Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/EQykPnpfewr1b15l-hwk9xTdlMw.roa
File: EQykPnpfewr1b15l-hwk9xTdlMw.roa (raw, json)
Hash identifier: YasKTltnNGPe2utrui5JMNFOct7fWRZpI6aF37DIbJ0=
Subject key identifier: 11:0C:A4:3E:7A:5F:7B:0A:F5:6F:5E:65:FA:1C:24:F7:14:DD:94:CC
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01942444C66B0E0A7D432BFF3E90AFCE972D
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/EQykPnpfewr1b15l-hwk9xTdlMw.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 378
IP address blocks: 132.64.0.0/15 maxlen: 15
132.64.0.0/16 maxlen: 16
132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.3.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.6.0/24 maxlen: 24
132.64.7.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.17.0/24 maxlen: 24
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.45.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
132.65.0.0/16 maxlen: 16
192.114.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Feb 2025 13:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c6:6b:0e:0a:7d:43:2b:ff:3e:90:af:ce:97:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110ca43e7a5f7b0af56f5e65fa1c24f714dd94cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:41:53:bf:bf:54:ad:a8:ba:db:de:e6:55:
b0:fb:31:c1:52:d4:ab:70:90:46:8c:4c:62:3a:26:
5e:e1:59:cf:e5:75:d3:73:cd:59:e3:e5:c0:1a:30:
99:ab:95:78:2e:c6:03:c3:de:91:3f:c8:7e:55:59:
f0:26:cf:ab:24:8d:e9:f8:bc:cd:52:ec:58:2c:d2:
06:0e:e4:23:1c:bf:d0:f8:35:6b:6a:46:7f:5c:72:
86:3a:30:ac:5f:c4:ab:65:e2:72:b2:fe:71:d1:e4:
87:90:eb:a2:dd:db:70:44:01:0e:87:c8:28:4e:46:
6f:42:c0:52:ff:04:25:d5:22:20:c9:23:d0:d5:28:
d1:81:a4:67:9d:f0:d5:d5:ae:be:3a:f6:7b:13:5b:
ed:53:0e:b5:83:8c:9b:b7:2e:da:b1:d1:ed:7b:59:
a1:85:06:50:ed:05:db:22:18:d0:37:e1:29:84:9d:
6e:4e:48:bb:4b:f3:ad:4e:52:d3:17:0b:ba:3b:fe:
21:7a:64:97:ec:4c:3c:56:76:50:54:f4:3e:9b:18:
8e:31:35:8f:be:3c:39:99:53:17:fa:d4:e1:78:d0:
61:63:9c:11:9b:ce:b7:5f:74:f8:06:0c:4c:06:ca:
6c:a4:a0:98:23:f9:04:b1:e5:b3:74:92:43:84:16:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:A4:3E:7A:5F:7B:0A:F5:6F:5E:65:FA:1C:24:F7:14:DD:94:CC
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/EQykPnpfewr1b15l-hwk9xTdlMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.0.0/15
192.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
06:9f:9b:de:71:40:ea:a1:04:c7:eb:ee:ed:d0:2b:4c:98:bf:
51:b4:bb:96:1e:08:46:9a:c7:7e:21:e5:bf:79:8b:65:ae:10:
e1:3c:c7:35:6b:a7:7e:85:b5:cf:aa:8d:ca:54:d6:db:c2:57:
07:11:59:f8:05:b4:41:17:72:ee:7f:5c:44:34:ac:e0:3d:c2:
fe:bb:d0:4d:c6:ef:d8:5e:9b:7a:f5:b5:6f:94:14:84:37:7e:
a8:33:66:bc:54:3e:a3:49:80:ff:c2:09:ad:75:07:cb:ed:de:
1e:0b:ce:11:0e:13:eb:1f:8c:5c:b1:f8:97:ed:c8:86:ea:ac:
d7:e6:41:f0:e1:6d:cc:fc:51:a8:e8:6f:1d:a6:47:5f:c7:43:
03:e9:52:b6:e6:c9:7e:90:e0:0e:52:dd:78:7f:b5:46:85:5e:
83:3d:14:12:30:07:8f:83:40:f3:8d:37:9c:16:fb:51:8d:05:
90:ef:35:77:7d:f2:77:ad:d2:51:83:92:39:55:4a:bf:cf:2f:
62:25:ee:b5:25:26:fc:54:cc:0d:f2:17:fb:37:3e:2b:fa:57:
81:e1:e7:ca:07:4e:99:41:7e:42:56:98:8f:a5:32:10:d7:30:
be:14:c5:cf:a4:36:ad:ad:1d:4b:33:7c:62:4c:86:f8:f6:ba:
dc:6d:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:10 2025 by rpki-client