Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/7KT780szoTvsM-7oxFL__Kj_gGw.roa
File: 7KT780szoTvsM-7oxFL__Kj_gGw.roa (raw, json)
Hash identifier: m0xfRlw5obe/IR2MGam3wjXl1kyD6Bf9oLTCwyDtJMM=
Subject key identifier: EC:A4:FB:F3:4B:33:A1:3B:EC:33:EE:E8:C4:52:FF:FC:A8:FF:80:6C
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 01931A5F6C2589551BE69CBBDA15CD848A90
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/7KT780szoTvsM-7oxFL__Kj_gGw.roa
Signing time: Mon 11 Nov 2024 08:38:01 +0000
ROA not before: Mon 11 Nov 2024 08:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209236
IP address blocks: 171.25.128.0/21 maxlen: 21
193.221.28.0/24 maxlen: 24
193.221.36.0/24 maxlen: 24
193.221.37.0/24 maxlen: 24
193.221.38.0/24 maxlen: 24
193.221.47.0/24 maxlen: 24
193.221.52.0/24 maxlen: 24
193.221.53.0/24 maxlen: 24
193.221.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 12:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:5f:6c:25:89:55:1b:e6:9c:bb:da:15:cd:84:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Nov 11 08:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eca4fbf34b33a13bec33eee8c452fffca8ff806c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:ca:eb:a1:2e:00:7c:9e:7e:c1:a3:a4:c8:
f2:ae:32:65:ec:fc:65:18:8e:27:06:62:da:19:3a:
d6:74:1d:81:d0:13:ac:ef:7f:19:cf:e9:1b:dd:e2:
d3:86:97:8b:4a:16:7a:d5:73:98:ce:f2:14:f4:90:
e4:31:55:23:ab:ae:e3:4a:04:93:b4:82:02:27:14:
10:c7:31:54:67:21:fc:7e:b8:db:2b:36:24:ac:b4:
33:c5:01:d9:b6:ac:cd:3e:20:88:18:16:44:16:a8:
2c:7f:48:cf:ab:78:66:cf:c2:d2:27:a2:2d:48:20:
4b:66:0f:81:c4:3b:df:ec:7f:d4:1b:f8:24:88:c1:
84:1d:dd:be:0c:60:ac:75:bc:8c:5e:bb:5b:f9:dc:
07:63:fc:72:09:ea:22:c4:00:02:2d:42:ba:d0:2a:
35:40:dd:0d:9c:78:00:4c:d6:d8:4b:a5:0a:64:40:
25:3d:d3:57:63:e6:17:49:62:d8:a9:db:71:90:17:
d0:af:57:02:89:79:38:68:82:7c:93:68:99:98:61:
86:f7:f4:42:fc:54:88:5b:0b:11:6d:a8:94:d1:a9:
aa:1f:cd:ba:14:75:a2:ca:0b:91:70:e9:e9:50:2c:
7b:49:79:fc:06:c1:d2:ef:8e:0c:8f:58:27:81:3f:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:FB:F3:4B:33:A1:3B:EC:33:EE:E8:C4:52:FF:FC:A8:FF:80:6C
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/7KT780szoTvsM-7oxFL__Kj_gGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.128.0/21
193.221.28.0/24
193.221.36.0-193.221.38.255
193.221.47.0/24
193.221.52.0/23
193.221.59.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4f:37:a4:c9:6a:ca:19:80:95:cf:f7:73:e7:41:0a:26:05:
21:d7:17:36:3a:d5:d8:1d:fc:0e:ba:6d:7b:f5:2b:8a:da:5c:
a1:fc:78:a3:19:3e:25:91:52:0a:d3:2f:36:0a:43:5c:7a:4f:
35:34:f6:c2:a3:a5:2d:3a:f1:1e:a3:3a:23:10:92:b7:cb:c4:
ee:0d:fd:c3:e5:5d:38:22:51:67:eb:48:58:8c:1c:cd:82:ff:
c4:9d:19:e0:80:5e:e9:b5:1f:57:4d:43:29:89:15:7f:4d:57:
75:cc:30:5f:2e:5e:19:4d:f6:fd:bb:9c:ee:b0:6b:2e:e0:cf:
c0:6f:d7:cc:b6:74:4d:a7:d8:37:ba:a7:33:69:4c:0e:0e:6e:
59:0e:62:a7:5b:f1:9d:81:07:32:2f:eb:5d:71:b6:21:12:61:
32:0d:3d:1d:85:4b:f8:30:e2:c9:fd:e6:6d:35:4d:0e:6f:11:
81:4f:57:50:4f:9a:d9:f9:2f:ff:0d:97:91:16:7a:bf:5a:9b:
23:c4:a0:ab:1b:f3:0e:ec:d1:57:72:9a:27:7f:43:42:b2:09:
f1:2f:2e:59:c4:91:d8:7e:62:ab:57:57:d7:7b:3e:c3:f2:7f:
34:6f:d2:35:3f:ec:04:90:73:63:0e:21:14:54:da:cb:04:9d:
b8:3c:48:c1
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZMaX2wliVUb5py72hXNhIqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjQxMTExMDgzODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E0ZmJmMzRiMzNhMTNiZWMzM2VlZThjNDUyZmZmY2E4ZmY4MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPTK66EuAHyefsGjpMjyrjJl7Pxl
GI4nBmLaGTrWdB2B0BOs738Zz+kb3eLThpeLShZ61XOYzvIU9JDkMVUjq67jSgST
tIICJxQQxzFUZyH8frjbKzYkrLQzxQHZtqzNPiCIGBZEFqgsf0jPq3hmz8LSJ6It
SCBLZg+BxDvf7H/UG/gkiMGEHd2+DGCsdbyMXrtb+dwHY/xyCeoixAACLUK60Co1
QN0NnHgATNbYS6UKZEAlPdNXY+YXSWLYqdtxkBfQr1cCiXk4aIJ8k2iZmGGG9/RC
/FSIWwsRbaiU0amqH826FHWiyguRcOnpUCx7SXn8BsHS744Mj1gngT+y9QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOyk+/NLM6E77DPu6MRS//yo/4BsMB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvN0tUNzgwc3pvVHZzTS03b3hGTF9fS2pfZ0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQDqxmAAwQA
wd0cMAwDBALB3SQDBADB3SYDBADB3S8DBAHB3TQDBADB3TswDQYJKoZIhvcNAQEL
BQADggEBAHlPN6TJasoZgJXP93PnQQomBSHXFzY61dgd/A66bXv1K4raXKH8eKMZ
PiWRUgrTLzYKQ1x6TzU09sKjpS068R6jOiMQkrfLxO4N/cPlXTgiUWfrSFiMHM2C
/8SdGeCAXum1H1dNQymJFX9NV3XMMF8uXhlN9v27nO6way7gz8Bv18y2dE2n2De6
pzNpTA4OblkOYqdb8Z2BBzIv611xtiESYTINPR2FS/gw4sn95m01TQ5vEYFPV1BP
mtn5L/8Nl5EWer9amyPEoKsb8w7s0Vdymid/Q0KyCfEvLlnEkdh+YqtXV9d7PsPy
fzRv0jU/7ASQc2MOIRRU2ssEnbg8SME=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:29 2025 by rpki-client