Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u3oNCIs8S0kMEYIc0AJI6zZEYgM.roa
File: u3oNCIs8S0kMEYIc0AJI6zZEYgM.roa (raw, json)
Hash identifier: 1jH/7Tp+N7D9rhZEmNrWMQgZDaM5TOolrm4jMjo7NbE=
Subject key identifier: BB:7A:0D:08:8B:3C:4B:49:0C:11:82:1C:D0:02:48:EB:36:44:62:03
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018D3AB1DE11FBEF8B092B2B81915EA56B85
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u3oNCIs8S0kMEYIc0AJI6zZEYgM.roa
Signing time: Wed 24 Jan 2024 08:59:11 +0000
ROA not before: Wed 24 Jan 2024 08:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:b1:de:11:fb:ef:8b:09:2b:2b:81:91:5e:a5:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 24 08:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb7a0d088b3c4b490c11821cd00248eb36446203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:41:43:dc:98:1e:58:02:b2:89:82:13:a6:
94:3e:c9:ad:b0:ab:cd:33:7f:fd:ac:38:e3:68:6e:
43:18:50:63:5c:86:19:ef:24:f7:c1:4d:c8:8f:8b:
7f:c5:79:9f:65:57:ee:5c:24:89:19:4a:90:11:54:
1d:30:3b:32:38:f6:b1:14:d5:14:41:c1:e9:1b:71:
3b:cc:ed:bb:a8:e5:f9:94:01:00:30:e0:04:2b:15:
9e:6c:8f:94:3e:40:3c:46:f3:46:ec:c1:aa:70:33:
65:56:8d:7f:bb:e1:06:ec:58:59:13:2b:3c:1a:a0:
19:e6:7a:7b:b7:9e:fe:b5:2b:60:11:05:e2:d4:53:
0a:e8:f8:34:7f:a1:af:41:40:40:10:d1:c3:f7:56:
75:8c:62:88:b3:84:81:0f:ac:c9:e3:87:aa:91:98:
80:aa:f9:3f:54:ba:1b:63:a7:3e:30:a6:d2:55:54:
f6:50:b1:8a:98:1f:f6:d4:88:fb:1a:cc:ce:6d:de:
6a:88:29:32:dd:53:3e:29:a3:22:67:ba:45:f9:28:
ca:f9:bb:ef:4a:82:c9:45:28:6e:86:46:31:2f:7d:
fc:97:cc:d5:1c:0c:5e:36:d2:91:f7:a5:7b:c8:a5:
f6:b5:d9:bd:9c:dd:08:76:04:c2:2b:e0:51:b2:26:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:0D:08:8B:3C:4B:49:0C:11:82:1C:D0:02:48:EB:36:44:62:03
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u3oNCIs8S0kMEYIc0AJI6zZEYgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.192.0/22
5.188.204.0/23
5.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:48:de:39:28:7e:0b:7e:a2:f0:53:84:b0:0a:f6:3d:9e:2d:
65:ae:64:31:14:41:c6:b8:34:cb:08:41:07:39:9a:4b:79:d8:
a8:20:27:84:a9:a4:0a:58:04:57:ef:21:2c:18:ea:2a:85:fa:
8c:a8:0f:22:af:ae:ba:f3:dc:6c:fa:fd:b6:65:a7:b8:16:93:
b5:8b:cb:e6:a0:61:73:57:e0:7a:2c:4c:f9:87:ae:a2:b6:36:
e5:c4:52:69:58:5f:67:29:87:8f:3f:69:e0:2e:89:bd:7e:1a:
b5:c2:86:e6:57:ab:a0:ba:9a:62:c6:28:43:1b:22:58:73:bb:
11:40:93:3b:93:0b:a3:92:41:66:05:5f:92:3a:2b:39:7b:04:
f7:f4:d1:4b:51:25:9d:c0:d2:9d:d1:09:d9:a9:cf:b0:4f:e8:
dd:c1:e3:a8:97:c6:a6:c7:a9:5b:a8:e3:ec:61:48:ec:b1:63:
fc:50:09:3a:d8:7f:59:ba:e4:54:a9:ab:19:c4:24:db:72:9b:
8d:83:cb:6c:c1:0e:55:9b:51:28:86:d2:07:0d:69:a9:83:b9:
b2:d0:3c:46:01:38:c6:9e:29:0d:0e:44:2c:61:74:a7:5f:2e:
cb:81:3e:0a:eb:6c:82:e1:7f:4d:e6:24:58:1a:7c:ec:e3:f9:
52:43:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:32 2025 by rpki-client