Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/4z3X92Zd4j_z6VA2LBa9JJ4KjEA.roa
File: 4z3X92Zd4j_z6VA2LBa9JJ4KjEA.roa (raw, json)
Hash identifier: V9VxQCrMG09VI3JJFnlUhILCQGxNk6H9mGVH+jqZLHk=
Subject key identifier: E3:3D:D7:F7:66:5D:E2:3F:F3:E9:50:36:2C:16:BD:24:9E:0A:8C:40
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194228D183F2E2ECE827307B5E472A2B4ED
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/4z3X92Zd4j_z6VA2LBa9JJ4KjEA.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47626
IP address blocks: 5.180.240.0/22 maxlen: 22
78.24.100.0/22 maxlen: 22
91.208.35.0/24 maxlen: 24
91.222.120.0/22 maxlen: 24
128.0.92.0/24 maxlen: 24
128.0.94.0/24 maxlen: 24
176.96.189.0/24 maxlen: 24
176.96.190.0/23 maxlen: 24
188.93.64.0/22 maxlen: 22
193.7.216.0/22 maxlen: 22
213.241.199.0/24 maxlen: 24
2a05:9c00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 29 Jan 2025 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:18:3f:2e:2e:ce:82:73:07:b5:e4:72:a2:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e33dd7f7665de23ff3e950362c16bd249e0a8c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:61:02:45:58:68:f7:61:b9:42:be:28:a1:
a3:d8:a2:08:c6:ec:4b:6e:8c:07:cb:ad:c6:e1:5f:
f1:b8:b6:31:86:c9:ae:e0:92:59:9d:6c:d0:53:a9:
b2:65:85:52:c2:e2:45:cb:3d:0b:4a:56:3f:49:57:
bc:96:02:7e:07:ee:b3:25:e1:59:bb:9e:5e:5b:25:
04:f8:21:0e:46:9f:c3:c0:93:e1:c7:e4:a2:41:16:
1d:c2:12:39:97:80:89:2e:51:21:1d:92:1f:9e:66:
81:11:fd:8f:c1:fc:c9:e9:1e:d6:17:e3:56:e7:d1:
75:ce:76:29:73:91:14:b0:76:99:df:84:7d:b9:6f:
c2:1f:a5:99:15:89:a3:63:f5:0f:70:75:d1:14:c2:
88:5e:2c:7f:67:bf:7b:fa:14:e5:e8:c6:ee:c8:5f:
08:86:71:a8:6a:c7:6c:45:94:4e:14:da:62:bf:f9:
b4:5b:40:d1:60:43:44:72:86:5e:f3:71:41:de:34:
a5:f3:53:65:39:25:ed:ec:46:e4:63:24:36:f4:e6:
25:a3:1f:3d:21:ee:08:4d:55:dd:b0:8c:06:f9:aa:
ad:1a:47:d7:e7:c6:27:13:09:80:d1:a3:41:57:01:
e9:01:fc:3b:ab:6a:8e:06:05:9e:ed:7c:a5:e1:76:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3D:D7:F7:66:5D:E2:3F:F3:E9:50:36:2C:16:BD:24:9E:0A:8C:40
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/4z3X92Zd4j_z6VA2LBa9JJ4KjEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.240.0/22
78.24.100.0/22
91.208.35.0/24
91.222.120.0/22
128.0.92.0/24
128.0.94.0/24
176.96.189.0-176.96.191.255
188.93.64.0/22
193.7.216.0/22
213.241.199.0/24
IPv6:
2a05:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
93:1d:ea:0f:f9:b6:e3:94:96:f5:1b:41:e5:9d:88:02:9b:b0:
13:1f:31:2f:7b:8a:20:22:4a:5f:0a:06:76:3d:e2:95:a1:9e:
b5:e1:50:5f:96:ec:22:96:94:8c:2f:64:bb:06:d0:dc:d2:ef:
aa:0b:f8:44:63:66:c7:47:52:75:39:0f:d6:bb:cc:3c:5d:28:
4e:b7:05:0e:fa:16:75:1f:eb:c1:49:41:27:bd:3b:0f:10:4f:
06:b4:21:c3:3a:92:82:2c:6f:35:b3:a3:fe:9d:86:9e:0d:a6:
30:78:a5:44:06:ac:93:2f:7d:75:ee:c6:d6:ab:83:33:d0:cf:
2b:67:d5:f8:31:6b:86:ba:03:d6:11:cc:f9:db:aa:31:1c:41:
3a:de:89:cd:4e:74:7a:2e:24:b1:b4:ba:44:d4:b8:24:47:42:
8b:1d:39:67:a8:55:5b:8a:48:e4:a9:38:e8:b8:b9:ca:e7:b6:
02:68:fa:8b:dd:72:6e:6c:99:91:f4:d3:b8:f8:22:6f:87:7e:
ce:df:f6:08:56:7a:15:0a:c3:55:c4:47:e8:82:90:14:b1:a1:
aa:ac:e5:e0:df:f8:c7:31:84:cd:73:2b:1a:4e:c4:aa:52:4c:
4a:57:e9:d7:60:0d:7f:b1:93:76:37:c8:a4:8f:01:b3:c4:33:
14:e5:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:12 2025 by rpki-client