Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/XpYXoohAidqmN7u-b_y_Bi7hAKg.roa
File: XpYXoohAidqmN7u-b_y_Bi7hAKg.roa (raw, json)
Hash identifier: 7Qcug/1hIc7AEhztW0aqrmpsrXyfU3nfW4YLLAdz85M=
Subject key identifier: 5E:96:17:A2:88:40:89:DA:A6:37:BB:BE:6F:FC:BF:06:2E:E1:00:A8
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 01936413A784FCD26BC9744A65843964BCB0
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/XpYXoohAidqmN7u-b_y_Bi7hAKg.roa
Signing time: Mon 25 Nov 2024 16:07:09 +0000
ROA not before: Mon 25 Nov 2024 16:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 5.42.199.0/24 maxlen: 24
5.253.63.0/24 maxlen: 24
45.129.78.0/24 maxlen: 24
77.83.85.0/24 maxlen: 24
79.133.180.0/24 maxlen: 24
89.191.234.0/24 maxlen: 24
176.119.141.0/24 maxlen: 24
194.113.153.0/24 maxlen: 24
194.147.215.0/24 maxlen: 24
195.226.194.0/24 maxlen: 24
195.245.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 16:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:13:a7:84:fc:d2:6b:c9:74:4a:65:84:39:64:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Nov 25 16:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e9617a2884089daa637bbbe6ffcbf062ee100a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:aa:c7:34:d7:b5:6e:ba:0c:4e:22:d0:dd:
6c:65:fb:5e:05:f7:2a:ee:1f:07:33:de:eb:65:68:
80:e3:b8:35:8c:2d:5f:b0:8a:0d:89:be:3f:25:70:
05:7c:76:f5:1c:be:ba:1d:ef:62:d8:f2:f2:83:be:
9b:4d:22:6e:f0:6b:72:1e:bf:64:f2:e1:2b:c8:7f:
2d:ff:d4:8f:3c:a2:1f:b7:f4:09:a4:89:25:35:be:
4c:1b:13:28:8c:dd:f1:dc:8d:a7:fe:04:65:fa:33:
be:5b:bc:5b:f5:5d:a9:59:e4:45:7d:0c:96:3d:e1:
be:d2:e6:26:90:a2:c7:90:af:86:0e:09:5a:49:82:
31:7d:e4:87:46:23:3b:7a:72:38:0e:bc:87:49:75:
20:9d:88:0e:2d:d0:85:3c:e0:c4:88:57:ba:da:97:
66:4d:19:cd:8a:6d:dc:e8:55:5d:33:fd:d1:9d:22:
b9:b9:cf:0d:e6:13:54:27:bc:62:c9:fd:bf:ee:a8:
72:e0:24:85:cc:ec:33:73:5e:de:ee:db:23:72:73:
10:07:dd:27:93:0f:17:d9:31:4d:a1:1e:49:1d:28:
e2:81:0c:2f:6e:f3:a2:52:01:2d:04:3b:64:7d:2b:
42:29:70:19:1e:51:90:ba:17:69:4a:41:04:1f:ea:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:17:A2:88:40:89:DA:A6:37:BB:BE:6F:FC:BF:06:2E:E1:00:A8
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/XpYXoohAidqmN7u-b_y_Bi7hAKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.199.0/24
5.253.63.0/24
45.129.78.0/24
77.83.85.0/24
79.133.180.0/24
89.191.234.0/24
176.119.141.0/24
194.113.153.0/24
194.147.215.0/24
195.226.194.0/24
195.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:18:85:c9:66:e4:c8:0f:f3:7b:7c:43:01:83:68:5e:6f:f7:
3e:07:bf:80:07:4e:0b:d8:f4:94:d9:23:ba:89:0e:d4:16:6f:
fa:2e:56:b1:72:92:c4:ed:1f:a0:71:e9:f6:e2:18:f5:5b:66:
95:16:4c:0c:c9:12:44:ab:f7:d7:1f:77:bd:47:c1:3e:a8:c7:
e7:e7:07:63:22:ef:6f:c7:1e:bf:24:30:83:7e:58:4d:2c:f7:
ab:cc:1a:78:0e:99:83:01:0d:39:3f:5c:2c:43:71:6f:75:c2:
56:c8:ce:da:ce:2c:77:bc:b2:26:77:d5:22:cc:c9:92:66:4a:
de:ed:71:07:13:c8:a1:34:ba:12:c2:51:82:97:77:a1:a8:b7:
34:9d:f5:c6:6a:a4:26:36:5a:e8:1c:7c:3b:87:f9:b9:6c:ed:
e6:b8:df:39:58:18:02:b5:12:80:49:14:9a:67:ef:b9:c7:73:
9a:66:23:88:d5:cb:e3:1e:41:fa:60:ce:57:0e:2a:2c:96:0a:
c2:13:06:31:06:8e:78:aa:bd:d4:e4:58:5d:1c:a0:10:87:28:
90:4a:26:02:95:6e:6c:fa:3a:f3:1b:1a:3d:b0:e8:a4:6f:bc:
66:eb:59:4a:ac:a2:34:63:10:9b:67:7d:df:d9:56:09:83:3c:
91:fb:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:23:36 2025 by rpki-client