Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/7zeJbKFMNPXHlRXtRZ_vnz4nR74.roa
File: 7zeJbKFMNPXHlRXtRZ_vnz4nR74.roa (raw, json)
Hash identifier: +y4RU6ApV3WSHD3CrAWmov9g3CbSg6iWsFxMsE5/u9A=
Subject key identifier: EF:37:89:6C:A1:4C:34:F5:C7:95:15:ED:45:9F:EF:9F:3E:27:47:BE
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 0193B39E1726B2D68313CA2903AB87BCEFB7
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/7zeJbKFMNPXHlRXtRZ_vnz4nR74.roa
Signing time: Wed 11 Dec 2024 02:48:22 +0000
ROA not before: Wed 11 Dec 2024 02:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8410
IP address blocks: 194.0.120.0/22 maxlen: 22
194.55.161.0/24 maxlen: 24
194.55.163.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
194.55.171.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
212.15.32.0/21 maxlen: 21
212.15.40.0/24 maxlen: 24
212.15.41.0/24 maxlen: 24
212.15.42.0/24 maxlen: 24
212.15.43.0/24 maxlen: 24
212.15.44.0/24 maxlen: 24
212.15.45.0/24 maxlen: 24
212.15.46.0/24 maxlen: 24
212.15.47.0/24 maxlen: 24
212.15.48.0/24 maxlen: 24
212.15.50.0/24 maxlen: 24
212.15.52.0/24 maxlen: 24
212.15.53.0/24 maxlen: 24
212.15.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:9e:17:26:b2:d6:83:13:ca:29:03:ab:87:bc:ef:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Dec 11 02:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef37896ca14c34f5c79515ed459fef9f3e2747be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:41:b3:a5:83:e2:6a:f6:5a:d4:25:3d:ff:
b3:79:a4:8a:f1:06:cb:26:6d:2a:cf:93:6f:d3:f6:
14:5a:b6:71:96:8a:90:5c:18:fc:91:8e:5b:e5:47:
c3:5e:18:7c:1d:b5:5d:63:5d:fb:a7:31:1e:32:24:
d9:7c:52:39:6b:b6:53:87:ac:7b:d2:88:56:e6:25:
32:ff:48:18:cb:00:7d:5f:b6:a9:1e:69:40:97:09:
43:51:e6:b8:50:31:d5:42:b0:ef:1d:67:e3:13:ec:
8e:43:1d:fb:4e:89:80:c3:6d:11:18:9f:9a:0a:3c:
14:ce:d1:88:76:fc:cd:02:f5:32:2c:f7:0e:ff:1c:
ce:fd:b9:f4:d2:3b:51:7e:0a:fe:dd:77:4b:bf:93:
ea:0f:a4:5d:ca:e8:0f:72:34:fe:4a:3b:b5:8a:67:
1d:17:16:49:38:a5:29:ba:04:f7:e7:06:de:13:20:
ba:d8:4c:38:eb:41:09:c8:4b:84:c1:9a:fd:1b:04:
c6:52:68:12:20:61:a6:a6:92:ff:c9:ca:f9:f1:9e:
85:74:fd:4c:2c:7a:e2:dd:96:79:f7:e4:63:cc:8b:
33:cb:43:35:a9:da:f3:fc:46:72:c5:bf:66:9d:23:
7f:ff:2e:45:92:a8:b2:f0:d9:8c:89:48:98:cf:5c:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:89:6C:A1:4C:34:F5:C7:95:15:ED:45:9F:EF:9F:3E:27:47:BE
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/7zeJbKFMNPXHlRXtRZ_vnz4nR74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/22
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.48.255
212.15.50.0/24
212.15.52.0-212.15.54.255
Signature Algorithm: sha256WithRSAEncryption
61:c5:e6:9a:92:57:c8:e3:be:97:70:f0:bb:7f:e4:7a:01:48:
08:96:74:53:97:fb:6b:19:1d:d0:40:d1:b1:ee:90:96:7e:f8:
c5:17:b7:98:76:1f:29:3b:3e:3d:55:a2:bd:97:46:30:ab:8a:
a3:44:89:00:49:74:21:95:31:be:ab:03:b9:71:7f:c5:c0:e9:
89:84:dd:a7:b3:67:7d:d4:fe:7d:b6:b8:f1:a3:09:31:1c:0a:
be:38:a9:e9:ba:27:17:c6:9e:a2:cd:bb:71:e5:6e:25:ec:6b:
59:55:fa:8c:4c:a7:98:97:c9:97:54:42:62:7f:cc:0e:ad:d3:
3a:3f:4a:59:32:dd:41:46:ac:ff:e0:7e:3b:99:8b:5b:51:79:
10:3f:9e:f4:4c:7d:0b:81:d4:19:66:ff:ce:22:53:73:81:c5:
2b:2d:33:85:c7:d1:7b:0a:7c:b6:12:c8:c5:c1:ec:c3:eb:86:
50:be:89:8c:0d:37:6c:b9:36:21:51:fa:de:3a:b1:42:88:70:
e8:b8:78:93:3a:64:f9:c0:ee:be:12:21:bb:4c:fd:6c:fb:85:
fb:65:e7:4a:bf:48:21:9f:5a:9f:44:1c:9a:10:fe:01:72:23:
63:a5:9f:69:69:33:81:51:d8:4f:db:fb:09:1b:86:c5:72:42:
f3:b5:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:07:07 2025 by rpki-client