Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/csoLS0YxOHAO30vPxPUpDBM6c5E.roa
File: csoLS0YxOHAO30vPxPUpDBM6c5E.roa (raw, json)
Hash identifier: ZVkuA/17+tf8Fk2Rv0T7S/sdlZHjgwPuOBLtx09dDOk=
Subject key identifier: 72:CA:0B:4B:46:31:38:70:0E:DF:4B:CF:C4:F5:29:0C:13:3A:73:91
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019426D8681663780D6DDB5B905267E5DA68
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/csoLS0YxOHAO30vPxPUpDBM6c5E.roa
Signing time: Thu 02 Jan 2025 11:48:23 +0000
ROA not before: Thu 02 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 37.49.144.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.166.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:68:16:63:78:0d:6d:db:5b:90:52:67:e5:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72ca0b4b463138700edf4bcfc4f5290c133a7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:40:25:76:1c:bb:e2:f7:c3:00:98:9a:31:
ee:74:31:44:33:45:5e:44:66:6b:f1:8e:a9:47:4a:
8a:52:c2:5e:d9:8c:ea:dd:9a:cd:29:92:55:f9:f3:
f0:7e:f3:22:13:a4:fd:15:c4:ee:16:a7:5f:07:09:
fb:f2:d3:ea:95:31:af:58:2d:7c:ff:bb:32:7d:4e:
11:74:49:46:58:f2:7a:e8:a6:fe:5e:b9:3b:79:52:
2e:be:ef:f6:02:e0:8b:c1:db:4f:de:4b:48:67:7b:
83:24:b7:ea:56:a5:b9:23:4a:76:4a:9f:a8:48:a1:
10:b5:44:59:6c:dc:04:f0:84:bb:a2:42:0c:d3:6c:
81:62:64:bd:1a:0c:df:b2:e9:39:d3:7d:5e:55:83:
37:db:40:d7:e8:05:32:61:79:35:b8:c1:06:d1:29:
11:1b:6f:c8:fd:65:cc:f3:67:20:b8:47:42:34:03:
29:90:be:b0:40:27:94:38:2d:51:2b:51:64:8d:96:
64:5c:0f:f0:d1:79:2c:6c:13:48:a1:b0:37:13:52:
f1:90:16:83:0f:64:b6:09:d9:35:0c:52:e9:5d:d6:
4e:fb:1b:2d:7d:ca:38:11:0a:0c:e9:6a:54:05:d4:
d3:98:0f:c2:5a:85:7b:8c:36:59:a6:f0:64:91:8f:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:0B:4B:46:31:38:70:0E:DF:4B:CF:C4:F5:29:0C:13:3A:73:91
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/csoLS0YxOHAO30vPxPUpDBM6c5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
94.74.152.0/22
109.203.166.0/24
109.203.168.0/21
109.203.184.0/21
Signature Algorithm: sha256WithRSAEncryption
25:58:4f:59:d9:c3:97:54:fb:5a:89:75:55:02:02:8e:fc:f7:
cd:f9:f2:34:3e:55:1f:e7:30:b1:97:1b:29:92:a6:b1:0a:3c:
0e:66:84:39:87:c8:38:de:a6:ab:2f:75:15:67:a1:39:a6:bb:
2a:d2:51:42:80:bc:a6:44:07:e7:26:dd:23:44:07:3d:7f:b4:
64:f7:83:bd:ff:86:60:da:da:d3:87:92:f1:6b:56:41:4e:e0:
4e:b6:bc:68:bb:41:9d:bf:f3:cd:57:8c:85:c3:54:e4:d0:84:
71:51:e2:5d:ca:34:5d:75:f9:0a:20:fc:db:1b:2d:f4:00:0e:
7d:18:eb:41:7e:55:86:25:99:3f:f0:3e:2b:76:d0:82:ab:92:
0b:1e:86:0d:6c:c6:4e:35:c0:de:28:08:11:88:ce:0d:0e:33:
2f:38:32:41:a8:87:1e:76:86:11:80:f0:92:35:8d:34:e0:4f:
d2:3a:7a:54:c7:af:a1:6d:49:a5:ca:90:f3:ea:55:9a:b0:22:
01:ff:01:d3:73:75:6d:ea:70:1e:b7:73:16:63:6c:24:58:9d:
02:36:80:ff:4f:94:6c:14:2c:1b:11:3f:92:b0:3d:6b:c5:8b:
21:c8:39:67:51:40:1d:83:23:b1:29:42:a5:a7:91:ec:9d:fa:
0c:df:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:50 2025 by rpki-client