Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E10YCq3AuXmhvK0VdoOiOv7Ihdw.roa
File: E10YCq3AuXmhvK0VdoOiOv7Ihdw.roa (raw, json)
Hash identifier: oGMpamS37LBO5QayW3BSaODxKX9v2mWo91E+Ro8Ae/E=
Subject key identifier: 13:5D:18:0A:AD:C0:B9:79:A1:BC:AD:15:76:83:A2:3A:FE:C8:85:DC
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0193620AB8D670233279D8D67D3083353D7D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E10YCq3AuXmhvK0VdoOiOv7Ihdw.roa
Signing time: Mon 25 Nov 2024 06:38:10 +0000
ROA not before: Mon 25 Nov 2024 06:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 13:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:0a:b8:d6:70:23:32:79:d8:d6:7d:30:83:35:3d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 25 06:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=135d180aadc0b979a1bcad157683a23afec885dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:b0:00:ae:a3:29:ce:19:51:9e:d5:d6:bd:
2c:82:fc:75:be:9f:c5:0a:7c:e5:6c:33:ba:b9:eb:
2d:b9:a5:0b:14:9c:d2:59:e1:bd:99:99:a1:b2:cd:
eb:e1:82:97:25:29:78:cd:60:72:ad:87:73:51:e2:
a6:13:e6:e4:c4:64:af:03:24:b7:b4:a6:1b:6c:fd:
83:1b:d8:c1:c8:1d:d9:17:cc:af:95:b3:da:7f:41:
d9:61:00:55:72:f3:cf:3b:70:ad:12:e7:85:35:cc:
1b:63:9c:b8:01:53:80:4f:25:0a:5c:40:e7:ac:2f:
72:1c:43:37:a8:a9:70:35:9b:44:b4:ce:84:34:cc:
46:2f:2c:aa:f7:6e:44:ee:1f:61:f1:88:58:e8:06:
e2:b5:bf:fb:23:f8:25:16:92:02:91:67:1a:80:5e:
96:06:37:03:ee:75:38:fc:1b:9e:2a:df:92:3e:02:
0a:9f:ce:b7:f5:31:fe:36:1f:81:04:b5:2c:9e:63:
ab:29:8d:3d:ed:c3:c9:1b:90:59:1d:68:27:6d:21:
a9:f7:27:9a:d6:f7:13:ac:84:48:e3:e4:d3:86:ba:
57:39:8f:c3:76:8d:5d:b1:ff:e2:5d:f5:c4:7c:08:
13:0c:bb:6d:c7:6d:d4:03:0f:18:34:e7:85:70:27:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5D:18:0A:AD:C0:B9:79:A1:BC:AD:15:76:83:A2:3A:FE:C8:85:DC
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E10YCq3AuXmhvK0VdoOiOv7Ihdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.103.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d3:99:79:73:74:25:bb:c2:a6:13:b8:1c:a7:bc:45:06:13:
c2:53:0b:64:25:74:a9:87:fd:b2:8d:64:a2:ba:e8:68:09:25:
67:15:ae:84:5f:27:8c:d0:20:a2:58:cd:54:c3:ed:50:78:85:
e5:1a:16:67:62:8c:7f:e5:4b:f5:1e:94:ac:e7:56:aa:e0:fe:
5e:3b:ee:e8:da:fb:4c:15:a9:ac:68:84:5b:4e:08:f2:ba:bd:
8d:d4:82:cf:83:97:f6:18:9a:ff:b5:4d:59:fe:97:16:14:1f:
ca:eb:6d:03:c6:c2:df:0c:19:39:5f:6f:c1:99:98:45:7b:16:
19:61:f0:f1:7d:3f:fe:44:f8:c8:8e:0b:cc:3c:bf:c2:bd:c3:
b7:9f:51:e5:2c:d2:de:91:72:87:18:2e:6b:e9:74:fc:53:32:
74:95:79:6e:7b:ea:71:e6:da:a1:18:16:aa:91:ae:50:07:58:
80:ac:75:ed:2f:d4:7d:4b:0e:dc:9c:23:3f:58:6b:88:d8:00:
ab:1b:2d:76:3d:ed:bb:d8:a6:82:ac:b2:a3:31:11:fa:b0:cd:
78:1a:ee:00:6a:4e:ee:1f:cb:10:77:3d:8d:c2:5a:52:44:c3:
b2:b0:9f:96:7e:10:14:d9:91:15:5c:fa:ff:fb:7b:fc:34:b5:
8c:72:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:07:12 2025 by rpki-client