Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/CJrEM8sWacIjQ5ezfTFqoPx9OSw.roa
File: CJrEM8sWacIjQ5ezfTFqoPx9OSw.roa (raw, json)
Hash identifier: M+afDb3EwV8bMHbwkL9BRs0GvIEewdCXj572/PBGCLg=
Subject key identifier: 08:9A:C4:33:CB:16:69:C2:23:43:97:B3:7D:31:6A:A0:FC:7D:39:2C
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 018E6AD767565B7C2D3CDE6D334F670D5F99
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/CJrEM8sWacIjQ5ezfTFqoPx9OSw.roa
Signing time: Sat 23 Mar 2024 10:24:45 +0000
ROA not before: Sat 23 Mar 2024 10:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59742
IP address blocks: 87.243.69.0/24 maxlen: 24
185.73.236.0/22 maxlen: 22
2a03:46a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6a:d7:67:56:5b:7c:2d:3c:de:6d:33:4f:67:0d:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Mar 23 10:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=089ac433cb1669c2234397b37d316aa0fc7d392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:0b:b4:2a:76:55:43:12:84:27:61:3d:d9:
0d:1b:c2:50:16:b4:c2:e0:b1:e6:ff:6f:c7:f2:ec:
3c:a1:e4:5f:1b:f3:72:ec:7b:53:1c:36:7b:17:50:
92:29:02:7b:76:59:50:86:d2:1e:0f:5f:30:0e:07:
0a:d9:df:e9:10:ed:8a:0d:f8:50:55:1a:b2:63:08:
8d:4b:b8:af:ca:f0:f7:93:f4:5a:75:8c:a3:e7:c7:
52:f5:75:de:5f:b7:24:7a:6f:24:cc:cf:6c:a3:2e:
a9:f6:5f:fa:de:bd:9a:15:df:c4:f3:b6:4e:10:96:
84:1e:ae:e4:b5:4e:e5:e2:5d:aa:7a:ea:fa:d8:09:
d3:e4:2f:8b:31:53:ec:ec:d5:c8:bd:e5:4b:f4:76:
0c:79:9f:1f:f3:f0:0b:d4:a8:eb:5e:b8:52:5c:c6:
e9:8d:62:e5:c3:3a:09:0e:e2:7c:26:10:4d:45:06:
5d:35:31:2d:6f:e2:ea:03:ce:7b:d7:5e:38:16:41:
c7:0d:93:2a:43:b0:13:f4:77:9b:ff:c3:fe:9d:b7:
5c:aa:cf:f0:57:66:d6:f5:8b:da:a8:4a:32:b4:e2:
b2:6f:54:0b:37:dc:79:76:7d:7c:d8:40:78:a8:5d:
c8:e1:b2:71:f2:5c:f5:a2:c0:2e:d0:f2:64:da:b2:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:C4:33:CB:16:69:C2:23:43:97:B3:7D:31:6A:A0:FC:7D:39:2C
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/CJrEM8sWacIjQ5ezfTFqoPx9OSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.243.69.0/24
185.73.236.0/22
IPv6:
2a03:46a0::/32
Signature Algorithm: sha256WithRSAEncryption
db:43:84:22:08:8b:d7:23:7c:17:47:9c:9e:f8:bc:17:d5:af:
e5:09:10:e1:63:88:8e:79:84:b0:80:a1:b1:93:57:33:f6:db:
b8:63:87:c2:9d:f2:34:94:dd:0b:00:b2:c3:5d:64:e9:d2:d9:
3d:f7:f4:4c:0d:e0:68:c3:34:5e:e8:96:f0:ef:9d:d2:df:e5:
47:8c:ca:7d:91:1a:21:fd:03:ec:61:71:cf:a0:11:ce:eb:18:
3a:f9:dd:59:37:72:b7:da:27:ab:16:47:18:4b:58:5e:f6:a8:
fd:21:67:36:35:0d:7f:e8:67:11:a8:f5:7a:04:20:53:1b:c8:
0b:a4:46:de:08:7d:82:27:50:46:d4:3c:0e:6a:a0:25:aa:78:
a5:72:3e:b0:cd:02:60:64:76:ee:12:90:54:79:4e:08:23:94:
fe:2e:b9:51:54:0f:8f:df:41:b2:d7:e9:9b:eb:3f:3e:c0:97:
78:b9:eb:f6:83:93:af:88:c6:71:7c:07:d2:06:a4:7c:3b:8b:
fe:3e:9f:81:ce:22:75:ac:6e:37:7d:45:89:63:86:e8:79:ee:
31:4b:9f:8b:2f:98:00:05:b7:cf:b1:6c:62:ef:36:c5:eb:f1:
7d:a1:25:fb:62:ae:d8:d8:be:c4:f8:4d:9f:a6:3d:37:19:67:
03:71:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:48 2025 by rpki-client