Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/7Hh55dA6BMk7M90lLasQzANbgw4.roa
File: 7Hh55dA6BMk7M90lLasQzANbgw4.roa (raw, json)
Hash identifier: kGZFAUSpIC6FgGQmKEdAPlUWusRqO03wHVApQVufAqc=
Subject key identifier: EC:78:79:E5:D0:3A:04:C9:3B:33:DD:25:2D:AB:10:CC:03:5B:83:0E
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 018CC802E0A87592883D04B46F82DAC5B52F
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/7Hh55dA6BMk7M90lLasQzANbgw4.roa
Signing time: Tue 02 Jan 2024 02:31:20 +0000
ROA not before: Tue 02 Jan 2024 02:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12453
IP address blocks: 2.56.160.0/22 maxlen: 22
195.93.174.0/23 maxlen: 23
194.59.177.0/24 maxlen: 24
91.223.248.0/24 maxlen: 24
185.31.52.0/22 maxlen: 22
185.224.24.0/22 maxlen: 22
185.85.32.0/22 maxlen: 22
185.155.124.0/22 maxlen: 22
2a0d:5dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 01 Oct 2024 09:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e0:a8:75:92:88:3d:04:b4:6f:82:da:c5:b5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: Jan 2 02:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec7879e5d03a04c93b33dd252dab10cc035b830e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:9b:81:2a:22:b9:fa:31:5e:dd:95:65:b1:
cb:fd:ab:16:6e:02:31:e9:48:88:8a:be:2d:75:53:
ed:cb:25:90:83:4a:09:ce:4e:51:4f:6b:f2:26:07:
6a:49:9a:72:d0:3b:62:83:4e:4f:92:b3:df:99:cc:
d8:a1:cb:00:f6:39:f6:68:e6:4d:58:fa:a7:a9:c0:
87:93:aa:49:0a:04:63:5d:85:a5:ec:fd:54:0e:55:
78:26:ac:28:3d:7f:44:c7:fa:83:99:05:9f:5f:c7:
c0:72:75:2b:9d:a1:ab:13:93:4d:b6:d8:a6:96:f3:
3f:52:1b:1e:d1:d6:d0:ff:5e:48:b9:3f:19:45:d9:
9a:e8:56:2b:1b:18:63:41:43:e1:89:60:34:a1:0d:
f1:3f:fa:58:b0:a0:f1:f0:ed:5f:a8:4d:d3:87:e9:
60:b5:a4:b9:f4:72:42:d2:cf:c9:38:2a:d8:91:47:
1a:d4:51:cc:f5:ec:d6:99:4b:81:73:c1:e0:3a:a2:
eb:89:d6:c4:a9:9a:f4:59:2c:b8:f4:c4:b8:81:67:
fd:a4:e5:f1:83:2c:16:7a:09:fb:4a:a9:48:e7:81:
47:3e:3e:75:d8:31:8e:55:87:bd:da:17:9e:53:87:
5a:b5:0e:92:fe:78:55:bb:f6:2a:69:38:0e:f7:21:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:78:79:E5:D0:3A:04:C9:3B:33:DD:25:2D:AB:10:CC:03:5B:83:0E
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/7Hh55dA6BMk7M90lLasQzANbgw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.160.0/22
91.223.248.0/24
185.31.52.0/22
185.85.32.0/22
185.155.124.0/22
185.224.24.0/22
194.59.177.0/24
195.93.174.0/23
IPv6:
2a0d:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:5d:17:ee:8a:f6:cc:98:2c:6d:c2:40:6a:3b:85:33:d2:e1:
bb:84:7d:5f:7b:be:c5:7e:0c:71:2c:87:b9:f8:76:2d:27:80:
8d:60:ad:6b:1e:67:4b:b1:ee:ee:b6:5b:b3:6c:4d:cc:28:6a:
b3:2a:0f:d3:5b:89:67:4b:13:b7:b8:5a:16:d6:0d:11:1a:85:
7a:58:46:b3:17:de:ba:53:8f:bf:96:69:df:94:b3:d5:0d:f1:
ff:a1:82:06:88:e6:33:3a:3a:a9:ce:c0:ce:a2:21:67:8e:6c:
ad:7e:4c:03:88:6e:f0:6c:45:77:c7:2e:ec:c0:05:bc:19:e8:
33:7d:f6:99:33:41:72:03:9e:51:b1:95:93:e3:a8:c8:3a:fc:
7d:4f:3a:59:48:75:9a:0f:a5:d0:55:5a:29:0e:a5:20:a6:6b:
df:f9:5e:08:1a:79:27:3c:ae:8f:75:09:63:45:fd:c4:83:97:
a7:44:d5:db:9e:8b:04:f8:ce:00:0f:ee:2e:dc:45:aa:00:03:
b4:92:fd:dd:af:ab:ce:77:17:18:19:a4:09:42:ee:87:eb:11:
20:3d:fe:ba:20:0c:c0:6b:93:ca:a9:ff:02:6d:fd:90:f4:3e:
57:26:f0:54:57:f4:7d:79:ad:a8:24:01:91:45:59:d8:03:16:
b3:fe:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:32 2025 by rpki-client