Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/E-VLF2GWpE0tw-pgzZ_0D_EsHNo.roa
File: E-VLF2GWpE0tw-pgzZ_0D_EsHNo.roa (raw, json)
Hash identifier: LbrmIdccw0xRIlWm0wEFSz8xG1XR9rPx2Mwe8nSwI2I=
Subject key identifier: 13:E5:4B:17:61:96:A4:4D:2D:C3:EA:60:CD:9F:F4:0F:F1:2C:1C:DA
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019428231A58D87BADB5AA9A7203802DD5CE
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/E-VLF2GWpE0tw-pgzZ_0D_EsHNo.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202623
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.91.0/24 maxlen: 24
2a06:98c0:1400::/48 maxlen: 48
2a06:98c0:1401::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:360e::/48 maxlen: 48
2a06:98c0:3612::/48 maxlen: 48
2a06:98c0:3616::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Jan 2025 06:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1a:58:d8:7b:ad:b5:aa:9a:72:03:80:2d:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13e54b176196a44d2dc3ea60cd9ff40ff12c1cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:65:46:3f:56:c9:c6:a0:15:20:1a:de:1e:
5d:28:06:d8:5c:60:1f:8a:8c:a9:8b:ab:5b:2e:2d:
64:e1:8a:b0:0c:d7:c0:14:17:40:6d:8e:be:61:e1:
29:ba:bf:8f:da:22:88:9b:5e:57:01:cb:cd:df:00:
e7:bf:f7:72:16:06:68:d5:0c:40:87:2c:26:d7:fd:
f0:fe:30:bd:07:d3:e5:95:de:4e:95:14:37:81:fc:
00:a1:b1:a6:c7:4a:d5:f7:83:f0:22:4d:81:38:f1:
99:9f:35:10:76:75:69:46:db:10:ed:42:32:d7:70:
90:51:b0:e8:df:4f:1d:a4:fc:76:53:01:e2:86:a4:
e9:75:cf:8a:ee:c7:2c:f9:ac:8a:79:c0:e8:26:57:
14:b2:ab:b2:69:c1:55:e2:bf:b6:52:2a:00:d2:19:
42:65:b6:4d:65:16:a1:f3:91:66:a2:85:ef:f4:cc:
c6:e0:56:ef:55:43:41:6a:98:c7:91:40:97:01:3f:
ef:e9:88:81:56:45:f0:78:0e:ea:3d:0c:5f:3a:9a:
b4:2a:21:63:e4:b6:70:47:db:94:9b:f6:ed:98:67:
5c:0d:57:93:ae:84:a5:78:97:5d:08:d7:84:03:0f:
b9:ce:37:8f:d9:44:4f:f6:48:8d:2d:73:66:6a:bb:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:4B:17:61:96:A4:4D:2D:C3:EA:60:CD:9F:F4:0F:F1:2C:1C:DA
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/E-VLF2GWpE0tw-pgzZ_0D_EsHNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0/24
141.101.91.0/24
IPv6:
2a06:98c0:1400::/47
2a06:98c0:3602::-2a06:98c0:3607:ffff:ffff:ffff:ffff:ffff
2a06:98c0:360e::/48
2a06:98c0:3612::/48
2a06:98c0:3616::/48
Signature Algorithm: sha256WithRSAEncryption
6a:f1:39:e0:a4:1a:64:8b:07:f4:64:08:c4:8f:1a:f4:7c:f6:
7b:81:04:90:6f:26:6d:f0:af:ff:c9:30:7c:4a:33:52:fa:e6:
8e:8c:44:02:ff:6e:f2:fe:38:b5:75:6b:9d:c8:16:70:0a:8e:
76:be:0f:2f:bd:e6:84:57:97:2f:23:7e:dc:a1:3b:92:2b:07:
62:74:21:a3:c6:6a:c8:e2:6a:cb:44:9e:f6:c4:23:ce:5d:1e:
c6:12:a6:9f:e7:b2:6d:f7:5e:9f:2f:90:b4:ec:e8:be:70:b1:
ff:e0:73:be:24:26:e4:71:46:10:b0:a7:db:bf:23:72:10:4d:
40:f2:0d:cc:f6:01:64:a7:6f:e2:13:40:51:e5:bf:e9:80:ca:
58:b8:6b:db:8f:fc:29:d6:e6:82:5f:0d:e0:37:68:17:bf:5f:
8c:39:45:aa:d8:48:e4:3d:8a:4a:f5:33:b3:a4:cd:b4:ba:80:
96:df:dc:a4:e0:36:ce:33:c4:4f:b5:c7:81:8b:df:75:89:d4:
07:b1:23:f2:81:21:ae:f2:44:5f:6e:37:33:8a:3f:85:d9:a5:
5a:b5:8a:44:cf:e8:c9:2b:39:9a:4c:cf:a5:73:10:2d:97:32:
38:3d:71:14:85:21:1a:af:27:36:d3:28:50:44:9a:50:60:67:
aa:ed:85:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:18:24 2025 by rpki-client