Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5PRKLlEakkAKzSEiAf_61JfR28s.roa
File: 5PRKLlEakkAKzSEiAf_61JfR28s.roa (raw, json)
Hash identifier: OQ2njUkk1eR2fbgXMucW84GLeE0MT3Rw2n9zdmyZqC0=
Subject key identifier: E4:F4:4A:2E:51:1A:92:40:0A:CD:21:22:01:FF:FA:D4:97:D1:DB:CB
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420685DFEF89E86848D4BB39881EE49A0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5PRKLlEakkAKzSEiAf_61JfR28s.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 147.45.65.0/24 maxlen: 24
147.45.196.0/24 maxlen: 24
147.45.197.0/24 maxlen: 24
193.233.16.0/24 maxlen: 24
193.233.85.0/24 maxlen: 24
193.233.171.0/24 maxlen: 24
193.233.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 10:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5d:fe:f8:9e:86:84:8d:4b:b3:98:81:ee:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f44a2e511a92400acd212201fffad497d1dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:fc:db:db:ea:6f:72:d5:fb:1b:4c:bf:68:
52:ea:5c:df:3f:6f:19:21:9e:75:cf:61:f4:9f:69:
52:f7:d2:15:72:56:73:ca:0a:fd:01:63:66:a8:69:
5e:cb:2e:56:77:66:55:84:64:8f:1d:82:c4:5b:0f:
4b:55:11:e8:40:2a:91:5f:33:b8:ef:34:8e:90:dd:
bf:dd:20:e3:23:13:15:7b:a3:8d:d4:ea:7d:b3:a8:
d8:63:4f:7e:43:09:b6:0f:b3:79:5a:b5:ba:70:a2:
7e:c0:bc:e9:24:b6:6c:c8:29:ea:f9:aa:86:17:35:
d2:64:06:ed:ab:6a:91:cf:8c:48:df:ed:9c:55:62:
de:2b:a4:96:71:a9:ac:47:3d:55:3c:d9:68:aa:bf:
f2:ec:a7:a0:84:58:78:9b:62:84:f7:99:44:b4:f7:
58:82:a2:65:a5:56:34:c7:c4:59:26:53:0e:72:b6:
06:d4:bd:de:4f:37:06:6c:9f:fd:7d:d6:0e:83:c5:
80:36:a1:08:b2:53:34:54:c0:f9:8a:ca:e0:c4:b8:
80:53:07:5d:95:93:36:90:7c:e5:ba:4a:1c:99:b2:
82:34:4d:ec:92:33:fc:ef:d1:ed:9e:7d:fa:c5:d8:
34:ec:50:71:ed:16:66:22:fe:4d:b7:5f:55:8f:3a:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:4A:2E:51:1A:92:40:0A:CD:21:22:01:FF:FA:D4:97:D1:DB:CB
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5PRKLlEakkAKzSEiAf_61JfR28s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.65.0/24
147.45.196.0/23
193.233.16.0/24
193.233.85.0/24
193.233.171.0/24
193.233.175.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d7:ed:1b:49:2e:4b:28:81:b0:0b:b2:a1:29:f3:d2:02:17:
ec:ba:f4:3d:9f:16:66:27:38:fa:56:96:ce:ef:6a:71:fe:79:
c2:15:92:89:ef:de:da:2f:7e:42:be:7f:0d:33:d1:c1:bd:27:
68:27:84:27:f7:73:f9:76:d3:97:fa:e2:13:e7:a7:09:38:c2:
b9:7a:4c:90:99:c7:99:94:fb:08:c1:80:c4:c6:62:13:49:8c:
11:7b:b1:ae:ef:1b:0a:f9:85:50:4f:ac:65:d6:a2:c3:93:b3:
f1:36:ba:4c:01:6b:fa:60:87:88:0d:c8:07:d7:96:3e:cf:a2:
99:d7:86:86:5c:d2:55:37:21:9e:c6:76:a6:15:83:90:1b:ef:
25:79:37:7b:db:6e:cb:17:3c:bb:f5:7f:3d:ef:60:54:3f:38:
3a:ef:82:d6:e2:c0:f8:3a:82:ae:ff:c3:67:d4:e1:a4:49:35:
9e:5c:23:f2:ec:eb:cb:8c:d8:27:b0:02:03:8b:d4:19:c1:92:
20:0e:ed:ea:24:90:57:55:6e:ae:b5:ae:f2:47:d0:1d:de:db:
36:54:71:4d:a4:ed:72:8d:d1:4e:37:2f:35:50:08:0a:85:9f:
07:36:62:a0:f7:6e:40:6b:ea:29:c7:8c:7e:50:e1:89:11:a7:
a1:37:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:45 2025 by rpki-client