Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/eOZDV81HkWBsd2L61eUrBHigZWM.roa
File: eOZDV81HkWBsd2L61eUrBHigZWM.roa (raw, json)
Hash identifier: TmDgY+fYKyp1tZ5Bwq/TGh4buQGfF+CbDPPVbuNJHYM=
Subject key identifier: 78:E6:43:57:CD:47:91:60:6C:77:62:FA:D5:E5:2B:04:78:A0:65:63
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 018CC794B7371E450BF6FCF097C73FB096A8
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/eOZDV81HkWBsd2L61eUrBHigZWM.roa
Signing time: Tue 02 Jan 2024 00:31:01 +0000
ROA not before: Tue 02 Jan 2024 00:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202261
IP address blocks: 194.147.137.0/24 maxlen: 24
194.147.136.0/24 maxlen: 24
2a07:e480::/48 maxlen: 48
2a07:e480:100::/48 maxlen: 48
2a07:e480:101::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b7:37:1e:45:0b:f6:fc:f0:97:c7:3f:b0:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Jan 2 00:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e64357cd4791606c7762fad5e52b0478a06563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:58:6b:31:00:78:6d:60:ff:99:67:c1:ad:
0e:31:e2:84:32:ad:4c:eb:cf:d6:b5:8e:c6:92:7a:
74:14:a4:9e:f3:be:48:63:e2:4f:ff:3c:b9:39:e7:
33:c0:a2:07:b6:b6:ad:44:d3:d8:42:6d:6d:9b:38:
48:79:61:54:23:03:4b:66:44:43:00:89:9b:7f:f5:
7d:90:f0:c7:ba:19:2d:d0:0c:62:46:98:17:8d:34:
2f:af:3d:6d:ee:2d:8f:31:eb:9b:16:30:f6:c5:43:
75:0a:26:3c:38:4e:58:be:5f:f7:c5:60:57:3a:4c:
fb:da:3e:83:9c:12:3d:ca:2d:19:68:57:48:d3:e8:
e2:85:c8:fa:da:7f:90:09:3a:a7:71:05:8d:c6:c5:
02:b6:9f:f6:3f:e6:b4:a3:fe:4d:85:69:db:8e:7c:
33:2c:a9:10:7b:20:61:f2:f0:80:be:44:25:52:55:
38:6c:cb:5b:be:d1:cf:96:7c:e8:87:e9:2f:1a:8d:
d7:79:9a:43:50:fb:e9:40:3a:95:77:bf:fd:a4:c6:
6c:29:2a:01:bc:e4:0e:3d:5d:aa:ed:bb:41:ef:0f:
6d:75:8a:af:e5:94:3a:da:62:3f:31:dd:d1:c8:e5:
e8:68:62:66:0f:32:77:9d:2e:06:5a:42:3b:95:6f:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:43:57:CD:47:91:60:6C:77:62:FA:D5:E5:2B:04:78:A0:65:63
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/eOZDV81HkWBsd2L61eUrBHigZWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.136.0/23
IPv6:
2a07:e480::/48
2a07:e480:100::/47
Signature Algorithm: sha256WithRSAEncryption
7d:d9:35:57:f3:30:45:85:2f:c4:34:76:e0:d4:b5:71:56:b2:
5d:51:56:13:00:fe:d5:ba:58:a0:e5:d9:bc:46:05:19:f6:60:
81:c7:3c:8b:db:f6:db:b4:d3:7a:d0:1a:93:53:f5:76:0c:da:
b6:84:3d:4b:46:b6:a9:c7:82:c1:a5:a0:28:f7:fc:45:67:a1:
22:d7:01:32:44:0a:ca:4a:6b:f3:f7:ba:99:5b:1a:a0:05:90:
7e:a1:4c:1b:db:bd:44:42:f4:e8:fd:63:31:ca:46:e4:66:35:
bf:21:6b:05:28:29:89:f0:0b:7a:c6:ad:cd:95:42:d0:92:c1:
71:42:db:16:65:34:55:55:8f:64:9b:d6:a2:ba:cb:2e:f3:6e:
8f:e7:d2:06:da:48:bb:cd:45:87:31:6b:c1:f6:17:c7:6c:e9:
e0:75:fd:db:5b:b6:70:6a:f4:af:af:5d:a4:28:63:b7:d0:6c:
01:60:68:b1:af:a4:7d:e1:c6:89:33:da:a8:d3:b5:ce:0c:47:
06:5b:96:cc:54:15:9a:86:8d:38:88:e2:9b:bf:84:ae:57:f8:
90:1b:66:e6:88:18:6f:c3:ea:9a:26:02:25:26:ca:5b:42:86:
38:89:b9:50:70:ef:14:b0:df:85:18:6a:4c:97:83:46:dd:ca:
b4:2a:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:00:43 2025 by rpki-client