Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t4qwEaf-kwNYmY1m0Mw1xvfcEFY.roa
File: t4qwEaf-kwNYmY1m0Mw1xvfcEFY.roa (raw, json)
Hash identifier: rkZWHUfr5iyoinsJum72bk64HIloQxfXI27wvIe9Ji0=
Subject key identifier: B7:8A:B0:11:A7:FE:93:03:58:99:8D:66:D0:CC:35:C6:F7:DC:10:56
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0192E88FF58CE98ED83B4599E93EC2B57562
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t4qwEaf-kwNYmY1m0Mw1xvfcEFY.roa
Signing time: Fri 01 Nov 2024 16:30:01 +0000
ROA not before: Fri 01 Nov 2024 16:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 24
62.3.50.0/24 maxlen: 24
194.28.98.0/23 maxlen: 24
2a0c:b640::/32 maxlen: 48
2a0c:b641::/44 maxlen: 48
2a0c:b641:10::/44 maxlen: 48
2a0c:b641:60::/44 maxlen: 48
2a0c:b641:150::/44 maxlen: 48
2a0c:b641:160::/44 maxlen: 48
2a0c:b641:530::/44 maxlen: 48
2a0c:b641:540::/44 maxlen: 48
2a0c:b641:70f::/48 maxlen: 48
2a0c:b641:820::/44 maxlen: 48
2a0c:b641:cb0::/44 maxlen: 48
2a0f:8400::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Nov 2024 10:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:8f:f5:8c:e9:8e:d8:3b:45:99:e9:3e:c2:b5:75:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 1 16:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b78ab011a7fe930358998d66d0cc35c6f7dc1056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:9f:ec:0b:2a:3e:84:80:93:47:40:fb:cd:
86:f1:0e:ef:5f:a0:b2:08:ad:f0:71:96:b7:46:b3:
03:a2:3d:ee:eb:c0:41:d2:bd:e5:4b:77:65:70:77:
77:07:10:df:38:e5:5f:f8:50:92:3f:b7:2d:fe:ea:
0c:79:c7:01:6a:6a:ef:4a:8a:e6:b1:cc:32:0f:11:
48:38:f6:5f:76:d2:1b:94:b5:b1:68:35:e0:f6:5b:
7f:5a:f4:08:48:a6:de:49:71:59:d3:1a:21:16:ea:
de:c1:ef:6c:e2:d6:41:ae:69:40:22:3b:1e:82:ac:
26:45:fa:fe:9c:2f:80:ea:58:ed:0b:57:5f:02:44:
85:76:f4:d9:41:28:ba:44:2a:d8:af:b3:7d:97:24:
34:10:f6:51:eb:de:8f:df:1f:1a:cf:b9:99:73:95:
77:33:92:ec:fd:5a:ee:e2:0e:a4:cf:a1:1f:cb:62:
f4:e0:52:39:f7:12:8e:0c:01:fa:88:76:fa:a6:b2:
f7:c7:df:52:24:86:f7:cd:78:2a:08:46:27:7d:97:
98:a6:d5:71:b5:cf:72:5b:07:fb:dc:9b:db:20:e3:
05:2f:56:7f:fb:97:f2:a6:2e:62:03:44:f5:22:67:
35:88:66:1f:c0:8a:90:50:10:ee:64:5e:96:d1:bf:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:B0:11:A7:FE:93:03:58:99:8D:66:D0:CC:35:C6:F7:DC:10:56
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t4qwEaf-kwNYmY1m0Mw1xvfcEFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
62.3.50.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:60::/44
2a0c:b641:150::-2a0c:b641:16f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::-2a0c:b641:54f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:70f::/48
2a0c:b641:820::/44
2a0c:b641:cb0::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
3f:3b:f4:b9:7d:6f:0c:ff:7b:55:a4:84:f5:13:d6:96:96:88:
d2:5c:0d:c5:78:33:41:46:32:9d:2a:38:95:8d:71:d0:c6:28:
44:06:a7:0a:e7:ba:a1:c1:b8:a3:a6:ac:15:bd:c3:6c:4b:06:
b1:df:9c:e1:f2:65:8c:c8:46:5c:2a:8f:e8:34:b1:c0:27:65:
61:e5:75:6e:ff:ed:6b:47:5e:fc:8d:06:e2:13:fe:05:16:f9:
f6:c5:61:f5:98:f5:d5:69:5d:30:d1:bd:b7:d5:59:a9:c0:b3:
66:51:44:6b:34:7b:a5:cb:20:4f:b0:f5:1c:fc:80:e0:bd:c5:
5e:42:07:e7:4f:3d:bb:eb:8c:d9:08:df:fc:99:e9:df:88:02:
88:6a:28:82:70:6e:db:19:23:8d:e5:1b:ea:c0:69:56:0f:ef:
6b:48:d3:6c:47:a9:ee:e6:86:a3:5f:c0:cb:00:5c:45:e1:03:
61:a3:fd:ac:04:0f:40:be:9e:5e:28:13:98:4d:c8:b5:9e:07:
db:4b:45:0c:3f:9d:1c:79:a7:a5:99:a0:36:4a:cb:cc:d8:bf:
38:3c:ae:05:30:92:09:5f:59:3a:59:82:cd:3c:7a:79:79:cb:
2c:ac:be:d0:0e:45:f0:34:2d:5a:97:d2:83:95:53:2d:3c:c2:
ef:a3:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:59 2025 by rpki-client