Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/sJDfsFoiTLwASFBgNFtrahZ6bec.roa
File: sJDfsFoiTLwASFBgNFtrahZ6bec.roa (raw, json)
Hash identifier: wiHiLedkBBhuTGURpUp07oTkT5ZTL/hz+/gvfUD6Shk=
Subject key identifier: B0:90:DF:B0:5A:22:4C:BC:00:48:50:60:34:5B:6B:6A:16:7A:6D:E7
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01930AE8AEBE5DB679709BD7C91EABFFC78B
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/sJDfsFoiTLwASFBgNFtrahZ6bec.roa
Signing time: Fri 08 Nov 2024 08:34:01 +0000
ROA not before: Fri 08 Nov 2024 08:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57829
IP address blocks: 45.83.60.0/22 maxlen: 22
45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
84.19.128.0/20 maxlen: 24
84.19.144.0/21 maxlen: 24
91.192.252.0/22 maxlen: 24
91.223.51.0/24 maxlen: 24
91.224.36.0/23 maxlen: 24
185.56.212.0/22 maxlen: 24
185.57.168.0/22 maxlen: 24
185.114.104.0/22 maxlen: 24
185.224.56.0/22 maxlen: 24
188.65.152.0/21 maxlen: 24
193.41.118.0/23 maxlen: 24
193.138.74.0/24 maxlen: 24
193.254.192.0/23 maxlen: 24
195.78.36.0/24 maxlen: 24
195.78.37.0/24 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
2a0b:fd80::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
2a0b:fd87::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:e8:ae:be:5d:b6:79:70:9b:d7:c9:1e:ab:ff:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Nov 8 08:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b090dfb05a224cbc00485060345b6b6a167a6de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:e5:4a:a4:ce:ee:55:41:1f:2a:2b:bb:2b:
fa:5a:b8:79:99:e8:0f:cb:30:9a:0c:71:24:84:80:
fa:ef:5d:b8:d8:c5:07:70:ab:bb:67:59:21:29:14:
d7:91:a3:11:e5:6c:45:f2:a6:b6:e3:8f:cb:12:94:
ac:55:8e:23:4c:4a:fe:c7:b7:cf:b8:79:37:ca:2c:
3c:e6:6f:ea:eb:33:c5:c2:ed:a1:65:6d:0f:43:4b:
84:11:32:96:1d:f9:6b:d9:7f:81:2f:3f:d5:2c:96:
35:1e:ce:ed:ee:c0:ae:df:15:9c:02:0e:4f:77:4c:
7e:e9:6b:d6:0b:f2:b3:1d:1a:01:d6:8b:a5:e1:cf:
f2:d6:22:69:57:c5:33:a6:d9:27:2c:8f:d1:ff:87:
84:a8:4c:ac:e9:77:95:ae:ce:d3:f9:e4:d2:4d:d9:
7a:17:f5:bf:85:66:86:e7:3b:e0:0e:b2:36:38:54:
36:0c:8a:a5:cc:a0:a8:66:bd:d9:15:e3:0b:98:6c:
d8:da:47:4f:41:97:64:37:bc:44:bb:7d:24:48:ab:
de:e8:ba:6d:64:c0:71:0d:49:3c:3b:ba:09:ed:2a:
a1:0d:e5:7a:70:c5:38:fe:da:c1:36:96:40:4a:3e:
79:eb:75:0a:ae:a3:61:82:53:f8:46:33:db:21:c7:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:DF:B0:5A:22:4C:BC:00:48:50:60:34:5B:6B:6A:16:7A:6D:E7
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/sJDfsFoiTLwASFBgNFtrahZ6bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.60.0/22
45.137.208.0/22
81.201.208.0/20
84.19.128.0-84.19.151.255
91.192.252.0/22
91.223.51.0/24
91.224.36.0/23
185.56.212.0/22
185.57.168.0/22
185.114.104.0/22
185.224.56.0/22
188.65.152.0/21
193.41.118.0/23
193.138.74.0/24
193.254.192.0/23
195.78.36.0/23
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd80::-2a0b:fd82:ffff:ffff:ffff:ffff:ffff:ffff
2a0b:fd87::/32
Signature Algorithm: sha256WithRSAEncryption
77:83:79:ce:0a:4f:54:46:ba:c6:43:99:59:e8:98:f1:ba:57:
39:91:25:07:5a:92:a9:41:4a:e4:a1:f9:41:ab:d4:9c:f4:e1:
a1:3a:ee:ac:e8:22:8a:a9:cd:7d:6f:50:23:ab:d6:3c:ed:9c:
39:d4:71:0c:b4:4b:b9:05:38:6d:4b:13:94:00:06:97:7a:22:
10:56:84:a5:0c:b5:78:82:98:5f:92:b8:65:b8:e2:e7:1b:5c:
c6:27:87:50:dd:aa:c2:aa:b5:c8:88:58:06:3e:85:16:cd:45:
41:b9:de:e9:7c:ec:34:2c:52:87:69:cc:bd:6c:a2:e4:93:0d:
05:3a:6d:2e:b0:77:f7:fa:99:ff:9e:ac:31:75:9b:08:c9:ef:
fe:6a:bf:c6:a0:28:6d:55:25:33:22:fa:cd:04:e1:de:19:5a:
be:21:bd:32:73:54:c0:23:7e:d3:55:b4:38:69:b0:1c:78:91:
bc:8b:28:95:82:ad:6b:cf:81:a8:a5:1b:13:08:bf:2f:19:bd:
67:f8:fc:47:36:72:9e:3e:69:dc:e2:24:76:37:25:9d:f7:23:
a9:de:5e:6c:3e:dd:a7:b4:0c:bc:3a:67:3a:cf:d2:51:4b:7f:
37:ac:4c:f7:7b:43:15:7d:c4:54:d0:ed:a0:6e:51:be:53:1d:
3d:d8:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:06 2025 by rpki-client