Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/5zvNzaW_6duNYZsKSlGHjMkqzOY.roa
File: 5zvNzaW_6duNYZsKSlGHjMkqzOY.roa (raw, json)
Hash identifier: mqoaziprtG/mv6VbLmItVkupgV6p/t5T9E36VZg4PmM=
Subject key identifier: E7:3B:CD:CD:A5:BF:E9:DB:8D:61:9B:0A:4A:51:87:8C:C9:2A:CC:E6
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0193303A57493272B8002823037BB17E25B1
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/5zvNzaW_6duNYZsKSlGHjMkqzOY.roa
Signing time: Fri 15 Nov 2024 14:29:09 +0000
ROA not before: Fri 15 Nov 2024 14:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24586
IP address blocks: 46.22.180.0/22 maxlen: 24
46.22.184.0/21 maxlen: 24
80.95.160.0/21 maxlen: 24
80.95.168.0/22 maxlen: 24
80.95.172.0/22 maxlen: 24
93.92.96.0/22 maxlen: 24
93.92.100.0/22 maxlen: 24
185.39.120.0/22 maxlen: 24
188.66.16.0/21 maxlen: 24
2001:4c10::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:3a:57:49:32:72:b8:00:28:23:03:7b:b1:7e:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Nov 15 14:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e73bcdcda5bfe9db8d619b0a4a51878cc92acce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d2:12:95:d3:ee:ab:f6:66:49:64:37:e2:83:
14:70:9f:cd:81:fd:1e:94:72:56:4a:9c:78:e2:00:
57:c0:04:95:c7:73:b7:61:0b:67:e4:06:cd:61:cf:
24:c4:40:eb:80:5d:b3:49:f8:55:d4:94:54:23:fe:
b0:74:de:a0:b1:51:e3:47:cf:5e:f8:4f:9f:8f:92:
f5:5e:3b:48:91:e1:a7:5c:ff:70:2c:bc:fd:3a:bd:
30:f1:4c:5d:34:c5:6f:fd:2f:d4:27:3a:6d:f5:10:
68:56:c3:46:a6:43:9b:65:df:83:71:be:04:be:e8:
2f:5d:ad:8d:ef:6d:bd:31:c6:ca:61:81:66:21:e9:
fa:e5:69:ab:3f:d8:97:58:9b:a4:a7:b5:ca:c2:33:
5e:c7:e8:78:5a:0c:4b:32:23:f3:11:4e:d9:55:4f:
2f:7b:8c:5e:ce:91:f9:42:be:2a:ae:aa:a1:fa:b8:
79:3c:f2:96:6d:82:c2:56:9f:9a:22:2e:ed:2c:48:
f6:1b:9b:fc:41:a3:10:cc:4c:0a:93:59:33:50:7b:
b3:2d:01:f5:a5:6b:86:ca:c8:d1:d7:e4:b4:1a:83:
c5:08:0c:08:69:5d:e4:6f:e9:f0:f2:ae:5c:7f:d9:
fb:3c:b4:53:eb:b4:1a:07:7c:30:58:a3:5a:ac:f4:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:CD:CD:A5:BF:E9:DB:8D:61:9B:0A:4A:51:87:8C:C9:2A:CC:E6
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/5zvNzaW_6duNYZsKSlGHjMkqzOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.180.0-46.22.191.255
80.95.160.0/20
93.92.96.0/21
185.39.120.0/22
188.66.16.0/21
IPv6:
2001:4c10::/32
Signature Algorithm: sha256WithRSAEncryption
14:47:44:be:83:3e:f4:74:63:09:17:a3:66:e9:5e:da:d7:ef:
72:c5:8f:a4:5e:61:1b:b8:2c:4f:39:40:28:fe:e0:cd:02:ba:
e3:23:7a:f4:79:e8:25:38:51:cd:c5:6b:1b:68:85:a6:18:d8:
22:cd:55:8a:3c:79:65:79:2f:fd:d6:62:3d:e4:75:b4:cf:e5:
a4:d3:9d:d2:5a:2a:b6:6c:62:9f:cc:ef:f8:a7:68:84:42:4e:
35:e3:09:ff:06:8a:4c:9a:de:05:e8:06:5c:ae:f1:f8:80:43:
85:9d:24:9a:db:e0:c0:c0:9e:b2:8b:58:2d:50:b6:5b:50:4f:
91:8b:a4:b1:9b:55:c3:71:2e:40:22:ef:7d:93:91:15:52:05:
2a:ca:7e:17:ef:bc:10:a8:48:6a:88:8d:71:5d:66:fe:79:64:
01:d9:dd:8d:2e:d3:28:71:c4:d4:b1:93:c7:8b:4c:49:10:2d:
71:16:63:f6:b4:c2:f5:39:b2:7b:78:0a:ad:28:1f:7a:06:07:
79:8d:a4:c1:53:2a:55:0d:df:af:81:93:ec:f6:64:44:87:bb:
e1:2b:d0:a3:5f:cb:c8:08:35:26:ce:fc:76:30:19:f9:b1:2d:
39:98:b0:91:e1:be:f1:4a:9a:52:4a:18:db:78:5a:1b:2e:d2:
6d:9c:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:59 2025 by rpki-client