Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/AC5W31NWquIzFCwsjCsP_RkC88Y.roa
File: AC5W31NWquIzFCwsjCsP_RkC88Y.roa (raw, json)
Hash identifier: 5zk2vbVZ2nQpoL85fXSzLUcq019DP6Jvf97fLycPofA=
Subject key identifier: 00:2E:56:DF:53:56:AA:E2:33:14:2C:2C:8C:2B:0F:FD:19:02:F3:C6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0193F34942F25C21E3A366F8D26E176CE159
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/AC5W31NWquIzFCwsjCsP_RkC88Y.roa
Signing time: Mon 23 Dec 2024 11:31:24 +0000
ROA not before: Mon 23 Dec 2024 11:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48467
IP address blocks: 94.228.160.0/24 maxlen: 24
94.228.167.0/24 maxlen: 24
94.228.171.0/24 maxlen: 24
94.228.172.0/22 maxlen: 22
94.228.172.0/24 maxlen: 24
178.236.240.0/23 maxlen: 23
178.236.242.0/24 maxlen: 24
178.236.245.0/24 maxlen: 24
178.236.248.0/22 maxlen: 22
178.236.252.0/24 maxlen: 24
178.236.255.0/24 maxlen: 24
185.46.44.0/22 maxlen: 22
185.46.44.0/23 maxlen: 23
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/23 maxlen: 23
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:49:42:f2:5c:21:e3:a3:66:f8:d2:6e:17:6c:e1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Dec 23 11:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=002e56df5356aae233142c2c8c2b0ffd1902f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:f1:35:a6:18:0d:9f:6b:5f:2c:d8:0e:f9:
63:95:79:a5:46:d2:cb:6f:eb:98:95:27:9f:19:ae:
66:04:ba:4f:74:83:93:71:2b:ea:cf:36:e3:6e:2b:
27:42:8d:bb:26:17:c8:fa:93:82:9d:2e:9b:7e:54:
82:f5:10:3f:cf:10:fa:2f:b6:fa:f5:de:60:0b:8c:
0e:21:9e:5a:8c:ed:89:dc:21:83:5e:c8:87:e0:b5:
bb:d8:f9:94:9e:bb:e4:60:23:2e:cf:fe:da:5e:0d:
8f:ff:59:7e:6a:e7:87:da:b6:04:b6:15:e6:83:cc:
fa:67:92:c2:e6:3c:91:e3:5a:00:88:2d:f3:da:01:
d7:73:f5:7c:fb:c3:7b:79:79:62:c2:0e:87:a3:89:
86:87:e3:58:07:c4:bc:55:22:02:f9:75:c1:3a:ad:
01:5e:2f:68:0f:a5:cb:03:18:d4:00:d1:fe:a5:4b:
f5:e6:2b:b4:89:ea:58:f6:29:c8:7e:3d:5a:75:2d:
0a:2f:7f:a8:ce:8a:15:51:81:cf:54:85:b8:dd:0e:
73:67:4f:c0:76:15:43:c7:9b:2e:3e:2c:22:c7:da:
05:1e:5f:73:f9:d1:4f:14:f7:59:aa:66:a8:ed:62:
dd:39:79:d5:2d:8c:87:dd:41:be:1c:ee:19:73:36:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:56:DF:53:56:AA:E2:33:14:2C:2C:8C:2B:0F:FD:19:02:F3:C6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/AC5W31NWquIzFCwsjCsP_RkC88Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.160.0/24
94.228.167.0/24
94.228.171.0-94.228.175.255
178.236.240.0-178.236.242.255
178.236.245.0/24
178.236.248.0-178.236.252.255
178.236.255.0/24
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
b4:47:3d:d0:58:e7:c7:25:94:57:22:36:f7:af:88:83:2e:cd:
45:48:91:17:2e:11:d6:80:48:ce:88:e8:a6:15:ba:95:62:cb:
0a:25:b8:70:8c:04:97:c5:5b:d1:ce:cc:81:ac:1d:82:57:1f:
e3:32:b0:18:2b:c8:a9:c1:61:c3:72:2a:c5:ac:03:7d:33:43:
44:7e:86:27:b0:a5:dd:bf:a5:93:94:57:59:3b:b9:b0:8c:d9:
23:d0:99:b4:98:1e:14:a9:4d:19:67:66:5b:93:6e:a3:2c:64:
54:a6:1e:05:02:f2:02:3c:4d:16:e8:34:63:70:d1:87:5e:9f:
7d:18:b0:1e:67:11:43:fa:80:10:01:86:55:3e:a5:4c:91:1f:
ea:9b:a6:b0:5a:e7:5e:fc:14:c7:ad:e5:ca:e1:79:4e:82:9d:
05:c6:ea:c8:c6:2a:2d:86:03:b5:bc:8e:43:52:a8:aa:c7:20:
f0:43:f2:ba:42:f1:a9:6d:ea:a7:c8:c2:64:c2:de:df:fc:a7:
7e:d7:51:f9:16:46:fb:b4:d7:89:98:7b:0f:46:0d:6a:4e:cb:
8a:ee:0f:0c:c8:4f:fc:0f:f6:07:20:47:39:c5:ba:79:26:c6:
4c:45:91:7c:2f:03:23:4f:b7:6e:74:bf:91:c6:d6:05:a4:2b:
df:49:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:30 2025 by rpki-client