Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EPcnn590MHhr1JLd9pXVb75a1B8.roa
File: EPcnn590MHhr1JLd9pXVb75a1B8.roa (raw, json)
Hash identifier: Kf7xscCB9I5yIDhuYs5e2HP4EPwWgx8uvxMjH+HyaO8=
Subject key identifier: 10:F7:27:9F:9F:74:30:78:6B:D4:92:DD:F6:95:D5:6F:BE:5A:D4:1F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193E41BB19C99AB5A3E272D79DF76BBE00B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EPcnn590MHhr1JLd9pXVb75a1B8.roa
Signing time: Fri 20 Dec 2024 12:47:20 +0000
ROA not before: Fri 20 Dec 2024 12:47:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:1b:b1:9c:99:ab:5a:3e:27:2d:79:df:76:bb:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 20 12:47:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10f7279f9f7430786bd492ddf695d56fbe5ad41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:4a:b8:80:ab:90:cb:ef:4d:ae:74:66:b3:
a0:84:77:83:f0:38:2c:12:05:fc:52:7a:f8:02:a4:
7c:52:6e:0a:43:0f:c5:24:63:a6:db:3e:0f:08:8d:
27:2d:ab:1e:c1:25:9b:6c:8e:56:d0:5f:32:13:0d:
48:8f:fb:86:d6:69:4d:31:df:bd:bf:d2:01:36:28:
45:c9:0a:87:25:ec:ff:fb:b1:f0:5b:56:2d:a2:e8:
02:e6:0c:4d:76:3e:72:16:22:b7:88:47:02:d4:9a:
57:46:64:46:bb:70:06:9f:75:20:48:0e:40:ca:3f:
d8:f7:ac:68:52:c2:a6:2c:43:2f:9a:7c:90:ec:23:
ec:f1:89:ce:74:3e:51:2d:a4:dc:ef:e9:80:39:0a:
b1:13:0e:85:e3:ee:5c:99:11:ba:47:8d:86:2c:f1:
28:62:b1:08:aa:c8:03:dc:76:3c:8a:7c:d8:e1:47:
84:7b:00:52:97:61:f7:ce:72:2f:eb:44:77:ed:8d:
c4:ca:cf:82:cf:b0:0f:53:09:5b:e6:1a:67:68:f0:
72:21:a2:52:a5:ac:8b:e3:47:00:d6:04:83:34:23:
16:ef:0c:ae:d1:d3:7e:70:7e:86:7e:7d:99:7d:79:
57:66:69:ae:e1:38:94:73:7d:9e:8c:21:ee:44:fa:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:27:9F:9F:74:30:78:6B:D4:92:DD:F6:95:D5:6F:BE:5A:D4:1F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EPcnn590MHhr1JLd9pXVb75a1B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/22
93.88.200.0/21
94.177.122.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
30:28:f4:f3:6f:22:60:93:e8:ae:28:98:4f:b9:05:53:40:f1:
31:82:99:ca:1b:f6:3e:d7:d8:a4:25:0f:ae:d8:b8:f7:67:3c:
05:b5:db:ee:5e:51:b9:ad:f1:f1:d5:da:8a:34:e0:d8:cf:af:
29:fd:87:a8:72:78:7b:48:ba:c0:76:f2:a7:03:0b:67:d8:77:
23:2a:4d:52:87:d4:5b:7f:a5:93:c1:a5:44:6f:9f:f3:de:63:
f3:4b:99:06:4d:70:15:01:bb:e1:54:61:b7:a9:f4:4f:24:75:
17:ba:62:3e:04:0d:31:5b:7a:36:9e:11:6f:e5:75:fe:8f:3f:
88:73:63:6c:eb:41:61:55:19:1d:8d:70:15:33:84:ce:dd:d2:
d3:4a:e1:08:53:8d:a2:90:4b:d9:33:0f:19:5d:75:48:c1:18:
64:8e:55:0c:92:a0:f1:f2:99:55:16:2c:88:f0:81:72:94:b5:
7d:36:a1:67:09:09:9e:c3:13:68:4f:ad:df:69:6d:9a:a2:c0:
35:9c:39:89:a6:93:02:f7:6c:66:53:29:cb:31:a8:ba:7b:28:
8f:85:ce:77:0e:6a:7c:2d:23:16:60:06:fc:ed:0b:4e:00:62:
da:a1:c0:42:38:fd:66:34:fc:b6:dc:7e:63:d3:2c:55:7b:38:
3c:db:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:52 2025 by rpki-client