Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/eLOLE7ssHc40_a_Ll14e7trAz6E.roa
File: eLOLE7ssHc40_a_Ll14e7trAz6E.roa (raw, json)
Hash identifier: x1cwiO862oetK+G28dUr9ioH3+tRrSEbre0q2vzUJCk=
Subject key identifier: 78:B3:8B:13:BB:2C:1D:CE:34:FD:AF:CB:97:5E:1E:EE:DA:C0:CF:A1
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 018CC8DFA3335503AE29013F998388B8AD8C
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/eLOLE7ssHc40_a_Ll14e7trAz6E.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208348
IP address blocks: 45.142.160.0/22 maxlen: 22
193.3.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a3:33:55:03:ae:29:01:3f:99:83:88:b8:ad:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b38b13bb2c1dce34fdafcb975e1eeedac0cfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:e4:3b:a8:02:18:7f:11:45:83:37:28:ed:
89:7a:1f:4f:5d:53:fc:bb:8d:22:5c:bd:ef:16:7c:
ee:6d:ec:19:95:d1:61:4e:c2:3f:f1:f0:26:2f:d5:
83:43:9c:a6:23:f4:db:fd:2b:33:7e:d4:c2:05:df:
3e:47:be:6e:11:5a:59:e4:f7:e3:29:2e:d9:99:3a:
7d:93:ac:9e:d2:67:88:8d:aa:49:0a:c3:a4:b1:25:
17:14:da:37:aa:5f:fb:21:38:6c:72:dd:80:1c:54:
70:62:22:68:02:dc:ec:e8:b1:50:b7:97:a3:32:d4:
56:64:e6:e2:cc:f9:b6:9b:03:81:d1:f5:0d:d3:55:
d5:cf:d6:28:f4:f7:19:a8:26:3f:9c:0d:ec:6f:d8:
08:0a:ea:6a:39:b1:89:d9:f8:ad:88:f7:62:f7:98:
0a:3a:9c:93:cf:2c:59:1d:62:d7:9f:80:0f:95:9b:
d6:80:7c:0b:f8:c8:04:45:b5:de:f8:05:8c:38:52:
20:88:34:8b:1b:56:2f:f5:70:20:92:01:c3:64:45:
f4:8e:7a:fb:81:aa:0d:29:08:df:8c:15:0f:3b:2a:
8a:b3:bc:25:56:0b:09:76:41:2c:81:c3:20:eb:b0:
36:eb:8e:24:37:14:a8:9d:dd:d4:18:bc:14:be:61:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:8B:13:BB:2C:1D:CE:34:FD:AF:CB:97:5E:1E:EE:DA:C0:CF:A1
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/eLOLE7ssHc40_a_Ll14e7trAz6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.160.0/22
193.3.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c6:69:cc:8d:85:42:d7:e6:f3:0e:d9:1d:8e:65:ca:24:05:
08:54:aa:a3:8d:39:00:8e:e5:34:59:bf:2f:67:12:23:f0:fe:
2a:d6:c1:18:61:c8:e0:e5:5f:2d:b9:6d:b8:c9:2e:a5:46:a0:
87:0f:16:0b:16:88:b9:c4:ca:29:1c:5e:c1:d2:80:f9:ec:49:
ff:9c:00:4c:c9:e1:e4:13:34:09:0e:79:12:f7:c8:c7:7f:f2:
e7:f1:d2:6a:2b:e3:d1:52:46:f9:1e:17:0f:f1:ef:e4:ec:4f:
e6:57:ac:ab:d8:d8:65:35:9e:0f:d7:f8:4e:07:ea:70:18:30:
93:f1:6e:fe:42:69:d4:9d:9f:2b:b6:91:04:2c:0a:a6:5b:ab:
74:fa:98:fa:26:33:f8:1f:14:53:d0:b2:0d:ea:67:19:01:fa:
6b:9a:e3:87:16:fa:c3:e8:65:c2:5a:9c:e7:66:23:06:40:46:
de:4c:4e:da:a8:4b:f5:ec:00:bc:67:50:d5:73:3f:a2:0a:0e:
83:e1:8d:36:76:43:9e:ae:00:88:79:e7:d4:9b:e7:e3:30:02:
ed:f0:47:f1:19:a3:97:05:7c:e9:55:13:f6:ad:02:fa:68:99:
f4:10:17:02:b3:81:e7:b9:77:e4:7b:91:29:1b:ff:9f:0d:e7:
12:82:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:45:13 2025 by rpki-client