Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/dUOfFymPMNiF4054pX3U6_jl2VA.roa
File: dUOfFymPMNiF4054pX3U6_jl2VA.roa (raw, json)
Hash identifier: 4wvLopaXZX0C9xLfJiqS+bSo0yEdAiozfGlB1XT1CKw=
Subject key identifier: 75:43:9F:17:29:8F:30:D8:85:E3:4E:78:A5:7D:D4:EB:F8:E5:D9:50
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0193D4421C1716759DE4CA6F005496AB8DD9
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/dUOfFymPMNiF4054pX3U6_jl2VA.roa
Signing time: Tue 17 Dec 2024 10:55:22 +0000
ROA not before: Tue 17 Dec 2024 10:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51964
IP address blocks: 57.7.0.0/16 maxlen: 24
57.21.0.0/16 maxlen: 24
57.35.0.0/16 maxlen: 24
57.66.0.0/15 maxlen: 32
57.68.0.0/15 maxlen: 32
57.70.0.0/16 maxlen: 32
57.72.0.0/15 maxlen: 32
57.74.0.0/16 maxlen: 32
57.76.0.0/14 maxlen: 32
57.80.0.0/14 maxlen: 32
57.86.0.0/15 maxlen: 32
57.90.0.0/16 maxlen: 32
57.92.0.0/16 maxlen: 24
57.96.0.0/15 maxlen: 24
57.98.0.0/16 maxlen: 24
57.100.0.0/16 maxlen: 24
57.194.0.0/15 maxlen: 24
57.197.0.0/16 maxlen: 24
57.199.0.0/16 maxlen: 24
57.200.0.0/16 maxlen: 24
57.202.0.0/15 maxlen: 24
57.205.0.0/16 maxlen: 24
57.207.0.0/16 maxlen: 24
57.208.0.0/12 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:42:1c:17:16:75:9d:e4:ca:6f:00:54:96:ab:8d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Dec 17 10:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75439f17298f30d885e34e78a57dd4ebf8e5d950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:75:88:54:9a:a6:ad:9b:e7:50:60:9c:fe:
c0:a7:02:88:04:46:6c:ad:a4:6f:9b:c2:30:ed:fa:
5d:d6:2d:07:30:42:d1:e2:64:c1:83:f2:68:75:27:
bf:6d:2d:f9:48:dc:13:d6:98:20:c6:a1:9c:2c:6a:
84:c1:25:c9:93:0c:a9:7f:3c:bd:c7:3f:89:aa:74:
71:e7:58:3f:57:3f:fa:4e:70:fa:de:ca:4f:d9:f7:
4c:62:e2:69:15:44:d4:cf:12:42:2c:81:40:23:00:
bd:5f:93:62:93:ea:d9:a9:d7:51:d9:20:60:66:92:
e2:9e:36:73:a1:44:78:41:61:bd:a2:83:34:e1:74:
f2:75:cc:e0:e1:50:7a:2c:84:ad:51:05:4f:b2:3f:
bc:9f:54:c3:1f:5e:07:a2:77:ac:11:4e:46:0b:de:
3b:a4:44:91:de:49:0e:ca:99:9c:69:2c:12:53:f1:
03:3a:d4:49:0e:3a:29:1b:c1:9b:c0:a9:09:a8:80:
06:6f:85:2e:81:18:11:02:df:98:b3:63:56:0f:b6:
82:af:df:97:89:57:44:e7:a5:7d:3b:e3:98:61:69:
4e:74:59:ce:34:7e:19:ab:d9:2f:b3:67:a2:3d:dc:
f6:7c:9f:54:f9:b1:d7:9b:d7:5b:25:b4:61:9a:3d:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:9F:17:29:8F:30:D8:85:E3:4E:78:A5:7D:D4:EB:F8:E5:D9:50
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/dUOfFymPMNiF4054pX3U6_jl2VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.7.0.0/16
57.21.0.0/16
57.35.0.0/16
57.66.0.0-57.70.255.255
57.72.0.0-57.74.255.255
57.76.0.0-57.83.255.255
57.86.0.0/15
57.90.0.0/16
57.92.0.0/16
57.96.0.0-57.98.255.255
57.100.0.0/16
57.194.0.0/15
57.197.0.0/16
57.199.0.0-57.200.255.255
57.202.0.0/15
57.205.0.0/16
57.207.0.0-57.223.255.255
Signature Algorithm: sha256WithRSAEncryption
0d:d9:bd:80:12:ad:4c:a1:77:a5:89:d7:9d:67:30:54:5f:c5:
a7:86:ba:15:b7:ff:dc:6b:d4:2d:05:53:e4:61:fc:05:29:01:
89:f4:e6:74:0e:59:4a:9f:98:21:73:90:48:ef:89:72:e9:0e:
22:1b:18:99:c2:0c:0b:71:7e:b5:43:53:ce:35:e5:bb:eb:4e:
4a:d4:0d:11:71:96:60:7b:17:8c:f3:e1:4b:13:fb:36:2f:72:
0d:16:22:3f:20:d1:b6:1f:85:fb:74:60:85:5f:ae:d4:dc:94:
c0:39:22:43:e7:d0:4e:86:46:cd:32:7a:e2:13:1d:7e:23:e0:
79:25:7a:7e:31:94:a2:b0:ca:59:46:cb:23:f4:cd:d2:f6:a5:
83:d5:f0:e9:b7:4f:3b:be:6e:49:e4:13:ba:99:f4:dc:9c:d9:
11:25:0e:75:61:6c:20:d1:4e:ba:f9:a2:6f:aa:e0:8c:34:5e:
42:21:92:ed:a5:6a:41:7c:61:6c:d7:80:17:30:d7:6c:f4:27:
6d:3b:90:d9:35:72:75:54:dc:1f:de:d0:ec:b4:6e:6a:c1:1c:
0a:ea:cd:91:23:4c:c5:a2:2c:a3:1c:16:14:28:dc:b2:1f:9e:
c0:18:c6:b9:16:8d:65:c9:a2:df:11:77:7f:11:5c:bf:15:ee:
b9:1b:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:11 2025 by rpki-client