Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/ZXkhtRNYytQrHuPnyuHQUuF5wxg.roa
File: ZXkhtRNYytQrHuPnyuHQUuF5wxg.roa (raw, json)
Hash identifier: Hrg4PncLPypGjbuw/HDXUAzk4M1QE7JCuGumUKaKHOM=
Subject key identifier: 65:79:21:B5:13:58:CA:D4:2B:1E:E3:E7:CA:E1:D0:52:E1:79:C3:18
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019385AB358349111D9AC8DAE47B4FA5541C
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/ZXkhtRNYytQrHuPnyuHQUuF5wxg.roa
Signing time: Mon 02 Dec 2024 04:40:10 +0000
ROA not before: Mon 02 Dec 2024 04:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50923
IP address blocks: 5.53.16.0/20 maxlen: 20
5.53.16.0/21 maxlen: 21
5.53.16.0/22 maxlen: 22
5.53.20.0/22 maxlen: 22
5.53.24.0/21 maxlen: 21
5.53.24.0/22 maxlen: 22
5.53.28.0/22 maxlen: 22
5.53.30.0/24 maxlen: 24
37.60.16.0/21 maxlen: 21
37.60.16.0/22 maxlen: 22
37.60.16.0/23 maxlen: 23
37.60.16.0/24 maxlen: 24
37.60.18.0/23 maxlen: 23
37.60.20.0/22 maxlen: 22
37.60.20.0/23 maxlen: 23
37.60.22.0/23 maxlen: 23
37.143.96.0/20 maxlen: 20
37.143.96.0/21 maxlen: 21
37.143.96.0/22 maxlen: 22
37.143.100.0/22 maxlen: 22
37.143.104.0/21 maxlen: 21
37.143.104.0/22 maxlen: 22
37.143.108.0/22 maxlen: 22
178.208.224.0/19 maxlen: 19
178.208.224.0/20 maxlen: 20
178.208.224.0/21 maxlen: 21
178.208.232.0/21 maxlen: 21
178.208.240.0/20 maxlen: 20
178.208.240.0/21 maxlen: 21
178.208.248.0/21 maxlen: 21
185.3.68.0/22 maxlen: 22
185.3.68.0/23 maxlen: 23
185.3.68.0/24 maxlen: 24
185.3.69.0/24 maxlen: 24
185.3.70.0/23 maxlen: 23
185.3.70.0/24 maxlen: 24
185.3.71.0/24 maxlen: 24
2a00:ae40::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 22 Dec 2024 07:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:85:ab:35:83:49:11:1d:9a:c8:da:e4:7b:4f:a5:54:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Dec 2 04:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=657921b51358cad42b1ee3e7cae1d052e179c318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:f6:55:a2:26:0d:0d:99:8d:87:8d:ac:a5:
71:66:64:73:7d:7f:3c:e9:25:c0:73:2d:4e:d8:a0:
25:c1:b7:fd:8f:ff:de:d8:d3:56:2b:8d:7e:3c:c1:
8c:ed:63:1a:f4:ae:7a:f8:1a:8a:84:2d:2d:94:6f:
f5:1b:bd:ca:ce:94:11:d7:1e:31:35:a5:3c:c0:66:
4f:16:98:22:2b:72:4b:26:ff:0e:b0:11:80:4f:11:
35:56:4c:7a:0e:2f:13:4d:65:4a:4d:50:34:5f:fb:
1d:4a:fb:1d:27:87:53:e0:64:3a:cd:cf:1b:05:c9:
ec:f5:35:22:10:52:4c:70:df:b8:4b:c0:56:26:a2:
33:bb:4c:e6:9d:88:8f:9f:b6:d5:bf:31:b2:3a:60:
ca:66:cc:94:59:63:c5:ea:66:19:db:35:ac:9f:8d:
74:3e:c9:52:6f:a0:34:40:c8:ba:77:81:cb:ed:e8:
a3:7c:17:09:86:4f:4c:4f:cf:bb:97:27:ab:ff:59:
1f:31:8d:cf:22:b4:47:b5:db:3c:c5:ae:14:a7:bc:
b5:8d:c7:f2:d9:a1:ec:09:48:99:dc:e0:1d:b8:88:
58:1a:66:45:a2:07:a9:8f:de:e3:4b:7b:2a:79:5a:
c3:16:b6:3d:54:d6:19:81:7a:5e:7f:d2:90:27:eb:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:21:B5:13:58:CA:D4:2B:1E:E3:E7:CA:E1:D0:52:E1:79:C3:18
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/ZXkhtRNYytQrHuPnyuHQUuF5wxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.16.0/20
37.60.16.0/21
37.143.96.0/20
178.208.224.0/19
185.3.68.0/22
IPv6:
2a00:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
81:ad:1e:34:7f:4d:60:34:19:82:a3:04:7d:58:3a:94:59:d8:
0c:c6:34:ab:9c:07:0a:b9:fe:3a:0e:5e:4c:f4:4c:69:e7:eb:
eb:c0:a1:06:51:4e:23:24:f9:20:38:db:40:a3:5e:38:b1:13:
ac:e7:71:99:a3:02:d1:a8:02:95:67:58:32:61:92:96:9c:2e:
ea:03:53:13:ed:2d:da:8f:1a:4c:72:3f:ea:75:15:e9:ab:4e:
f8:2d:eb:5f:8a:3c:71:97:94:33:a7:7e:aa:9e:8d:49:33:c3:
4a:31:20:88:0a:2d:69:1d:27:32:6a:8d:71:a4:b9:f2:15:11:
8c:99:cd:1e:5c:be:78:0f:72:50:dc:72:e4:b3:7b:b9:33:11:
7b:46:15:32:92:2d:bd:ec:36:bd:4e:27:fc:88:af:a1:e1:a5:
cc:07:21:2d:9b:0b:dd:dc:75:18:78:1e:1d:80:ce:4b:db:be:
92:7c:35:37:92:28:c3:11:fb:62:12:b4:c3:55:90:38:e7:7e:
58:de:52:f5:1f:42:40:08:24:81:d5:78:05:8c:f5:55:32:7a:
48:6a:8c:03:1d:5a:0b:ce:d4:06:78:16:3f:b3:e5:32:74:ab:
b1:6d:74:5c:b2:0c:74:f1:99:91:72:a7:c9:31:66:a1:8f:ea:
9a:55:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:48:46 2025 by rpki-client