Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7ETxu4yKewGNf4j3fNpqGZe9aR8.roa
File: 7ETxu4yKewGNf4j3fNpqGZe9aR8.roa (raw, json)
Hash identifier: Fdi9NITMKrZ9TdMX18WtGFBhDC7EsQuoIkZKUifYA9I=
Subject key identifier: EC:44:F1:BB:8C:8A:7B:01:8D:7F:88:F7:7C:DA:6A:19:97:BD:69:1F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F54D85C5302F046E8A9C74D9D07F5FE98
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7ETxu4yKewGNf4j3fNpqGZe9aR8.roa
Signing time: Tue 07 May 2024 20:56:56 +0000
ROA not before: Tue 07 May 2024 20:56:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a0f:e900::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 May 2024 19:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:d8:5c:53:02:f0:46:e8:a9:c7:4d:9d:07:f5:fe:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 7 20:56:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec44f1bb8c8a7b018d7f88f77cda6a1997bd691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e3:19:17:7b:a8:35:f6:e2:bf:b4:ab:a4:5b:
e6:37:9d:8d:6d:46:05:05:fb:64:60:6a:dc:53:65:
c5:8c:5b:36:59:d9:06:da:61:05:82:0c:5b:ce:ce:
02:4d:b5:36:04:c0:36:df:08:b6:f0:2c:98:42:90:
06:79:df:2a:02:2c:e1:9c:e3:d3:57:9f:13:57:a1:
02:9c:f5:39:5f:af:71:de:07:b1:8b:8a:fe:b6:ea:
5a:a4:32:c1:fb:d6:ed:90:1a:ec:f8:42:9a:94:98:
6a:ff:51:74:23:d6:a7:df:5c:ed:c0:1d:f7:59:1b:
6b:7f:5f:d0:03:95:cc:09:18:0d:99:74:f2:1d:09:
63:35:53:89:aa:24:19:75:26:1e:e9:97:66:8a:e6:
99:9f:ea:ca:b7:76:b6:0e:4c:6a:b6:0c:20:eb:1b:
1d:ef:ca:66:30:f3:19:86:df:41:05:28:83:fd:f5:
ef:f2:74:47:e2:b7:e3:23:05:db:e9:63:72:65:b7:
59:db:f0:d9:db:de:22:97:bb:cb:2a:0c:20:40:44:
36:18:cd:c1:38:16:44:81:d8:ef:b2:cd:d7:be:52:
81:b1:d8:ca:70:b3:8e:82:9f:6b:51:61:79:c7:bb:
d3:39:1c:0f:fb:b3:13:0e:2c:50:f7:f1:fd:31:1f:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:44:F1:BB:8C:8A:7B:01:8D:7F:88:F7:7C:DA:6A:19:97:BD:69:1F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7ETxu4yKewGNf4j3fNpqGZe9aR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a0f:e900::/29
2a0f:ed00::/29
2a0f:f900::/29
Signature Algorithm: sha256WithRSAEncryption
89:a1:34:80:76:2a:12:60:c9:9e:5b:5e:da:15:61:96:43:46:
db:09:c8:2b:cb:97:a9:7d:4d:8b:ac:4b:32:22:4f:de:fb:50:
b4:0c:36:40:58:ba:32:0d:8b:d7:23:2e:ba:3e:0e:33:25:09:
12:be:9d:3c:af:71:e3:0e:93:47:0a:6c:34:b1:94:27:8e:25:
4b:4c:24:a5:e6:89:65:36:c6:ec:5a:6d:b3:d6:57:45:42:7e:
b8:be:ba:9c:91:1d:07:b6:fe:ae:95:9f:83:29:eb:a0:38:f4:
e8:d0:5a:40:62:16:7e:b3:db:05:d6:05:f6:19:45:4e:fd:b1:
bc:6d:94:d7:db:1f:c6:08:61:91:17:81:3f:bf:40:b1:28:42:
79:ca:61:a7:8e:63:5b:dc:5b:2e:da:7d:54:ac:01:26:65:7c:
f6:ca:67:3e:e1:30:e4:67:fb:d6:55:27:33:25:f6:89:41:c2:
41:35:a9:03:db:8c:5f:f0:fa:4f:d0:17:17:f2:60:d4:e2:80:
03:65:23:ee:31:6b:8b:c5:fd:70:6b:06:35:e4:6d:a6:ac:dc:
b9:ba:fd:ab:91:af:e5:35:63:7b:5b:13:1f:2c:d9:c8:00:89:
9b:d7:5a:b9:bf:85:e4:47:68:c8:ec:4a:04:0e:49:51:af:97:
43:d5:b2:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:51 2025 by rpki-client