Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/EwsXgJQjsWkWWRtARl6Au9KTnyI.roa
File: EwsXgJQjsWkWWRtARl6Au9KTnyI.roa (raw, json)
Hash identifier: jE5lXFCQHM32/7Wchb9zqtkA2P6Yz+GqUnGeJTxFM0A=
Subject key identifier: 13:0B:17:80:94:23:B1:69:16:59:1B:40:46:5E:80:BB:D2:93:9F:22
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0195B34B949ADBBC85D66D57953188E58849
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/EwsXgJQjsWkWWRtARl6Au9KTnyI.roa
Signing time: Thu 20 Mar 2025 11:23:49 +0000
ROA not before: Thu 20 Mar 2025 11:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44002
IP address blocks: 79.98.72.0/21 maxlen: 21
79.98.72.0/24 maxlen: 24
79.98.73.0/24 maxlen: 24
79.98.74.0/24 maxlen: 24
79.98.75.0/24 maxlen: 24
79.98.76.0/24 maxlen: 24
79.98.77.0/24 maxlen: 24
79.98.78.0/24 maxlen: 24
79.98.79.0/24 maxlen: 24
185.4.200.0/22 maxlen: 22
185.4.200.0/24 maxlen: 24
185.4.201.0/24 maxlen: 24
185.4.202.0/24 maxlen: 24
185.4.203.0/24 maxlen: 24
2a02:970::/32 maxlen: 48
2a02:970:1::/48 maxlen: 48
2a02:970:1006::/48 maxlen: 48
2a02:970:1017::/48 maxlen: 48
2a02:970:1019::/48 maxlen: 48
2a02:970:1028::/48 maxlen: 48
2a02:970:1052::/48 maxlen: 48
2a02:970:1061::/48 maxlen: 48
2a02:970:1176::/48 maxlen: 48
2a02:970:1185::/48 maxlen: 48
2a02:970:1192::/48 maxlen: 48
2a02:970:1206::/48 maxlen: 48
2a02:970:1245::/48 maxlen: 48
2a02:970:1366::/48 maxlen: 48
2a02:970:1446::/48 maxlen: 48
2a02:970:1c01::/48 maxlen: 48
2a02:970:2006::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 22:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:4b:94:9a:db:bc:85:d6:6d:57:95:31:88:e5:88:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Mar 20 11:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=130b17809423b16916591b40465e80bbd2939f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:bd:20:e1:a8:6f:36:6f:29:05:05:66:2d:
ea:2e:23:dc:39:2d:32:73:6c:a0:e4:bd:8f:a3:74:
aa:9e:37:0d:da:bc:12:76:35:31:65:c2:ab:f6:4d:
2d:06:06:eb:23:5e:d1:d0:ae:23:de:ea:59:38:a1:
d4:bf:55:2b:c9:22:cc:31:fb:73:df:b8:81:ad:45:
b2:69:e2:43:63:ce:1e:06:be:23:65:fa:47:49:b6:
56:3b:50:97:d0:11:f4:ae:fb:7a:c7:9a:3d:da:b9:
a7:2e:82:39:a6:a4:08:e6:52:a9:cb:90:0a:22:27:
76:eb:c8:4d:23:47:dc:9f:78:8f:82:4d:42:e8:aa:
2e:64:81:dc:9b:d8:02:44:b6:8e:3b:5d:bf:0d:12:
32:e3:c3:4e:34:89:e9:f1:04:a6:33:f9:04:80:61:
cc:1b:5e:83:3a:35:e5:69:0d:85:39:93:d3:c8:62:
2e:5e:37:8c:2b:7e:5e:09:5e:b9:c5:0b:e2:f6:f9:
ec:b5:2b:d2:6f:a8:17:43:74:37:aa:3f:8f:82:c4:
4d:e3:7b:32:77:41:4e:b4:a6:48:1c:aa:c9:12:31:
38:ec:11:d0:25:55:b2:85:e0:3d:98:74:91:6d:00:
19:52:f7:a7:31:80:b7:c0:e4:14:2a:7b:c7:fd:ac:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0B:17:80:94:23:B1:69:16:59:1B:40:46:5E:80:BB:D2:93:9F:22
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/EwsXgJQjsWkWWRtARl6Au9KTnyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.72.0/21
185.4.200.0/22
IPv6:
2a02:970::/32
Signature Algorithm: sha256WithRSAEncryption
b8:71:50:5e:5e:ca:0b:00:e9:c4:0b:b8:6f:37:c2:7e:ef:cf:
51:97:04:7a:b0:2a:05:11:cc:5f:a8:d4:69:0e:0e:30:e8:89:
82:c1:14:61:36:4f:31:51:4b:0d:79:08:ab:aa:0f:d0:71:31:
07:91:f3:ad:72:88:ca:6f:0a:77:37:bf:0b:9b:e9:db:5b:06:
0c:8a:17:02:25:97:c8:ab:03:f5:0c:10:21:c7:a7:51:ec:66:
81:a6:0a:f2:1b:4e:6f:bc:5c:4d:db:6c:69:cd:9b:2c:50:6f:
0e:9e:fa:1f:a8:eb:07:2f:27:a4:ae:73:23:34:13:ce:48:3c:
39:bf:39:56:e3:b7:39:1b:34:87:47:d5:78:67:13:42:72:e4:
e3:d6:6a:d9:6c:02:b3:5c:e2:d2:80:88:8a:32:48:4c:20:b1:
36:f8:2b:ca:00:a4:2a:00:5e:e0:cd:36:46:20:9d:7d:51:f7:
41:b8:35:06:38:0e:4a:b2:1b:f5:6e:a6:cc:c9:48:27:14:86:
16:21:8c:88:94:d3:f2:ab:4f:49:a0:fd:bb:4b:6d:e0:08:e6:
c1:8f:d4:c6:55:de:7d:df:7c:0d:83:85:76:98:5e:c5:c3:0a:
89:9d:e9:4f:8d:d5:0d:60:d9:3f:8e:8e:04:4f:6c:82:80:1b:
07:f2:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:55 2025 by rpki-client