Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ePSWe-utSHoH1gq34fE7Nh0pyPw.roa
File: ePSWe-utSHoH1gq34fE7Nh0pyPw.roa (raw, json)
Hash identifier: ZR4X/8TxvCbbO7XTPGIeKw/QTLtc8qnUwbaVwD7zLBo=
Subject key identifier: 78:F4:96:7B:EB:AD:48:7A:07:D6:0A:B7:E1:F1:3B:36:1D:29:C8:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193DF7BABBB4DCAF2DA28C152DBA6B5922B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ePSWe-utSHoH1gq34fE7Nh0pyPw.roa
Signing time: Thu 19 Dec 2024 15:14:04 +0000
ROA not before: Thu 19 Dec 2024 15:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 45.128.96.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:7b:ab:bb:4d:ca:f2:da:28:c1:52:db:a6:b5:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 15:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f4967bebad487a07d60ab7e1f13b361d29c8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:52:b5:3f:86:2d:1c:59:b5:85:6f:93:9c:
1c:90:3e:06:be:89:a9:6f:1c:17:a9:81:3a:7c:1e:
e6:24:bf:0b:b1:9f:62:fe:11:59:8c:04:75:a3:de:
45:2f:cb:1b:36:fc:a4:8a:f3:a0:d6:b7:86:38:54:
f4:40:f6:a5:df:0d:8b:2a:0c:f1:05:9a:5a:1f:01:
ee:6e:3e:2f:07:95:af:c2:97:4d:22:0d:fb:31:f5:
94:d4:ae:99:4d:75:14:ff:08:45:c5:cb:3f:ca:45:
8d:ed:f2:fd:23:80:95:2d:5f:5a:b9:54:79:3b:0c:
e0:d7:25:7d:24:34:2b:f5:79:97:83:24:16:89:95:
c9:3c:65:3d:be:de:ed:28:92:02:17:40:59:fd:a5:
cc:5c:c3:bc:45:6e:96:23:10:9c:17:3c:c2:da:12:
08:a2:98:7e:41:5e:02:e8:51:de:1b:36:34:ef:7b:
0e:97:d2:57:69:d7:23:32:bc:8b:48:43:ad:9d:b6:
7a:a2:b9:e9:a0:a3:72:52:8b:04:e3:e3:8d:82:3a:
26:81:a8:47:f4:9f:20:75:9a:00:7a:07:bf:99:e4:
58:c2:94:17:bd:bc:31:57:17:93:6b:d6:de:89:a1:
60:cf:cb:26:68:7e:b1:a9:5d:46:57:f5:99:92:da:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:96:7B:EB:AD:48:7A:07:D6:0A:B7:E1:F1:3B:36:1D:29:C8:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ePSWe-utSHoH1gq34fE7Nh0pyPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/24
84.54.51.0/24
87.120.33.0/24
87.121.38.0/24
87.121.58.0/24
91.92.16.0/24
94.103.127.0/24
94.156.2.0/24
94.156.79.0/24
94.156.113.0/24
141.98.4.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7f:2b:38:4f:df:36:f1:e0:b6:07:c9:83:35:a0:9b:5c:15:
75:2d:96:05:fb:3f:1c:a8:ea:ee:d0:a5:ec:df:58:b6:f4:fb:
a6:ea:e0:89:91:46:38:56:c0:d8:49:e8:9e:b8:47:4c:d5:93:
fb:ce:7e:be:5b:92:9c:29:f3:ee:b4:bc:59:7d:de:35:ac:ee:
1e:af:85:f7:31:64:e6:ba:5d:d9:80:2c:40:01:bb:f7:65:b7:
f5:6d:72:f5:7c:ee:d0:d4:7c:29:57:bc:26:84:b7:db:b2:d4:
92:61:e8:d5:f5:9a:21:65:24:44:8b:59:ec:ad:89:43:df:ec:
7b:0d:1b:39:05:17:05:2b:64:06:ad:31:81:80:c7:4b:83:e6:
93:f0:c4:92:07:1e:1d:01:6a:f8:55:42:87:f8:78:4a:a9:01:
8c:22:58:40:5a:69:51:ff:bc:9f:b2:42:42:e2:d6:4f:4d:0e:
3a:73:59:be:f2:d5:c9:0f:a2:02:8e:41:b2:40:e8:43:b9:a3:
c3:c5:16:d5:7f:b8:3f:36:ec:36:18:c1:8b:ff:61:c4:35:a6:
9d:6f:cb:08:74:73:2a:6c:70:e2:36:31:18:b9:de:9d:9c:bc:
ef:66:56:d1:cf:b7:7c:2b:0e:67:04:78:52:ce:ce:83:14:5b:
13:a7:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:28 2025 by rpki-client