Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/4czL6dOOQVmd7xITuxt4mepYk1w.roa
File: 4czL6dOOQVmd7xITuxt4mepYk1w.roa (raw, json)
Hash identifier: 341yKzMXNfx2b68o4chJox1QP6SEfQG3Mz9t2PXJXyE=
Subject key identifier: E1:CC:CB:E9:D3:8E:41:59:9D:EF:12:13:BB:1B:78:99:EA:58:93:5C
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 0192050BBE5D8F02398C3A74A32C34A2A707
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/4czL6dOOQVmd7xITuxt4mepYk1w.roa
Signing time: Wed 18 Sep 2024 12:11:48 +0000
ROA not before: Wed 18 Sep 2024 12:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20764
IP address blocks: 79.141.208.0/20 maxlen: 20
80.64.96.0/20 maxlen: 20
80.64.98.28/32 maxlen: 32
80.64.99.0/24 maxlen: 24
81.27.240.0/20 maxlen: 20
81.27.253.0/24 maxlen: 24
185.5.160.0/22 maxlen: 22
2a00:1c28::/29 maxlen: 29
2a00:1c28::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Sep 2024 21:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:0b:be:5d:8f:02:39:8c:3a:74:a3:2c:34:a2:a7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Sep 18 12:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1cccbe9d38e41599def1213bb1b7899ea58935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:ba:f4:7f:8e:70:a9:94:80:4a:da:77:2a:
93:9f:88:b3:38:89:62:2e:bd:38:17:ee:a5:41:d2:
5a:c9:49:35:68:f6:f6:f7:76:bc:8b:8b:65:e1:35:
5c:87:5d:68:48:39:4f:77:57:49:48:ae:dd:62:7d:
e2:42:38:be:d0:3a:5f:3f:49:c7:98:16:5a:c7:f1:
55:20:47:0c:fc:ab:72:9a:e0:cb:e1:b6:a8:4f:27:
db:46:fc:67:47:fd:bd:c8:55:3f:8e:5a:f0:d3:0a:
17:65:3e:8f:2b:5c:a7:9f:4b:4c:78:11:1b:43:d7:
7c:a1:a2:cf:d4:78:90:eb:a0:20:14:33:6f:e1:5b:
64:e8:84:d0:6d:8a:d7:a9:3b:2b:85:aa:78:0b:c9:
65:fe:46:36:50:6a:7a:66:3e:d7:25:27:2c:8e:f1:
1b:34:c3:3e:64:e8:c3:07:b0:4e:20:45:9d:77:43:
01:0e:89:98:42:f4:07:d2:58:65:cd:d9:a8:c4:e0:
a4:cc:8d:e6:27:ee:a9:37:60:ba:82:7f:c6:a3:c4:
9e:e5:f4:02:59:9c:35:5a:6c:51:1f:02:57:08:00:
35:87:d6:24:bc:d6:c2:27:39:ea:28:02:45:e2:a3:
40:6a:e8:94:ef:14:86:bf:c2:ef:28:1a:c3:d9:9b:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:CB:E9:D3:8E:41:59:9D:EF:12:13:BB:1B:78:99:EA:58:93:5C
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/4czL6dOOQVmd7xITuxt4mepYk1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.208.0/20
80.64.96.0/20
81.27.240.0/20
185.5.160.0/22
IPv6:
2a00:1c28::/29
Signature Algorithm: sha256WithRSAEncryption
a8:2c:d9:81:71:bf:b0:35:c6:e3:46:ed:47:94:85:39:dd:aa:
e2:4c:fc:14:29:8a:40:d6:a5:80:77:2f:89:b5:57:01:ca:76:
b5:0d:ae:34:79:aa:da:87:b1:e3:54:22:52:e4:f8:7b:c9:50:
b5:52:26:6a:fd:42:eb:7a:07:e7:4c:1d:fd:ea:2a:e7:10:98:
65:52:b9:70:cb:ca:60:cb:b0:e4:7d:d5:f2:4e:3d:ec:a3:aa:
b4:13:02:29:48:01:09:2d:ec:22:c4:1e:9c:52:6b:79:7a:e0:
89:64:03:09:05:64:08:73:76:ad:84:22:90:2c:5e:26:e8:6e:
13:2c:13:5a:37:b7:79:ab:c0:e4:14:f9:6e:7d:78:5d:dc:9e:
dd:9a:f3:8e:cf:46:5d:3d:ac:32:a5:eb:c3:82:3c:c3:45:60:
ec:2b:c5:ab:b5:3a:56:62:9b:2e:3c:a2:ce:aa:84:b8:46:bc:
ef:9f:c2:65:61:47:fd:5c:34:4d:b3:47:26:09:5a:21:bc:69:
88:02:21:f9:8b:2a:fb:d9:40:81:51:73:2d:79:f8:c1:99:8e:
1e:f2:69:29:a8:dd:25:3b:da:17:dd:e7:05:95:b0:b4:07:93:
2c:20:df:8a:48:a2:81:e5:8b:87:e7:24:b6:c0:35:46:be:50:
79:f0:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:06:56 2025 by rpki-client