e:
3a:d1:6f:29:5e:79:3d:53:e5:a5:3b:dd:a3:15:d2:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:29:06:1A:26:11:33:CA:F8:58:B7:A9:F5:D2:98:5A:11:6B:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EAApBhomETPK-Fi3qfXSmFoRa8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
79.110.49.0/24
80.76.49.0/24
194.59.30.0/23
Signature Algorithm: sha256WithRSAEncryption
56:5b:39:88:3d:19:b1:0f:80:25:81:15:7f:59:02:15:a1:60:
61:71:ed:8b:dc:68:41:31:e5:e6:fc:17:aa:4d:ce:41:c1:e1:
84:52:42:44:74:56:c0:cd:97:ea:8f:66:e7:a8:25:c6:88:e6:
a0:7c:a7:81:dd:10:8c:e1:e5:25:90:56:49:5e:2d:52:ec:e9:
7e:b8:6a:06:cb:a8:39:e0:23:42:69:c8:b3:27:6d:4a:70:40:
3b:f8:e5:b9:31:57:d7:a8:39:a3:74:7c:89:52:e4:d6:1b:e8:
47:c1:5c:71:f1:ba:94:7a:73:64:ee:45:44:fb:c4:60:1e:19:
dd:42:11:27:3f:29:b5:45:5a:24:8e:1a:33:51:48:7d:0c:03:
a0:0f:7c:bf:ab:20:e5:98:e8:61:1b:59:6c:3b:a7:bb:70:a6:
04:57:70:24:10:56:b8:e3:aa:80:d3:7b:47:cc:20:d0:15:06:
bd:eb:49:74:d8:1e:40:3b:83:37:3d:0f:38:91:a6:7e:0f:5c:
cd:0a:e9:7f:9b:7b:3c:59:87:f3:ab:5b:91:9a:b8:4d:fd:dd:
50:77:d5:aa:23:9a:77:ac:b8:70:59:50:b2:ea:31:4d:fa:2f:
13:55:c7:55:2b:ad:42:cf:89:18:6a:44:28:72:42:5d:5c:2e:
08:eb:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:13:27 2025 by rpki-client