Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/eYFazceKNNmIP1mtu6fPXIzkBqA.roa
File: eYFazceKNNmIP1mtu6fPXIzkBqA.roa (raw, json)
Hash identifier: ealQkKP+Zj4z/HLyKyAp9AEhBEoxDIR+FIl/SDFnG+o=
Subject key identifier: 79:81:5A:CD:C7:8A:34:D9:88:3F:59:AD:BB:A7:CF:5C:8C:E4:06:A0
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01942823932A8CF02C593154EE0CFCCF595E
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/eYFazceKNNmIP1mtu6fPXIzkBqA.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59542
IP address blocks: 145.7.49.0/24 maxlen: 24
145.7.56.0/21 maxlen: 21
193.173.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 06:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:93:2a:8c:f0:2c:59:31:54:ee:0c:fc:cf:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79815acdc78a34d9883f59adbba7cf5c8ce406a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:9f:fe:6e:e1:95:56:ae:ab:6d:9d:48:61:
b2:c5:95:59:37:67:15:94:b8:d7:88:94:b7:15:09:
e8:6f:0e:62:18:6d:46:cc:12:63:7b:f2:9f:ee:c4:
bb:70:00:f8:d2:c4:0f:2c:20:a0:3a:99:57:d8:d6:
f3:9c:c2:97:bf:4e:11:ca:a4:b2:58:2b:ab:8f:34:
a8:75:71:d3:4a:c5:a4:29:fc:d9:37:8b:20:61:06:
da:b8:66:cf:cb:8d:ea:87:a0:96:56:c4:e5:e4:77:
89:28:8d:f0:6d:e5:85:b0:1b:71:cc:72:b0:07:72:
73:08:04:99:bf:49:2b:e0:42:a3:c7:e6:24:f0:8b:
f1:c5:6d:9f:61:25:ba:d8:7f:24:b8:5e:cd:e4:17:
7f:ea:ff:24:68:44:33:47:56:b2:5a:a9:81:c7:f5:
f5:84:da:97:6b:96:93:d4:da:8f:95:28:2a:40:70:
46:4c:6d:0c:f1:53:1f:70:f0:aa:4e:bd:5f:4f:53:
53:4a:dd:d7:f3:e3:34:0b:c9:b7:f0:a3:d9:2d:be:
7f:27:7a:a8:fb:11:a7:91:36:70:4d:1e:c0:4b:40:
34:00:3d:7a:93:22:15:93:17:09:d6:35:e1:72:72:
81:bf:34:70:ac:45:88:89:26:2d:38:aa:5b:fb:97:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:5A:CD:C7:8A:34:D9:88:3F:59:AD:BB:A7:CF:5C:8C:E4:06:A0
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/eYFazceKNNmIP1mtu6fPXIzkBqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.7.49.0/24
145.7.56.0/21
193.173.196.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f2:f3:d7:34:4b:31:e9:93:bd:63:41:14:85:03:cc:da:b9:
e7:ba:27:20:ae:d7:1c:ae:6f:eb:6d:8a:c2:94:50:84:77:1e:
f4:d9:0b:25:24:87:89:02:45:a6:2c:54:af:b8:b4:7e:32:1b:
80:4c:88:8a:27:f7:57:5d:b7:48:db:e3:53:24:d9:1a:a8:3b:
eb:32:f9:1e:15:0f:2c:81:7d:19:e6:ce:4f:99:1d:90:a4:05:
db:22:dc:85:fd:08:b1:bd:23:ea:ee:07:5c:2e:0f:49:62:51:
74:01:b9:83:8e:76:06:89:68:69:ba:bd:14:2e:95:cb:12:3e:
18:d5:b3:64:a2:0d:a2:d0:5b:a2:70:42:1b:1a:3f:ed:30:7d:
4e:7e:91:09:fd:82:b8:49:d0:c8:99:7b:cf:c6:57:87:bf:bf:
3b:ee:76:a0:7c:ab:f9:73:a2:2c:de:71:ff:2f:33:fb:35:4b:
54:62:cd:78:0b:1e:5d:8a:4d:a2:e1:79:9b:8e:3c:02:56:f7:
a3:e2:17:b0:00:b4:a6:33:52:5a:f7:a0:c9:52:2c:4e:46:72:
41:22:2a:02:f4:10:88:fa:44:b2:4a:f0:c0:1c:a4:c6:f5:4a:
8e:79:fa:47:f0:b9:05:89:5b:07:39:89:1d:66:28:13:68:18:
41:91:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:41 2025 by rpki-client