Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/5EVInb2ENZP_T3wUBIgaMsJvs6E.roa
File: 5EVInb2ENZP_T3wUBIgaMsJvs6E.roa (raw, json)
Hash identifier: 3uUheR4ZYLXqeUKZMnNmcAPfBokEVWyitD8FWLBlHz0=
Subject key identifier: E4:45:48:9D:BD:84:35:93:FF:4F:7C:14:04:88:1A:32:C2:6F:B3:A1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 018CC64B09F5795B39A2ED8DFAFD4C4DBCFE
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/5EVInb2ENZP_T3wUBIgaMsJvs6E.roa
Signing time: Mon 01 Jan 2024 18:30:55 +0000
ROA not before: Mon 01 Jan 2024 18:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47134
IP address blocks: 93.91.64.0/20 maxlen: 20
93.91.65.0/24 maxlen: 24
93.91.67.0/24 maxlen: 24
93.91.73.0/24 maxlen: 24
93.91.76.0/24 maxlen: 24
93.91.75.0/24 maxlen: 24
93.91.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:09:f5:79:5b:39:a2:ed:8d:fa:fd:4c:4d:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Jan 1 18:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e445489dbd843593ff4f7c1404881a32c26fb3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:f8:9a:c0:f4:7c:1b:7b:d4:7b:b0:20:4a:
1f:b1:d4:05:4d:bc:38:c2:8b:01:38:28:6a:d9:7f:
c7:ad:11:2f:2e:d5:42:cc:6f:5b:d1:33:d6:11:02:
3e:be:0f:19:ef:5c:95:34:e6:86:aa:b1:7b:07:88:
80:ef:2a:33:02:6f:a6:66:06:2b:67:15:b5:e5:fe:
15:b1:a7:0d:6d:a4:80:4c:90:a7:64:80:a9:96:e3:
dd:7a:5a:a6:48:90:73:e2:67:2c:90:0d:a7:35:ab:
34:bf:0f:00:8a:79:58:72:ab:5a:94:9a:35:43:b5:
3f:74:58:36:c2:93:61:1f:e8:d6:5c:71:9a:0f:f0:
9f:53:90:b6:26:bb:c3:ba:b9:7e:ee:09:16:f5:91:
5a:43:9d:2c:67:0d:09:bc:45:0b:61:97:1b:65:fe:
d4:a2:a0:10:2c:cd:32:88:c4:7b:58:c8:92:69:98:
47:66:27:af:0d:fa:74:52:02:41:6f:13:fd:4b:f5:
f3:b2:b4:53:91:b4:2a:b3:0f:dc:2e:93:3a:5a:7d:
11:c2:6d:75:33:f3:96:bd:f2:e2:01:64:1f:f2:4f:
b9:0d:de:61:39:06:5a:f0:ca:7e:df:07:4a:55:46:
ed:52:42:a1:8f:af:0d:98:fa:c8:c7:14:c1:8e:95:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:48:9D:BD:84:35:93:FF:4F:7C:14:04:88:1A:32:C2:6F:B3:A1
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/5EVInb2ENZP_T3wUBIgaMsJvs6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:5f:44:43:c2:20:ec:09:51:c4:32:d9:df:89:42:36:65:3e:
0c:6c:5b:c1:16:e4:d2:b6:0c:24:0f:1d:60:6d:94:80:0b:dc:
bc:91:16:eb:95:ad:e0:4b:1e:7c:0b:e2:d3:2c:07:87:7c:f3:
b1:b1:e0:2d:94:09:50:0d:9c:78:54:e2:0f:51:fa:3b:1e:97:
00:f6:8a:53:94:f4:bc:9a:c8:8f:8e:04:ae:72:6e:fc:71:fa:
3c:3a:6f:67:a9:cd:a7:0d:f7:29:3f:a1:8b:c9:97:8b:a8:91:
28:d7:26:a1:df:ce:da:c6:68:80:15:26:6c:82:1f:31:52:57:
ab:5f:30:34:1a:85:47:57:f8:3b:95:2c:e6:f8:0c:f2:e1:4b:
c3:62:ff:13:8a:b2:12:7b:8d:14:7a:2d:08:7b:ea:60:18:a6:
85:f0:60:1a:98:ea:c3:9a:33:22:2b:53:df:2f:e9:72:48:f6:
75:2a:a7:d3:00:cb:99:40:20:e7:ba:ba:b6:41:00:88:76:7d:
e7:30:a8:4b:e0:cc:90:e2:4c:e1:e6:27:11:2f:c7:b3:09:cc:
84:da:32:27:7a:67:8e:a7:cc:da:18:9e:07:cc:56:6d:97:14:
7c:a0:9d:3f:6f:b3:69:ce:58:f1:6e:c0:2c:11:80:e5:7b:5f:
bd:c0:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:20 2025 by rpki-client