Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Z-9pLDfbL4GkuRs2_ww-aHFYeAc.roa
File: Z-9pLDfbL4GkuRs2_ww-aHFYeAc.roa (raw, json)
Hash identifier: T7m6L7i4a0CoKpn1t5f9FfRIp2A7UmErxwcOVRByxm8=
Subject key identifier: 67:EF:69:2C:37:DB:2F:81:A4:B9:1B:36:FF:0C:3E:68:71:58:78:07
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA69AB7A0B411D160DD21269FCB816
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Z-9pLDfbL4GkuRs2_ww-aHFYeAc.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197343
IP address blocks: 5.56.128.0/22 maxlen: 22
5.57.34.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
37.32.42.0/24 maxlen: 24
178.239.144.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:ab:7a:0b:41:1d:16:0d:d2:12:69:fc:b8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ef692c37db2f81a4b91b36ff0c3e6871587807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:74:13:b1:4d:00:87:66:15:88:f6:35:a7:
c9:6b:e6:56:0c:13:d8:06:b5:07:39:ab:ce:4a:ea:
a3:a8:88:bb:b7:5f:8d:1d:2a:ee:2b:91:18:ba:72:
2e:96:98:56:4f:d5:2d:c1:db:e3:30:42:36:1b:2d:
2f:42:57:de:02:59:d4:b1:d4:01:c2:f6:7a:8d:d1:
a4:51:bb:4d:76:43:c3:3d:03:d1:07:68:40:c8:b2:
e3:cc:b8:1f:ee:0f:2e:12:67:ad:d7:42:4d:61:75:
df:d4:b0:9f:91:cd:0a:03:0f:21:33:3d:ff:ff:ce:
4d:75:49:4c:ed:c8:d4:7a:0b:cc:ae:55:e9:31:13:
6f:d7:df:46:c6:56:39:f1:34:95:b4:3d:43:77:ec:
c3:4e:85:9f:74:f3:d9:80:e5:95:cf:06:69:1a:6e:
c1:91:ac:05:9c:02:9e:84:dd:d6:1c:33:0d:ca:7c:
27:65:db:d5:8b:e7:9d:ba:19:50:83:63:d8:7a:fd:
31:fd:41:f2:e5:19:3b:31:b8:f6:b7:d7:58:cf:12:
dc:12:28:df:1e:c8:cd:0d:e9:18:5f:6f:1f:82:8c:
1b:5a:37:6d:9c:3b:6e:1c:af:2e:75:d7:8f:d2:fb:
21:01:7d:dd:ae:0d:0a:04:b7:3d:1a:e1:8c:a7:7e:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:69:2C:37:DB:2F:81:A4:B9:1B:36:FF:0C:3E:68:71:58:78:07
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Z-9pLDfbL4GkuRs2_ww-aHFYeAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.34.0/24
37.32.40.0/22
178.239.144.0/24
185.212.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3e:b2:22:4a:65:5e:24:bc:79:ab:00:9e:2f:fd:60:40:31:
16:f8:f5:7e:d3:26:35:ae:17:40:8d:c1:bc:a7:98:1c:ef:3f:
1f:82:68:0b:88:7d:03:a5:99:c7:21:f3:7d:65:8c:01:6a:66:
42:01:32:01:b5:29:c4:6c:40:66:7e:ad:9f:97:4b:77:27:72:
35:05:ea:ab:4d:24:b4:c4:a7:ce:e2:e9:29:26:a5:0d:22:84:
69:bf:4b:81:56:06:27:7e:a3:21:ac:ab:a1:eb:6c:ed:b2:f0:
53:a4:04:c0:25:00:b8:97:e2:2f:da:28:60:28:4b:aa:79:a8:
a0:40:e5:e7:3c:8c:68:6b:cf:20:1e:8e:bc:39:d6:d3:7d:74:
6e:8b:6a:9b:1a:7c:a8:d6:cd:55:25:a9:b1:0f:56:71:0e:df:
36:a5:b1:ec:a2:49:04:64:90:54:8b:a9:5f:70:f0:67:ec:18:
e4:74:37:1f:35:6a:07:d4:9f:47:fe:d9:ea:9f:18:1f:86:07:
4c:0d:d6:90:ba:21:28:bd:84:f1:6d:37:98:83:9e:10:3d:80:
c0:2c:4c:e7:84:6e:d0:bd:ec:37:14:e2:c6:29:46:05:96:d2:
4a:be:e4:dd:f9:43:3e:c6:c7:a2:f1:96:12:2c:93:36:98:96:
62:f7:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:56 2025 by rpki-client