Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/rxlGmaTFUacQt87XQzM_8khz9_I.roa
File: rxlGmaTFUacQt87XQzM_8khz9_I.roa (raw, json)
Hash identifier: 2flMZYQTE0hnSL2mL2C5VrRnWXMXnShse07aJ9Lgxh0=
Subject key identifier: AF:19:46:99:A4:C5:51:A7:10:B7:CE:D7:43:33:3F:F2:48:73:F7:F2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0194642286E5AD0766932D15A363133320EF
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/rxlGmaTFUacQt87XQzM_8khz9_I.roa
Signing time: Tue 14 Jan 2025 09:26:11 +0000
ROA not before: Tue 14 Jan 2025 09:26:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214790
IP address blocks: 5.8.44.0/24 maxlen: 24
5.101.47.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.200.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
5.189.218.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
5.189.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 11:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:22:86:e5:ad:07:66:93:2d:15:a3:63:13:33:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 14 09:26:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af194699a4c551a710b7ced743333ff24873f7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:49:37:52:21:2a:48:df:d1:a8:ce:eb:7b:
5c:13:a6:97:f7:e4:7d:2f:07:86:0c:df:9f:6e:c2:
70:26:62:48:57:cd:29:3b:00:d7:0c:76:b3:95:bd:
82:93:c2:4d:78:57:4e:39:e4:71:88:80:71:d9:6d:
5a:98:24:47:9f:1c:01:3c:1a:d8:33:6b:a7:3b:cc:
9c:ba:7f:64:fa:f1:8a:27:94:64:0a:76:f6:04:9f:
48:4e:38:8d:49:68:60:1f:89:08:cd:12:4b:ee:9d:
1e:26:a9:71:4f:d7:8c:c0:34:05:47:b3:90:2d:a5:
a3:29:94:ba:b2:cf:66:ce:5d:8b:19:bb:07:7b:27:
ce:ce:7e:e2:0d:54:3d:c5:60:a3:19:a7:18:aa:89:
07:99:3c:9e:14:cc:e2:2d:d1:4b:90:89:2f:b2:2b:
02:09:b2:08:08:96:ef:d2:a6:64:54:d2:a9:58:c1:
52:e5:8f:83:60:ec:72:75:7a:30:82:28:2f:06:09:
da:58:19:15:81:78:ef:4e:1d:28:57:cc:b8:dd:43:
6a:20:6a:a7:62:f3:1f:81:3e:b5:0e:61:3f:c0:7a:
47:84:68:3e:11:92:45:b7:b1:ce:88:c6:c2:bb:e5:
c1:11:6f:4c:ef:d4:db:f0:e8:39:f3:86:f0:ae:b2:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:46:99:A4:C5:51:A7:10:B7:CE:D7:43:33:3F:F2:48:73:F7:F2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/rxlGmaTFUacQt87XQzM_8khz9_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.44.0/24
5.101.47.0/24
5.188.51.0/24
5.188.200.0/24
5.188.203.0/24
5.189.218.0/23
5.189.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:62:31:ce:75:d3:69:d1:d0:8c:81:39:97:89:93:f1:79:7c:
5a:48:30:c7:f3:9b:99:11:c6:17:e0:a1:f3:76:26:e9:05:1c:
ed:c8:41:0e:9c:f3:37:65:2a:a9:8b:10:da:be:3b:ca:2a:4d:
f0:8d:51:55:20:6d:58:da:9f:c8:f7:85:cb:f7:d7:31:db:4a:
cc:0e:ee:0d:95:96:23:8f:04:70:b7:12:14:32:6b:3c:08:f6:
df:f2:56:a0:ca:27:28:e1:d7:dd:6e:2e:f5:5f:dd:1c:9c:7c:
d9:c1:a9:e3:72:7f:6e:65:de:26:18:a0:62:99:b3:bd:a0:fe:
1c:ea:a0:64:ed:ba:dc:44:56:5d:06:fc:26:cb:97:ba:80:2b:
e0:7d:2b:48:88:66:58:9f:73:c9:2e:bf:ce:99:93:2e:81:00:
b0:02:41:1b:08:de:b7:5e:e5:ca:d1:5e:89:10:63:87:5e:67:
58:ef:2f:25:64:4a:4f:15:89:73:b9:93:66:d2:cf:ff:86:99:
06:58:29:51:79:c4:e6:a4:cf:e0:f3:4c:a1:6e:64:71:db:85:
0c:be:11:07:89:31:58:4c:53:7f:62:0c:f6:ef:20:75:3a:8d:
c7:6c:ff:6b:48:5c:c5:16:ef:77:07:6b:db:43:a4:d2:19:a2:
ec:c8:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:51:42 2025 by rpki-client