Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/ebjQTm0uuGQeoSfQlLqXQ8tDqRA.roa
File: ebjQTm0uuGQeoSfQlLqXQ8tDqRA.roa (raw, json)
Hash identifier: qB16N5x+ThJGilwi1GIAWQlfub4R4VTEcvzrBoiCdg4=
Subject key identifier: 79:B8:D0:4E:6D:2E:B8:64:1E:A1:27:D0:94:BA:97:43:CB:43:A9:10
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018F158648C7F97708C55BFEE62D96782DF5
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/ebjQTm0uuGQeoSfQlLqXQ8tDqRA.roa
Signing time: Thu 25 Apr 2024 13:51:13 +0000
ROA not before: Thu 25 Apr 2024 13:51:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34568
IP address blocks: 45.157.137.0/24 maxlen: 24
77.87.248.0/21 maxlen: 24
84.246.120.0/21 maxlen: 24
185.217.192.0/22 maxlen: 24
193.138.81.0/24 maxlen: 24
194.116.234.0/23 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 09:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:86:48:c7:f9:77:08:c5:5b:fe:e6:2d:96:78:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Apr 25 13:51:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79b8d04e6d2eb8641ea127d094ba9743cb43a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:3d:d7:9c:e4:82:f5:18:e7:fb:ea:52:76:
50:46:61:89:68:86:8e:d9:a3:bb:f4:1e:1c:8b:1d:
b8:ed:ae:d5:00:35:32:06:9f:11:41:dd:5f:de:ba:
a8:3d:6a:91:c8:4a:da:58:0a:04:5d:62:13:45:57:
c1:14:72:97:28:8b:3e:75:d6:1f:de:5b:cb:c7:57:
32:5a:7c:ff:af:7d:5b:30:9d:7f:83:5e:89:5b:84:
fd:35:6f:21:75:12:83:89:7c:b3:b8:6d:0c:b0:40:
90:75:f3:b8:1b:1d:63:aa:40:ce:9e:32:d3:c8:81:
49:71:0a:6b:d4:cd:3b:0b:0b:c1:ba:a2:4b:0f:9e:
d6:42:62:f8:9f:fc:9b:2b:25:d3:52:de:0f:2c:9f:
44:75:41:c0:ed:a7:aa:42:d8:7b:21:cf:a2:42:b6:
4a:c7:c5:fe:83:db:e3:2b:0e:1b:70:c4:3d:19:69:
f7:17:52:11:49:35:2c:83:b8:e1:b4:ec:c3:66:76:
39:ca:54:58:37:df:50:b1:45:d1:80:22:15:22:20:
9d:02:d7:f5:35:65:22:c4:e1:bd:ad:dd:11:68:28:
70:25:12:b4:54:d1:a3:39:06:ba:12:54:ac:cb:44:
9e:13:f3:03:a6:76:16:c4:00:5a:1f:b0:26:d1:f2:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:D0:4E:6D:2E:B8:64:1E:A1:27:D0:94:BA:97:43:CB:43:A9:10
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/ebjQTm0uuGQeoSfQlLqXQ8tDqRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.137.0/24
77.87.248.0/21
84.246.120.0/21
185.217.192.0/22
193.138.81.0/24
194.116.234.0/23
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
1a:88:9e:69:8f:c6:df:db:f5:61:0f:2d:99:6e:b5:53:11:c5:
e4:a5:75:a0:7c:73:97:f8:a2:e2:39:3a:ce:d4:71:d9:27:52:
cb:f4:16:12:42:44:f3:f8:6f:86:e4:58:49:46:dc:84:ec:e1:
eb:55:c0:53:e6:c5:37:8c:14:57:ff:ff:76:c3:29:54:c2:47:
42:77:8d:83:aa:9a:3b:f7:76:b7:2a:f7:99:04:a5:29:ce:a9:
21:ab:16:a1:06:45:92:3a:8b:ab:dd:5f:77:04:c6:4d:c7:a6:
2c:8e:e7:4d:68:fc:92:4e:de:2f:4b:f5:83:3a:21:e7:52:15:
a8:99:b6:02:14:83:aa:bc:6a:06:52:8f:a9:dc:92:eb:06:46:
4a:8a:ba:1c:fc:42:5b:0a:97:8a:eb:a4:e0:6b:d9:59:4e:ae:
0e:40:a1:39:5c:df:21:96:93:6f:07:db:66:89:e1:37:14:7c:
b8:7c:27:ce:6d:4c:4e:57:be:fb:4c:10:d0:6e:82:a1:a9:38:
ae:ca:60:5b:14:e7:b7:59:45:31:ca:5d:c6:07:ba:92:a6:bf:
f5:56:07:c3:4c:85:c5:e5:04:35:75:7b:ee:bb:bb:a7:4a:b7:
0f:b9:5c:0c:72:03:d1:07:e9:2e:a2:3f:34:e3:14:64:9d:1a:
f2:2d:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:09 2025 by rpki-client