Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/EQm-xHRTSTdyLkKc98IyZAUbENA.roa
File: EQm-xHRTSTdyLkKc98IyZAUbENA.roa (raw, json)
Hash identifier: H1niJE9qUsM+kaic5fFZDuBKFJnByMlisZBuVY7wdJI=
Subject key identifier: 11:09:BE:C4:74:53:49:37:72:2E:42:9C:F7:C2:32:64:05:1B:10:D0
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 019165BC43A0F707560BD63136609288EA6D
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/EQm-xHRTSTdyLkKc98IyZAUbENA.roa
Signing time: Sun 18 Aug 2024 13:45:22 +0000
ROA not before: Sun 18 Aug 2024 13:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60256
IP address blocks: 5.145.112.0/23 maxlen: 23
5.145.112.0/24 maxlen: 24
5.145.113.0/24 maxlen: 24
5.145.115.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
5.145.119.0/24 maxlen: 24
185.24.254.0/24 maxlen: 24
2a04:2f01:1::/48 maxlen: 48
2a04:2f01:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Aug 2024 08:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:bc:43:a0:f7:07:56:0b:d6:31:36:60:92:88:ea:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Aug 18 13:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1109bec474534937722e429cf7c23264051b10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:14:49:4f:58:29:3a:b3:9e:67:d8:e8:1d:
e4:82:43:14:8a:71:4f:ce:ad:17:ba:ac:21:2a:01:
d1:ee:69:45:11:4e:21:1f:cf:27:fc:09:94:05:34:
94:f3:87:27:2d:41:5f:8c:23:2f:47:59:24:15:61:
30:fc:b6:10:64:a0:63:71:4f:b3:79:ec:f0:8c:4e:
fa:b6:de:e7:ad:5f:24:4a:b7:6c:b1:fd:6a:c3:fe:
9b:c7:71:ce:db:9a:19:27:3b:12:2a:15:28:10:37:
97:21:41:85:dc:f4:0f:10:97:d9:db:a6:3a:24:02:
1f:eb:20:1a:f1:88:f2:8a:fa:cb:05:c9:e4:9e:aa:
bc:96:c3:01:3b:8f:e5:35:4c:7d:dd:3c:a7:5e:38:
49:12:38:ba:34:4e:d0:c0:21:5d:c0:e0:4a:61:3f:
66:74:c3:5f:07:a9:2f:58:44:9b:d6:e3:4a:7d:27:
84:53:d9:ea:ec:02:b6:04:dc:98:d2:bf:a9:57:72:
47:eb:37:2e:68:4e:d0:10:9e:30:63:1b:56:d2:b6:
bb:10:6b:21:41:93:e3:0e:6a:97:ea:9a:09:9d:91:
c4:2d:c7:3f:92:88:32:c8:21:e0:a8:20:a8:00:bf:
3a:82:98:ad:58:6e:2b:34:14:13:c8:17:19:d4:82:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:BE:C4:74:53:49:37:72:2E:42:9C:F7:C2:32:64:05:1B:10:D0
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/EQm-xHRTSTdyLkKc98IyZAUbENA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.112.0/23
5.145.115.0/24
5.145.118.0/23
185.24.254.0/24
IPv6:
2a04:2f01:1::-2a04:2f01:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c7:c5:d3:05:4f:82:ca:15:69:e2:22:e9:e6:35:23:3e:21:93:
e0:74:5d:6b:16:86:41:4e:38:25:ee:ae:1d:28:b2:dc:8d:a9:
03:6e:6d:4c:15:51:71:c4:83:66:32:53:a3:6b:03:6a:83:72:
43:06:74:74:b5:d3:39:16:8c:e4:81:2e:5a:aa:24:d6:df:b7:
37:d7:81:3f:38:27:0d:d3:91:a9:31:7e:77:ed:31:73:f3:19:
dc:26:c6:04:d3:e2:0c:ab:66:57:73:2f:41:be:99:38:de:01:
14:3c:49:e5:64:75:24:9d:f5:93:02:9a:c6:b4:a3:b3:a3:5b:
d1:1b:4d:b0:bd:aa:a4:ab:cc:0a:d7:dc:ab:40:23:be:b2:22:
0c:44:2e:8c:a4:aa:78:94:d3:67:bf:0c:d6:24:6b:30:14:ad:
c9:49:74:04:d7:1d:bf:cb:d2:4e:95:6b:59:80:82:6b:de:7f:
dc:f3:2e:13:0f:cd:23:ca:14:fa:0c:de:f9:a3:02:7f:32:f8:
63:d3:dc:96:85:f0:7e:84:14:b0:46:6f:b7:6e:c5:57:41:ec:
cd:da:cd:c8:df:32:36:da:28:c0:de:8a:65:ec:1d:a1:5f:f7:
a1:48:a9:29:de:28:fc:bf:cf:b6:ad:e2:38:22:17:8a:cc:57:
83:ed:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:54 2025 by rpki-client