Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/eg-yBygZCyWWRCh-eQdJO1th_cM.roa
File: eg-yBygZCyWWRCh-eQdJO1th_cM.roa (raw, json)
Hash identifier: mqCB1VmGX9Ah2NkZdiPOk7O7/k9kHw7+bbpkhkRQPtg=
Subject key identifier: 7A:0F:B2:07:28:19:0B:25:96:44:28:7E:79:07:49:3B:5B:61:FD:C3
Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial: 0193061024CD13AAF6D9D69A637310E2249D
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/eg-yBygZCyWWRCh-eQdJO1th_cM.roa
Signing time: Thu 07 Nov 2024 09:59:01 +0000
ROA not before: Thu 07 Nov 2024 09:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43633
IP address blocks: 5.180.128.0/22 maxlen: 24
45.128.188.0/22 maxlen: 24
91.195.90.0/23 maxlen: 24
91.195.90.0/24 maxlen: 24
91.195.91.0/24 maxlen: 24
91.213.59.0/24 maxlen: 24
2a06:2b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:10:24:cd:13:aa:f6:d9:d6:9a:63:73:10:e2:24:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
Validity
Not Before: Nov 7 09:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a0fb20728190b259644287e7907493b5b61fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:60:9e:e1:93:16:0e:46:0b:a0:62:3d:8d:
66:29:1a:a2:e1:02:6f:da:96:74:4a:37:db:72:99:
6b:9e:a5:69:a4:ee:ab:56:34:c0:89:e6:43:3e:48:
73:66:d3:02:7b:08:65:ad:de:cd:90:74:99:69:e6:
7c:49:94:ff:29:4d:56:b9:3b:87:7f:86:06:fd:b5:
ac:48:83:87:21:34:e7:33:e6:fe:ff:82:71:32:e5:
3f:f1:7e:57:41:fb:d4:9a:ce:70:7e:80:45:3f:08:
21:ea:76:63:ed:df:3e:ef:50:46:be:e3:f0:30:41:
b7:ca:5c:fb:c3:6b:82:48:b1:71:70:63:61:dd:b5:
e3:64:2d:ad:7b:d9:87:04:d8:99:ce:64:72:c3:35:
7b:46:ec:bd:1c:1c:ba:5c:04:67:5c:7c:2f:84:30:
8b:97:66:c5:7d:08:b3:34:20:d4:6a:ac:ff:fb:72:
d9:b7:d0:db:9e:64:f4:f8:df:4d:e3:22:46:96:64:
6c:27:49:4a:94:fe:b8:97:23:5a:38:22:b8:50:dc:
99:13:6d:61:ac:95:d7:f8:6a:c6:e5:6d:81:a1:d9:
c5:c7:98:4f:6a:3b:3f:c0:50:93:44:fe:0e:65:b2:
b1:07:fd:48:30:fb:0c:36:bb:9d:63:ff:80:37:58:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:B2:07:28:19:0B:25:96:44:28:7E:79:07:49:3B:5B:61:FD:C3
X509v3 Authority Key Identifier:
keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/eg-yBygZCyWWRCh-eQdJO1th_cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.128.0/22
45.128.188.0/22
91.195.90.0/23
91.213.59.0/24
IPv6:
2a06:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:cf:ad:ed:14:4c:4a:8e:d4:e8:e4:bc:77:dc:d9:92:83:cf:
e9:b1:d4:7c:67:52:3e:09:f2:8e:ca:70:43:3b:81:f3:66:24:
00:3f:37:b1:48:82:09:ea:41:35:30:4d:bd:aa:cb:de:f8:d2:
ee:85:bc:e1:d9:32:86:44:32:ee:c7:6f:04:96:22:cf:f8:8d:
19:f9:88:ab:c8:39:2d:05:ef:05:2c:30:bd:4e:10:49:57:61:
8e:90:a2:79:4a:cd:36:7e:d0:23:3a:9a:d6:ac:16:00:06:91:
ac:ae:c9:bc:4e:f5:40:1e:3b:ff:69:85:1b:b4:77:fb:c6:07:
18:b0:52:2a:be:01:2a:f7:de:1b:f8:d8:ce:44:d7:b4:d5:03:
00:ef:c1:ea:31:d2:46:82:23:2f:da:3b:f7:56:97:99:98:ee:
4c:d2:28:f6:43:4c:32:9a:8f:d1:1b:36:fb:96:80:6b:2c:5a:
97:11:fe:f6:09:a3:5a:39:cc:80:f4:8c:a6:da:fa:5f:7c:c6:
72:61:b2:b9:32:71:5e:89:4a:45:83:c4:1e:d1:a9:48:10:12:
24:db:dc:04:b7:16:84:86:80:e4:08:f0:3a:3f:9b:99:87:05:
ce:a4:a5:10:ab:88:73:5e:ae:59:f4:9a:8e:73:a6:8b:48:bc:
1f:dc:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:03 2025 by rpki-client