Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/ef7ET2nEDhXbW8dkNLAiIEEWSSA.roa
File: ef7ET2nEDhXbW8dkNLAiIEEWSSA.roa (raw, json)
Hash identifier: 9zx+YXr0l3EISIwSoD/oXwiQo/d3BcmGd68UIMnFQ1Q=
Subject key identifier: 79:FE:C4:4F:69:C4:0E:15:DB:5B:C7:64:34:B0:22:20:41:16:49:20
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 01946FC592C03A72121E7E33C22EDC6EC7CC
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/ef7ET2nEDhXbW8dkNLAiIEEWSSA.roa
Signing time: Thu 16 Jan 2025 15:40:06 +0000
ROA not before: Thu 16 Jan 2025 15:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212496
IP address blocks: 141.98.184.0/22 maxlen: 22
193.169.194.0/23 maxlen: 23
194.9.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 20:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:c5:92:c0:3a:72:12:1e:7e:33:c2:2e:dc:6e:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jan 16 15:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79fec44f69c40e15db5bc76434b0222041164920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:8d:73:06:2a:55:52:dd:85:c8:63:92:5e:
34:69:dd:72:c1:0c:b5:3d:bc:c1:de:ab:bf:c5:64:
cd:71:8f:80:10:21:ed:d4:04:86:cb:1a:17:18:c9:
9d:86:f5:e7:d3:45:e7:d1:da:ab:a9:de:32:0b:7d:
89:33:2a:4c:14:4f:f2:9d:17:b9:cb:10:6e:46:bc:
fa:f8:d7:ca:d4:1c:de:19:6a:c5:0d:b9:d1:d5:62:
7b:32:38:24:64:da:68:46:d6:12:30:b8:55:be:e2:
3f:1c:62:74:76:b4:e8:0f:bd:b9:a0:2f:0f:cf:18:
1f:eb:fe:b8:65:9c:bd:bc:90:a3:a3:79:fe:03:e7:
bc:c9:75:a9:2d:06:b4:b2:8e:f7:ef:7e:ba:41:cd:
14:59:e2:df:d5:61:10:51:bf:e4:da:a1:69:c0:6f:
a9:66:d7:05:3e:90:eb:65:87:1e:6f:ff:55:51:cf:
f3:f1:0f:fb:94:d0:62:e2:b0:7f:50:59:1d:0e:89:
6b:25:67:9b:2b:50:ee:af:2c:8a:0c:be:50:e4:85:
b1:36:e4:d8:e1:ae:f3:d8:16:86:ce:77:59:63:65:
5a:dc:47:54:7d:86:3d:63:1c:79:0b:c3:3b:e7:02:
09:d3:84:08:87:0c:5b:51:6e:c2:08:1a:12:20:a2:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:C4:4F:69:C4:0E:15:DB:5B:C7:64:34:B0:22:20:41:16:49:20
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/ef7ET2nEDhXbW8dkNLAiIEEWSSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.184.0/22
193.169.194.0/23
194.9.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:84:2b:7e:f0:9d:57:c3:fb:a2:94:9f:ea:83:aa:ed:b0:c6:
ab:cc:64:c1:ac:ba:38:78:28:af:b5:62:92:76:70:0a:08:a6:
1e:bf:a8:f2:6c:8f:03:ad:52:58:d8:eb:52:3a:c3:02:18:17:
b9:42:3c:aa:9a:41:f9:7c:e7:4f:61:00:5e:0c:6b:32:54:3d:
32:b6:5d:9b:c4:54:ee:56:72:f0:68:36:55:d1:d6:e5:ff:54:
15:46:9f:18:66:68:25:a5:69:ab:af:8f:42:d5:0f:53:04:ce:
06:48:b6:8d:d0:c9:57:e6:08:e0:70:f3:4b:da:97:f1:88:e4:
fd:d9:51:e6:4a:30:eb:db:8d:10:2c:5c:46:cf:24:55:a9:a2:
7b:e5:30:be:5d:4d:af:b4:64:0f:92:21:55:02:ca:c6:f9:b4:
ca:e2:c0:a2:c1:46:02:b3:de:32:97:9c:5d:3e:76:dd:d4:4b:
71:b4:66:30:4c:b9:2a:23:65:41:f3:0c:cd:30:4c:80:99:44:
3f:f3:7f:a0:81:22:b1:0e:b4:1e:42:54:23:63:b4:4a:4e:76:
b2:fb:03:fb:42:ae:b4:24:d7:78:ba:49:19:87:98:a0:47:74:
c0:3d:d6:a3:22:34:3a:41:45:82:7f:3a:3f:14:03:96:c6:42:
24:3d:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 08:00:27 2025 by rpki-client