Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/cVTuuW4zvGuAjEKGSLI2wJ1XUUE.roa
File: cVTuuW4zvGuAjEKGSLI2wJ1XUUE.roa (raw, json)
Hash identifier: O7iICUK6ORsoasU+JO6zB5zgT5vAx1UQaAZFxBIwOFA=
Subject key identifier: 71:54:EE:B9:6E:33:BC:6B:80:8C:42:86:48:B2:36:C0:9D:57:51:41
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 018E2DAC37CC0FA1F24CFAF386FB1D195BEB
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/cVTuuW4zvGuAjEKGSLI2wJ1XUUE.roa
Signing time: Mon 11 Mar 2024 13:20:44 +0000
ROA not before: Mon 11 Mar 2024 13:20:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25176
IP address blocks: 92.39.0.0/20 maxlen: 20
95.140.64.0/20 maxlen: 20
193.254.4.0/22 maxlen: 22
194.69.6.0/23 maxlen: 23
194.69.8.0/21 maxlen: 21
194.153.32.0/19 maxlen: 19
194.153.64.0/21 maxlen: 21
2a00:1718::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:ac:37:cc:0f:a1:f2:4c:fa:f3:86:fb:1d:19:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Mar 11 13:20:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7154eeb96e33bc6b808c428648b236c09d575141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:91:6f:23:b0:9f:fa:16:10:6b:20:01:9b:
ad:61:79:ed:77:7d:75:dd:3f:99:1a:1a:94:7d:22:
14:fc:47:f0:e4:c6:76:5a:6a:86:97:4e:a5:77:5d:
08:78:ee:b8:e9:01:b1:9e:b8:4b:7d:78:7c:4c:06:
0d:22:28:da:44:ad:e9:21:9d:c7:26:08:f4:de:96:
99:27:d0:3c:d1:15:ea:c9:86:53:6e:35:c8:aa:9a:
ec:49:bb:85:c1:81:85:54:5a:04:33:68:d9:0f:5b:
d4:b9:5a:5a:fd:9d:08:a8:d0:74:ee:55:f6:66:ec:
48:cd:4d:52:8e:48:5c:25:7c:d9:81:69:38:e3:67:
e1:1c:fe:5b:fb:b7:e0:25:29:02:60:70:99:38:6d:
47:9c:a0:59:e0:71:76:53:5b:54:74:37:ca:68:49:
63:13:cc:9b:0c:cd:c3:ac:57:cc:52:55:44:8d:3f:
51:9f:8f:9b:bc:7a:f7:81:cf:ba:32:d6:d7:77:62:
74:68:c0:38:08:01:3a:32:55:e4:c6:72:2f:b9:81:
bd:b8:d9:1c:87:f0:81:07:4c:31:2e:62:e4:30:0c:
2d:b8:40:fa:56:0e:09:66:6b:63:1d:f5:9b:37:30:
af:db:07:d5:63:db:d9:57:30:76:84:24:4c:05:8a:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:EE:B9:6E:33:BC:6B:80:8C:42:86:48:B2:36:C0:9D:57:51:41
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/cVTuuW4zvGuAjEKGSLI2wJ1XUUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.0.0/20
95.140.64.0/20
193.254.4.0/22
194.69.6.0-194.69.15.255
194.153.32.0-194.153.71.255
IPv6:
2a00:1718::/32
Signature Algorithm: sha256WithRSAEncryption
89:56:18:91:95:2d:6b:70:17:a1:b0:7f:32:b3:ef:55:d2:ba:
82:be:f0:53:ce:4d:98:5a:f1:17:92:b2:0a:aa:4c:4c:cf:c0:
4e:84:0b:59:31:8a:cc:51:56:50:74:a8:0a:24:4c:90:a2:e1:
bd:32:cf:b9:2e:42:e9:10:a4:5e:b3:a5:3f:0b:ab:c5:2b:35:
8f:30:3a:ad:34:8f:3e:ef:8a:a7:99:2b:50:37:c7:8c:a5:c0:
7f:84:90:4f:9c:a8:25:19:6a:e0:f9:34:bd:19:65:44:a0:1c:
85:f0:60:55:c7:91:6a:57:3d:12:e9:96:4c:5b:a9:d9:8f:d3:
82:ea:14:c4:90:c2:fb:c9:71:83:61:f5:58:dd:0f:db:ac:0e:
7e:ca:b1:a5:79:c5:c2:26:42:79:b3:13:e1:01:ea:2c:09:8b:
85:3c:b7:d0:f7:55:75:ed:94:13:2b:aa:aa:b9:ff:a6:dd:81:
24:79:f8:17:38:42:83:2e:2b:19:74:dc:6e:aa:91:67:75:1f:
a5:1c:d0:f5:c7:4a:a2:84:c0:4d:aa:25:e0:97:82:42:29:a6:
99:bc:34:32:16:08:6c:1c:28:59:d1:6a:5e:c3:88:6d:a1:36:
54:f0:9a:9c:b7:bc:e9:ac:73:d6:36:45:dc:54:75:6b:74:ed:
48:c3:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:12 2025 by rpki-client