Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_EfVElYVpZMWJ6sEvZFLytRQngE.roa
File: _EfVElYVpZMWJ6sEvZFLytRQngE.roa (raw, json)
Hash identifier: uu1BJ+0cMovcblAZ3h32N2t0zBLpuRAdxW9SVMb9V1I=
Subject key identifier: FC:47:D5:12:56:15:A5:93:16:27:AB:04:BD:91:4B:CA:D4:50:9E:01
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01953CF4FAE01622CDFD1B363AAA5DF7469D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_EfVElYVpZMWJ6sEvZFLytRQngE.roa
Signing time: Tue 25 Feb 2025 11:54:02 +0000
ROA not before: Tue 25 Feb 2025 11:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204650
IP address blocks: 5.57.35.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
37.32.42.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.243.49.0/24 maxlen: 24
185.243.50.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 17 Mar 2025 09:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:f4:fa:e0:16:22:cd:fd:1b:36:3a:aa:5d:f7:46:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 25 11:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc47d5125615a5931627ab04bd914bcad4509e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:71:98:f0:19:61:5d:d9:e8:87:9d:af:cb:
39:fd:ea:fa:9c:36:ea:d3:90:1b:cc:67:2b:c2:bc:
29:98:9a:82:b5:6c:0a:17:df:db:73:28:87:72:de:
bd:b7:de:a9:85:98:12:7c:bc:f6:d6:d3:28:07:5a:
39:79:21:3f:e0:ce:40:ff:9c:5c:9a:52:1a:5a:4a:
5d:b4:0d:be:fa:29:2c:f0:34:b0:44:54:09:fe:7b:
76:58:7e:99:3a:10:4e:ef:19:32:42:5a:43:5b:f6:
a4:2b:cf:85:a7:ee:c7:a6:da:f5:b5:5c:94:33:8f:
76:8f:a5:20:2f:d6:a1:10:65:2d:70:c1:11:cb:ce:
fa:13:68:c8:8a:f8:fd:92:a3:cb:ea:35:ed:47:a7:
2d:68:ae:f9:a3:e3:55:b7:78:d5:c4:42:0a:1e:f0:
0f:d7:81:08:34:e3:87:bd:16:72:c1:5a:90:4d:f9:
72:91:74:50:b8:38:fd:1d:d5:38:88:5f:54:25:7f:
72:67:22:41:69:bb:e6:ca:aa:1d:76:16:e7:bd:b9:
19:43:76:b7:c1:32:05:5c:98:2f:b1:bc:4e:47:c6:
b5:e0:a6:f2:64:fe:ab:99:2c:73:2c:0d:0b:86:e4:
ea:fc:8a:e4:cc:72:f8:b0:29:b3:df:e9:55:b3:2c:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:D5:12:56:15:A5:93:16:27:AB:04:BD:91:4B:CA:D4:50:9E:01
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_EfVElYVpZMWJ6sEvZFLytRQngE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.35.0-5.57.36.255
37.32.42.0/24
37.32.44.0/23
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
185.243.49.0-185.243.50.255
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
03:87:7b:d6:9d:f2:b3:e6:53:f1:24:9b:89:59:6a:50:bf:a8:
4c:96:55:2c:f4:2b:3e:3f:73:14:e3:21:1a:22:e4:a0:7d:68:
a8:1c:e7:55:f8:3e:3c:71:e1:6c:0e:52:c9:c6:ed:05:fa:ca:
0e:f1:f6:a6:db:f5:1d:82:fa:cc:36:b7:fd:0b:36:e0:73:f4:
03:27:3f:0f:93:27:c5:d9:ba:01:e5:e8:a1:e1:ce:8d:5b:76:
a8:71:1c:b6:00:8c:8b:29:66:aa:f5:87:68:ae:9f:2b:55:40:
e9:91:02:74:f2:3f:1e:22:bf:d1:dd:d0:99:f9:ad:5d:28:4e:
a8:31:ef:b9:18:18:ed:ea:cc:6b:75:a1:1b:02:c3:0f:38:1c:
e3:92:7c:13:9c:03:8b:3e:ea:b8:a8:46:54:64:0f:5d:b9:e9:
03:2b:ce:80:98:37:28:91:e9:d7:81:ac:96:45:4d:88:f8:92:
c6:18:75:d0:e0:e3:94:54:1f:a9:bc:e4:2a:81:83:f7:e6:99:
6f:1a:8c:36:8e:aa:c0:07:f0:fc:cd:29:ee:05:f6:99:a2:c1:
81:0e:ac:a1:96:d4:58:a6:67:b4:9e:77:a0:30:1d:6f:e7:01:
e2:92:81:cd:ba:69:23:86:cf:5a:e8:5c:49:38:ea:96:5a:38:
42:67:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:59:48 2025 by rpki-client