Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/5EQFGtH_hEStG3Vx_NcFRFEVsOQ.roa
File: 5EQFGtH_hEStG3Vx_NcFRFEVsOQ.roa (raw, json)
Hash identifier: OcP3vhQNlK7o0qze59A9tfk+KPk/d7c8t/kn82ZNnwo=
Subject key identifier: E4:44:05:1A:D1:FF:84:44:AD:1B:75:71:FC:D7:05:44:51:15:B0:E4
Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial: 01902680D0734170B1DC0AEAAD6E95ADBE58
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/5EQFGtH_hEStG3Vx_NcFRFEVsOQ.roa
Signing time: Mon 17 Jun 2024 14:01:34 +0000
ROA not before: Mon 17 Jun 2024 14:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43060
IP address blocks: 91.196.76.0/23 maxlen: 24
94.158.48.0/20 maxlen: 20
94.158.48.0/21 maxlen: 21
94.158.56.0/24 maxlen: 24
94.158.57.0/24 maxlen: 24
94.158.58.0/24 maxlen: 24
94.158.59.0/24 maxlen: 24
94.158.60.0/24 maxlen: 24
94.158.61.0/24 maxlen: 24
94.158.62.0/24 maxlen: 24
94.158.63.0/24 maxlen: 24
109.207.242.0/23 maxlen: 24
109.207.242.0/24 maxlen: 24
109.207.244.0/22 maxlen: 24
109.207.248.0/22 maxlen: 24
185.196.216.0/22 maxlen: 22
2a04:1b80::/32 maxlen: 36
Validation: Failed, certificate revoked on Tue 27 Aug 2024 05:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:80:d0:73:41:70:b1:dc:0a:ea:ad:6e:95:ad:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Validity
Not Before: Jun 17 14:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e444051ad1ff8444ad1b7571fcd705445115b0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:bb:bb:33:53:8d:cd:5a:66:45:26:57:bd:
b9:7c:8d:98:3d:96:12:8a:ac:18:42:13:0a:c3:69:
7f:a5:9f:79:af:f0:54:b6:77:ee:d0:88:d7:c0:3d:
5c:76:16:4d:2c:31:b4:31:38:24:f9:39:b6:f3:72:
83:06:d1:df:c7:25:79:72:7c:f8:ec:cc:25:a4:ba:
88:e0:cc:c6:ab:0c:09:ef:91:35:c2:3e:38:dd:81:
2e:59:d3:fa:56:0c:35:6f:7e:df:df:af:d5:0f:a3:
0a:e1:c5:0c:dd:59:d6:90:a2:bd:c9:e2:57:9c:0b:
b2:83:73:bf:1c:c0:12:4c:0e:b5:1b:bb:2c:bd:3c:
7c:d0:8d:2c:6b:a9:8c:3c:ef:f8:d1:c5:8f:cf:4c:
ee:b0:8e:87:66:e0:84:e2:d0:4f:d0:8d:fa:9f:f0:
87:35:b0:f6:31:b9:7f:de:83:31:47:d6:18:fc:34:
f4:a1:ca:9f:a7:28:44:4f:9d:50:3e:9b:fa:af:f3:
42:c7:c4:5c:f4:41:8e:8d:48:e0:18:f3:cb:45:7d:
62:2b:74:71:24:5d:b6:ef:88:b8:7e:c3:48:d4:cd:
df:72:c2:cb:37:5b:28:30:8f:10:11:a0:27:d4:fa:
76:ed:9e:fc:ad:03:00:18:9e:b6:18:7b:ec:d5:d0:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:05:1A:D1:FF:84:44:AD:1B:75:71:FC:D7:05:44:51:15:B0:E4
X509v3 Authority Key Identifier:
keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/5EQFGtH_hEStG3Vx_NcFRFEVsOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.76.0/23
94.158.48.0/20
109.207.242.0-109.207.251.255
185.196.216.0/22
IPv6:
2a04:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
14:df:4f:b4:9b:0d:3e:06:cf:eb:87:9d:ff:93:1e:90:cc:82:
7f:bf:f5:d8:4e:c4:ec:70:dd:f9:3e:44:7c:8d:3c:da:59:be:
2a:b5:8e:b9:8e:f1:a9:be:a3:9e:e9:76:52:a0:d9:02:4e:1d:
c8:32:14:df:6f:53:fe:a0:af:f5:74:85:8c:0a:59:2e:77:9c:
4e:8e:af:f9:d3:63:fd:37:40:f7:2b:ae:3d:cf:d6:ef:d5:ce:
aa:3b:e9:58:66:d0:cd:b7:64:a5:41:39:73:8a:b6:72:21:82:
5f:75:59:6d:cd:90:da:4d:14:6d:c9:b5:d8:22:62:76:ba:c1:
4a:22:de:d0:94:8a:a4:22:08:c0:71:a8:20:4c:55:d5:d8:8b:
f7:5d:e7:a9:b9:55:52:a9:35:ae:95:54:6b:da:28:1b:95:37:
43:14:9b:51:ea:22:a0:73:96:45:54:20:10:c7:70:06:62:c4:
55:cc:e3:26:9c:7c:b1:12:31:09:73:36:33:36:0b:6a:9a:df:
1a:09:22:1e:5d:5b:8a:df:87:2e:05:e5:14:81:a7:fc:af:5f:
9e:ae:eb:d7:81:41:c6:32:d7:d9:0d:db:e2:bb:67:69:bc:e7:
bc:2e:94:eb:38:0e:34:da:be:ae:e6:f7:69:09:be:30:39:70:
16:17:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:55 2025 by rpki-client