Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/e5shvGAFMstbFaWaXuly_7JS3_E.roa
File: e5shvGAFMstbFaWaXuly_7JS3_E.roa (raw, json)
Hash identifier: qs7kQ4mt+EYG1EoHC6tc+kPNC/t5S+kyBNkRVGwJxdI=
Subject key identifier: 7B:9B:21:BC:60:05:32:CB:5B:15:A5:9A:5E:E9:72:FF:B2:52:DF:F1
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 018CC64B42DDE6C1206CD278815D89E045E8
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/e5shvGAFMstbFaWaXuly_7JS3_E.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39767
IP address blocks: 78.158.72.0/21 maxlen: 21
78.158.80.0/20 maxlen: 21
185.90.140.0/22 maxlen: 22
194.88.12.0/23 maxlen: 23
2a05:e200::/29 maxlen: 30
Validation: Failed, certificate revoked on Fri 07 Jun 2024 23:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:42:dd:e6:c1:20:6c:d2:78:81:5d:89:e0:45:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9b21bc600532cb5b15a59a5ee972ffb252dff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:6f:78:ae:dd:9f:17:48:fd:9f:7b:30:17:
4c:bc:d0:c0:85:e8:a4:e6:3c:c5:13:29:f3:9b:e5:
8e:20:54:61:02:46:6c:fd:84:d3:2e:eb:f1:34:8e:
5f:04:24:ba:ef:66:96:ff:34:e9:8f:ad:56:51:78:
75:81:e1:57:2f:d3:18:3b:88:69:a6:76:b0:41:a3:
21:d8:fc:84:f9:58:5c:01:4c:4f:85:fd:f0:f3:43:
08:be:96:85:9d:78:de:dd:ef:26:31:52:b3:0a:e0:
cf:6c:40:20:94:e0:00:1d:55:c5:96:68:81:92:ae:
7f:80:be:c8:d1:52:3c:73:15:8e:2e:a5:da:ee:2d:
b9:28:bd:5a:1d:27:3d:69:f6:ca:8b:f8:c4:1e:8e:
ab:50:65:5f:df:e0:00:25:f8:e3:f6:ac:88:f4:09:
90:e5:f7:15:9b:c2:70:72:20:7b:ae:0c:4d:cc:b5:
5d:68:a3:f5:67:91:1c:b2:dc:4b:27:93:8b:0a:96:
87:d0:7b:26:19:25:3b:e5:a6:c3:b1:19:48:bb:d6:
8e:46:a6:c0:a4:64:07:4d:f3:bc:84:41:42:58:22:
58:c7:f2:86:43:e6:a8:27:6e:15:00:8c:87:58:9a:
2b:34:59:70:20:b8:06:d1:40:a7:7b:04:3d:16:78:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9B:21:BC:60:05:32:CB:5B:15:A5:9A:5E:E9:72:FF:B2:52:DF:F1
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/e5shvGAFMstbFaWaXuly_7JS3_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.72.0-78.158.95.255
185.90.140.0/22
194.88.12.0/23
IPv6:
2a05:e200::/29
Signature Algorithm: sha256WithRSAEncryption
61:63:5c:f8:b8:52:a5:af:87:7e:c6:84:ee:23:fb:c5:23:62:
18:be:74:f2:7d:3b:1a:cb:66:7f:f6:be:b7:35:70:34:d1:0f:
a0:e7:89:1f:97:8f:d5:21:5a:d6:74:55:77:29:f2:5b:d1:c5:
df:83:93:fb:46:59:56:9c:55:7b:3e:2c:a8:09:51:0e:e0:9b:
f8:38:b8:db:6c:69:a5:cc:79:23:fb:de:66:da:49:30:1a:02:
e3:2a:7b:48:65:bf:1d:72:94:c1:4c:df:e5:9d:71:2e:09:71:
6b:fa:86:f5:74:2f:fb:3a:4b:e5:d8:69:de:2c:24:f9:93:03:
22:f9:b2:56:e6:ce:c6:65:ab:0b:93:c1:2a:66:2c:fd:fa:20:
c7:26:5e:36:72:c8:f7:14:06:5a:88:6f:2c:be:d8:e8:77:f5:
cc:7e:15:85:a8:f9:88:ed:c8:83:f8:3c:dd:33:67:25:fa:45:
3a:11:0b:94:c3:87:9e:64:81:75:eb:27:cc:b3:35:0f:92:40:
06:bf:e1:e0:ed:e6:53:c9:05:71:96:f8:aa:fd:0e:0a:20:40:
a3:e8:9d:ef:12:f3:d0:82:ae:45:81:21:cd:af:b5:a4:c9:16:
cf:59:60:36:c7:88:2f:22:34:1b:65:70:57:44:f5:fe:6f:ef:
a8:27:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:00 2025 by rpki-client