Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/5ejonrCg5-INYpw0WHzgc1Resdw.roa
File: 5ejonrCg5-INYpw0WHzgc1Resdw.roa (raw, json)
Hash identifier: OfIo/KdfOHPv0dRD9njTr67dHkTOaskai4VYr1My25s=
Subject key identifier: E5:E8:E8:9E:B0:A0:E7:E2:0D:62:9C:34:58:7C:E0:73:54:5E:B1:DC
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0193B4CA6218DF723E45B902E6ECD40E4A46
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/5ejonrCg5-INYpw0WHzgc1Resdw.roa
Signing time: Wed 11 Dec 2024 08:16:22 +0000
ROA not before: Wed 11 Dec 2024 08:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198726
IP address blocks: 193.110.40.0/21 maxlen: 21
194.4.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:ca:62:18:df:72:3e:45:b9:02:e6:ec:d4:0e:4a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Dec 11 08:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e8e89eb0a0e7e20d629c34587ce073545eb1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:cb:7a:99:d1:88:5f:d3:4e:8f:16:7d:0b:
a1:36:5c:33:c3:f3:ea:3c:26:53:2c:27:96:4f:ec:
76:a8:34:e9:9d:6b:21:ed:f7:c8:5c:21:37:f7:46:
1c:df:45:ca:17:7a:5f:46:58:08:11:fe:73:8f:55:
3f:52:f1:0a:ae:8d:d6:d5:06:9a:98:6c:74:7d:3d:
fd:0b:3f:db:f9:0d:ef:34:39:a2:03:b6:83:b0:60:
88:ba:0b:d9:e5:6c:c0:bd:ac:8a:97:98:17:d1:a0:
f3:a1:57:e9:df:b5:77:84:ad:1a:b0:58:fb:bd:76:
15:bc:43:61:27:9e:71:60:5b:2e:76:33:a8:1f:36:
d4:5c:69:fb:dc:2b:37:40:5c:89:94:33:49:28:3d:
04:61:81:90:86:bf:6a:5a:6e:ee:12:92:f0:dc:af:
bb:a0:8c:54:ee:37:05:f6:55:0b:1c:b0:f0:48:03:
3b:f7:0a:d6:80:6f:4f:3e:f8:f1:7f:82:f5:7d:e5:
59:61:c7:55:82:ee:00:ca:95:6a:e4:46:de:21:72:
d4:3b:d8:34:62:9f:39:9f:c8:bc:d4:af:6f:51:64:
ff:47:2b:a9:e1:ee:a6:dd:d1:82:aa:75:61:8e:46:
53:3b:65:9a:3a:22:67:14:88:da:c4:ed:3c:72:80:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:E8:9E:B0:A0:E7:E2:0D:62:9C:34:58:7C:E0:73:54:5E:B1:DC
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/5ejonrCg5-INYpw0WHzgc1Resdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.40.0/21
194.4.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:0e:27:98:6d:02:d1:ae:86:3e:2d:25:eb:de:c7:a7:c3:77:
47:02:50:dd:e5:34:af:48:b5:da:9c:6b:42:55:5d:40:23:2e:
9f:2a:6e:ca:4c:7d:97:e1:99:43:39:71:ce:96:77:52:f2:00:
16:11:be:db:40:0e:ac:54:ff:33:37:d0:63:d3:f5:ef:d7:f7:
3e:e2:f2:ff:97:c7:7d:16:c2:37:89:04:43:51:e5:71:d6:81:
26:60:e5:35:79:a6:36:a7:55:fe:47:f4:a3:d6:c8:e1:b8:25:
29:be:77:0d:45:12:74:24:4b:09:63:78:31:71:a6:11:20:50:
ac:4e:77:99:fd:4f:58:d1:a6:38:96:9e:aa:c5:4e:86:8f:69:
92:2b:4b:0f:6d:d6:92:6c:c0:92:ee:1f:92:ed:20:d0:bf:9d:
e7:0a:18:3c:d6:64:da:08:d0:e6:ea:d2:3a:34:54:eb:f5:3b:
7e:79:ae:22:e9:61:ec:b0:d7:48:fb:f1:69:17:c5:69:87:41:
bd:06:90:1e:bf:38:ff:37:af:03:bf:50:c9:63:ea:55:5b:48:
fb:65:14:85:78:d9:5b:b0:1c:c5:0a:f0:44:fa:fc:57:16:93:
c2:23:06:e9:9e:0c:1a:9b:dc:a5:c9:e4:39:3d:4e:35:73:87:
a8:bc:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:57:25 2025 by rpki-client