Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9E8lnT0-sw6c2EuWDtFPsF1STH0.roa
File: 9E8lnT0-sw6c2EuWDtFPsF1STH0.roa (raw, json)
Hash identifier: FVu14JmIIKhot4ULv932BJTOndrsbf0QyfrGDJ0DLlc=
Subject key identifier: F4:4F:25:9D:3D:3E:B3:0E:9C:D8:4B:96:0E:D1:4F:B0:5D:52:4C:7D
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019372D43609FEAC6E95A935F161D9C48E75
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9E8lnT0-sw6c2EuWDtFPsF1STH0.roa
Signing time: Thu 28 Nov 2024 12:52:10 +0000
ROA not before: Thu 28 Nov 2024 12:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
155.204.0.0/17 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/19 maxlen: 22
155.204.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 28 Nov 2024 12:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:d4:36:09:fe:ac:6e:95:a9:35:f1:61:d9:c4:8e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Nov 28 12:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f44f259d3d3eb30e9cd84b960ed14fb05d524c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:9b:6a:49:78:32:62:2e:8d:c4:f6:41:fc:
09:6f:4e:47:42:67:f3:2d:d0:18:9f:9f:01:57:fd:
cd:14:4a:fe:26:28:c3:22:78:61:b2:ad:f9:8a:d7:
2a:ef:b8:c8:61:08:61:e6:aa:2d:d7:a1:ee:93:fb:
63:1f:9a:e8:6e:4e:0e:7a:28:3c:84:0e:4c:bf:d9:
ae:a3:e8:b8:32:0a:7e:c0:59:84:80:3a:f3:af:17:
6d:fc:d9:f5:4f:2d:11:1e:1b:b5:fb:34:4e:1a:7f:
ea:ef:e4:de:12:20:fa:06:81:ab:ef:dc:eb:59:c0:
4d:0f:49:bf:d4:2a:07:70:bd:43:64:ea:4f:87:42:
a9:d1:31:d5:80:01:fb:ac:16:2e:61:9f:5a:82:fc:
bc:a5:2c:67:b6:ac:44:2e:e0:4d:6e:13:48:a1:5a:
b9:b0:68:ca:56:48:37:b3:ca:b7:af:41:ad:5a:fd:
33:4d:a1:7f:bf:3c:41:3c:8f:74:26:ab:aa:12:5e:
0c:c8:c2:8e:e2:ca:b3:d8:ad:3f:c0:87:1e:b1:5a:
ce:a5:46:b3:47:1f:f1:91:8c:35:b6:ab:5f:de:26:
b0:bc:60:ff:09:c5:a9:30:eb:96:49:de:07:d8:98:
09:61:1f:7d:cd:df:25:8c:27:23:9a:6b:e5:2b:c7:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:25:9D:3D:3E:B3:0E:9C:D8:4B:96:0E:D1:4F:B0:5D:52:4C:7D
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9E8lnT0-sw6c2EuWDtFPsF1STH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.159.255
155.204.208.0/21
Signature Algorithm: sha256WithRSAEncryption
26:66:ef:1f:e1:4c:d1:94:31:2e:d0:85:1a:56:4b:f2:ce:c2:
9f:11:f1:7d:da:92:25:73:fe:b0:18:78:aa:e4:e7:34:3b:f0:
46:b8:3d:94:fa:8c:f3:0d:41:78:73:09:f6:c3:2d:b4:56:b5:
56:b6:ca:64:68:ea:c0:7a:9c:15:df:1e:d1:ce:ca:cf:03:f4:
2e:4f:8f:92:7e:63:9d:62:9a:36:78:89:ca:57:21:53:fc:7f:
a2:01:17:a7:f0:12:e5:13:e7:a4:60:df:e3:97:8e:6f:23:6f:
ec:59:34:6f:4b:15:cc:0f:00:36:50:5d:c8:d5:05:61:54:ad:
9f:f6:33:d2:2e:36:86:1b:2c:eb:8f:d2:bd:7d:ab:5c:f8:2d:
5b:3d:d2:81:b5:bf:59:46:33:e7:2b:32:b4:d5:30:02:69:47:
d0:19:1c:c9:13:a2:9c:78:34:a9:9f:e4:53:f5:4a:0a:ae:c9:
d2:2a:1e:da:28:59:b9:51:8c:96:d3:46:c2:60:a8:03:3a:98:
1e:ba:a1:15:b3:81:ec:0e:ba:da:5f:fc:66:83:fd:23:12:66:
6c:60:d9:60:7b:d4:bc:00:b2:34:3d:47:d9:af:99:24:9e:84:
75:68:e5:20:61:88:d2:1e:9e:70:0b:10:e2:15:a1:04:b1:5e:
6a:93:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:01 2025 by rpki-client