Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/COR1nEr1TK2PNagedxy1pVmXx2Y.roa
File: COR1nEr1TK2PNagedxy1pVmXx2Y.roa (raw, json)
Hash identifier: z1x+GSrBsre5jQL56OsnlJzW4yHu3XundaDbEERJpV8=
Subject key identifier: 08:E4:75:9C:4A:F5:4C:AD:8F:35:A8:1E:77:1C:B5:A5:59:97:C7:66
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0193BB504DCFB19AB463606D888B2D9BCC19
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/COR1nEr1TK2PNagedxy1pVmXx2Y.roa
Signing time: Thu 12 Dec 2024 14:40:22 +0000
ROA not before: Thu 12 Dec 2024 14:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62068
IP address blocks: 5.182.208.0/22 maxlen: 24
45.14.224.0/22 maxlen: 24
45.87.41.0/24 maxlen: 24
45.87.42.0/23 maxlen: 24
62.68.71.0/24 maxlen: 24
91.226.227.0/24 maxlen: 24
91.230.49.0/24 maxlen: 24
146.19.248.0/24 maxlen: 24
185.224.128.0/22 maxlen: 24
185.244.36.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0d:2780::/29 maxlen: 32
2a0e:16c0::/29 maxlen: 29
2a0e:1740::/29 maxlen: 29
2a0e:2000::/29 maxlen: 29
2a11:b240::/29 maxlen: 32
2a12:a8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:50:4d:cf:b1:9a:b4:63:60:6d:88:8b:2d:9b:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Dec 12 14:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08e4759c4af54cad8f35a81e771cb5a55997c766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:c9:1c:c5:9a:83:00:0b:f6:bf:d4:94:c4:
6d:a8:d3:3e:6b:45:fb:d3:b6:81:d1:42:8f:63:71:
43:84:4d:c8:c7:fb:65:46:66:21:a8:9b:1d:c0:00:
68:96:c9:10:60:5e:d6:0e:f4:93:af:d9:14:e6:89:
4d:32:b8:67:48:d3:dd:db:76:b4:d1:10:16:07:1e:
fc:1b:e0:ac:cc:f0:6e:b3:29:46:df:ad:0d:9c:24:
73:25:47:73:0c:3d:be:af:be:2f:00:4f:e0:ff:62:
cd:d6:99:66:45:dd:6f:c9:3e:02:19:a4:e3:14:c6:
0a:54:0b:bb:22:e0:63:c8:80:71:56:98:cb:41:5c:
13:c0:37:dd:cc:34:c2:2a:9a:e3:8b:24:9e:8a:95:
e2:d6:74:25:2d:23:ab:b3:c8:18:ec:60:2d:4b:a2:
a7:2d:48:11:20:93:26:83:67:47:33:10:cf:11:78:
8e:66:13:15:76:9e:54:de:d4:5c:70:ef:75:80:87:
68:21:31:9a:8a:28:ec:cb:e4:9a:cc:ad:a9:7c:23:
77:d0:33:be:4a:a3:2a:4a:42:8b:82:b3:e4:df:67:
15:47:a5:55:cd:3a:86:c0:eb:b1:df:f3:e3:23:b3:
dc:cb:ef:50:b4:4b:46:98:53:ac:3c:27:a2:b0:12:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:75:9C:4A:F5:4C:AD:8F:35:A8:1E:77:1C:B5:A5:59:97:C7:66
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/COR1nEr1TK2PNagedxy1pVmXx2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.41.0-45.87.43.255
62.68.71.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:e5:f1:a2:49:47:6c:b4:d1:2d:ac:b6:79:75:7b:f0:61:63:
f9:98:e7:f2:c7:ea:2c:2d:99:13:b0:75:88:06:bc:9b:db:5f:
71:33:a3:cc:12:cc:d9:57:03:2e:b2:f8:49:8c:40:d0:2b:06:
aa:8a:44:0a:fc:6e:ce:40:77:eb:32:44:03:34:bd:d4:71:49:
ed:2b:3e:b7:aa:38:79:32:7a:4d:ac:3a:76:ac:ea:2d:1e:ba:
ff:1a:7a:ce:11:a5:75:95:73:56:b6:43:ee:65:23:e4:1e:f2:
93:3d:56:7c:31:33:ac:90:81:ae:87:38:3f:70:9e:a5:e5:95:
bd:0f:fc:fa:30:12:8f:0d:a9:4f:03:1e:d9:69:a8:d5:af:11:
38:f0:17:6f:f3:a6:43:2c:34:53:98:be:1f:4e:bb:53:64:20:
ce:f9:cb:9f:18:45:cd:c7:e4:9e:be:c4:14:33:d3:f2:bf:6a:
33:47:77:e7:be:85:a7:32:ce:11:8a:53:42:5a:a4:1a:65:4f:
62:ad:a8:1e:9e:79:c8:c0:b0:f6:31:1d:ae:7c:a4:9d:35:14:
2b:e2:d5:28:65:9e:e4:75:03:20:67:0a:76:e4:4a:fe:f5:3c:
e7:80:23:d1:df:37:c8:d7:79:3d:36:7a:f8:33:68:1c:28:1a:
a6:73:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:43:21 2025 by rpki-client