Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/eSJoQ1ksOd2ZIYBZgGU1SD_58jc.roa
File: eSJoQ1ksOd2ZIYBZgGU1SD_58jc.roa (raw, json)
Hash identifier: ZbjMvbmEOJKO4UIqIoj5zJ+UdkOV1Qjz5TW009EX9TA=
Subject key identifier: 79:22:68:43:59:2C:39:DD:99:21:80:59:80:65:35:48:3F:F9:F2:37
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 0191E55045010DBF0392034364CE37418B22
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/eSJoQ1ksOd2ZIYBZgGU1SD_58jc.roa
Signing time: Thu 12 Sep 2024 08:18:48 +0000
ROA not before: Thu 12 Sep 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41307
IP address blocks: 88.133.192.0/19 maxlen: 19
89.28.136.0/21 maxlen: 21
109.69.96.0/21 maxlen: 21
185.39.64.0/22 maxlen: 22
2a02:ca00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:50:45:01:0d:bf:03:92:03:43:64:ce:37:41:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Sep 12 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79226843592c39dd99218059806535483ff9f237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:4c:bb:9a:ef:b6:e5:f6:da:89:a8:81:c7:
23:75:07:a9:dd:c8:0d:34:4d:29:f8:97:51:c2:82:
b3:35:fd:f0:53:5d:34:42:b2:35:d4:cd:d9:9f:50:
ba:ad:e6:fe:1d:be:b9:38:88:a7:2b:1b:93:37:7f:
a6:8a:d2:d6:50:42:ca:df:9e:4d:fc:28:80:dd:6f:
fd:9c:99:c4:66:d8:c1:2e:e1:e0:93:a1:44:94:7e:
13:e4:d0:78:63:a0:50:84:fb:ee:f6:f3:c0:59:79:
67:7f:27:93:47:1e:14:ff:b1:f4:b4:e5:38:e8:40:
90:d0:79:cf:a2:48:48:51:b3:a7:11:49:97:fd:b4:
2b:40:9b:bf:94:a9:46:9c:0d:5c:f3:ad:60:63:ea:
6c:0e:86:88:69:12:f7:13:20:e9:41:c8:a1:b5:0e:
2b:57:54:9f:f4:5e:d1:ee:48:40:97:38:42:66:4b:
d3:3c:65:f4:48:d4:aa:06:a9:a2:f5:cd:98:fc:08:
59:4f:88:fe:a0:14:d8:21:65:0e:82:fb:0b:e9:34:
87:4e:e1:f7:8f:cc:7d:14:99:71:fc:52:b6:43:57:
0e:07:7f:62:75:54:62:1e:0b:7c:56:fc:15:b5:0a:
6f:a4:3f:e9:8e:a4:c7:d3:7e:3e:01:3a:13:c7:46:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:68:43:59:2C:39:DD:99:21:80:59:80:65:35:48:3F:F9:F2:37
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/eSJoQ1ksOd2ZIYBZgGU1SD_58jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.133.192.0/19
89.28.136.0/21
109.69.96.0/21
185.39.64.0/22
IPv6:
2a02:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
a2:b3:a8:37:c1:e6:1c:4f:00:ae:2e:7f:28:f7:0b:d2:d7:0a:
09:43:d2:64:46:cd:ff:d2:47:93:1b:6d:de:c1:87:2c:d5:12:
ad:93:78:e7:6c:5d:5f:90:cd:7c:ad:59:11:3a:96:94:43:0f:
a9:a7:bd:50:0c:1e:d4:00:32:4b:89:12:f7:ef:eb:d3:83:3a:
41:23:e3:e3:de:f2:5c:00:52:ea:e6:21:3a:9c:0d:ab:76:ce:
09:01:9a:85:5b:6a:13:6c:6d:13:58:61:46:3e:91:96:f0:87:
ab:36:2d:d6:2d:d0:ae:20:45:ed:a4:46:b4:f5:34:e6:5e:d3:
03:23:3f:91:20:e0:fd:24:0d:19:05:25:c7:d7:1c:9d:cb:76:
33:5d:c7:b4:75:ca:bf:19:f2:db:a8:1b:8b:a4:7f:7a:0a:c4:
57:60:4f:d1:e9:b7:98:a2:d8:98:75:87:69:50:fa:f9:71:60:
96:66:23:45:e8:a8:bd:50:48:b2:26:ba:af:2f:e2:52:c7:7d:
15:07:84:61:69:be:05:15:92:17:ba:88:e1:0e:ed:ad:2c:80:
02:9e:b6:d6:df:85:6f:7e:7a:54:4e:02:16:47:5b:9d:ca:1b:
60:d6:f1:fb:d4:dd:bb:1c:ea:07:5a:bd:df:ef:52:56:a0:62:
37:50:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:16:03 2025 by rpki-client