Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7XfHo5q2FSGDw-QaF8Z3B32Js9M.roa
File: 7XfHo5q2FSGDw-QaF8Z3B32Js9M.roa (raw, json)
Hash identifier: w4GZzJ7o0a0ClWY7bvUjnWhgCO/vrcSznJVFZKtcilU=
Subject key identifier: ED:77:C7:A3:9A:B6:15:21:83:C3:E4:1A:17:C6:77:07:7D:89:B3:D3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01926375AA84183F927933791874800BFEF1
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7XfHo5q2FSGDw-QaF8Z3B32Js9M.roa
Signing time: Sun 06 Oct 2024 20:11:48 +0000
ROA not before: Sun 06 Oct 2024 20:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Nov 2024 13:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:75:aa:84:18:3f:92:79:33:79:18:74:80:0b:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 6 20:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed77c7a39ab6152183c3e41a17c677077d89b3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:16:92:17:93:fc:16:92:44:39:4c:27:d9:
68:9e:53:8b:74:25:a0:83:9f:5f:ba:6c:f2:f3:4b:
70:e5:f7:18:3f:9f:4c:a2:f2:89:c6:e0:56:3d:5a:
b7:51:0c:98:03:19:21:94:a6:fa:0a:51:ef:19:b4:
e7:f1:a1:96:97:40:16:a1:59:9c:5d:97:69:ed:9f:
9e:58:66:20:49:90:6f:2c:84:6d:84:5f:1a:f7:8a:
7e:97:a0:ba:02:72:2c:c1:55:e8:ba:54:54:b7:20:
19:37:42:d9:54:9b:b9:c9:e9:49:89:60:76:fd:a9:
a6:2f:21:e8:e6:b2:f6:75:82:8c:c2:6f:56:20:99:
c9:aa:1e:53:e6:ba:dc:8b:4a:5a:2e:8b:2a:9c:05:
9d:87:cc:13:75:7f:2a:5a:73:d4:4b:7a:e7:c2:e7:
c6:8c:c4:72:66:4d:76:c2:41:4b:ec:2e:3d:0f:a2:
e6:92:b0:e1:e7:e6:5e:00:20:d1:75:89:f4:2d:6b:
6a:b9:b8:7d:65:f7:4a:c1:9a:2b:88:6e:7f:85:be:
ac:f0:f0:19:5e:87:9f:51:de:ec:3d:90:cc:ee:99:
6f:ba:f2:04:b6:6b:33:64:c5:7c:bd:91:f0:40:c5:
3d:3e:62:33:7f:1d:17:c7:4c:a2:0c:a1:51:b3:82:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:C7:A3:9A:B6:15:21:83:C3:E4:1A:17:C6:77:07:7D:89:B3:D3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7XfHo5q2FSGDw-QaF8Z3B32Js9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
2a:5f:bd:6a:4e:24:97:e3:44:cf:e0:4b:00:eb:05:15:6d:9f:
ed:bc:d7:d7:06:aa:65:48:a6:85:11:9a:7a:f2:19:97:9a:7d:
22:24:c7:6a:e3:70:be:de:fa:62:27:29:44:22:19:99:b8:6b:
a6:99:85:e2:83:32:39:fd:66:f5:cc:f0:64:85:ff:3a:12:7a:
9b:f8:4f:69:84:c6:ac:9c:32:48:bc:89:da:8d:ad:6f:6a:8d:
82:b5:d3:b4:c0:f3:ba:61:7c:61:fa:e5:42:fb:48:03:67:b6:
da:b8:ae:91:d3:58:73:be:ad:fb:58:37:2d:25:2c:6c:50:fc:
e3:19:5a:c1:13:80:4e:44:0c:e8:12:fe:e8:a1:32:c0:4e:24:
3f:94:3a:68:ee:35:00:ed:93:99:65:cd:de:f1:3b:b1:95:4f:
4d:fc:84:e7:68:3f:35:d8:7f:1a:38:ae:af:f3:0a:68:30:4d:
72:12:da:64:6a:d5:62:3f:d0:c9:12:9d:02:df:79:a1:85:32:
87:dd:2b:41:4a:71:bc:f5:43:9e:c6:c3:df:38:b9:f8:d6:28:
0c:4b:df:cb:f4:63:51:9f:67:45:73:d2:f5:41:ed:10:e4:8b:
44:0f:72:29:b8:2b:43:ab:32:ea:dc:ca:35:27:0f:3a:8a:ab:
f2:ad:b9:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:53 2025 by rpki-client