Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SwvoP7AZRWvr95Z9vuO4enZRVpk.roa
File: SwvoP7AZRWvr95Z9vuO4enZRVpk.roa (raw, json)
Hash identifier: NEd7dXvsxYE96MRvQaAcyDJ4WjCn1EzWv/1nifZSV5Q=
Subject key identifier: 4B:0B:E8:3F:B0:19:45:6B:EB:F7:96:7D:BE:E3:B8:7A:76:51:56:99
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01955CBE725AA28C639678A5EEE8018B8CF4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SwvoP7AZRWvr95Z9vuO4enZRVpk.roa
Signing time: Mon 03 Mar 2025 16:02:19 +0000
ROA not before: Mon 03 Mar 2025 16:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb05::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:be:72:5a:a2:8c:63:96:78:a5:ee:e8:01:8b:8c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 3 16:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b0be83fb019456bebf7967dbee3b87a76515699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:d4:b5:e4:1e:f3:d4:8a:30:18:93:11:6f:
c0:b8:8b:7b:fc:cf:4f:c1:2f:88:40:8c:c8:1a:93:
a0:ae:d6:37:10:c6:f9:48:7e:06:a4:5e:de:2b:10:
84:13:d3:34:03:a8:b7:50:86:d6:ea:61:a5:4d:ae:
bc:8e:a8:7a:69:fc:c7:81:c1:88:ea:92:30:cd:32:
7c:96:20:bf:70:93:44:6b:a7:bb:45:3f:da:f3:55:
f4:46:8c:fb:b5:17:d8:1a:fc:37:8b:5c:90:2c:24:
c2:f8:10:15:09:bc:74:c5:b1:80:3a:2d:2a:18:6e:
2c:ed:d7:0e:66:17:60:6f:97:63:8f:d1:5a:6f:a4:
50:c1:ce:a0:83:11:04:2f:83:2c:2f:bf:00:e8:04:
95:22:4e:46:da:e9:cb:d1:fb:d2:a2:a0:1b:65:7d:
16:56:b9:d7:38:21:eb:ef:19:cb:7a:74:83:f6:ed:
46:4f:24:50:48:43:0c:69:e0:c8:a9:d7:2d:fc:7b:
b1:b4:9b:d8:86:74:72:10:75:6c:da:89:76:8c:76:
95:6f:69:ef:f1:d5:19:fc:0b:d4:2a:53:25:d4:8d:
67:fc:49:b7:34:7f:66:3a:5d:ed:d1:a1:c3:c5:a2:
75:24:9a:ea:1c:a6:da:84:eb:f3:57:16:b8:08:93:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:E8:3F:B0:19:45:6B:EB:F7:96:7D:BE:E3:B8:7A:76:51:56:99
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SwvoP7AZRWvr95Z9vuO4enZRVpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.147.44.0/23
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
47:44:72:15:d9:5d:d0:68:4b:1f:ae:f2:62:76:93:d3:3f:97:
c9:e4:94:3d:29:10:f9:a7:47:c7:28:a8:6d:34:10:6a:22:2c:
a8:79:1e:c9:4f:d3:5c:4c:12:7e:f9:fe:01:b0:39:34:0c:f6:
3b:71:8f:68:3f:b8:f2:d6:3e:0a:7a:36:e9:f2:f9:83:93:6d:
76:35:bd:54:df:d1:4e:2b:b3:24:d7:f1:33:40:18:04:03:84:
67:d6:9c:a8:d4:98:b1:de:55:6d:e2:f0:db:81:9f:b0:da:52:
33:e7:f1:3d:30:41:84:e1:35:5c:c8:e7:b3:23:aa:a4:f4:08:
63:f7:15:33:76:fc:fe:64:7d:1f:a9:dc:9d:f4:f4:8a:53:51:
0f:03:7f:67:ff:8b:fd:a5:26:54:d0:3e:bf:69:a5:df:ad:ab:
a3:a4:c1:d4:39:e3:ce:9f:91:9c:c1:6d:24:d1:af:8c:59:a5:
01:a6:77:b6:22:c7:d0:d9:42:6d:93:4e:2b:62:63:c8:3c:ad:
bd:61:9b:3b:fe:d6:16:26:e1:89:be:92:14:af:d3:ac:65:88:
82:84:7d:b3:4e:21:9f:67:e5:a2:53:3f:db:b0:c2:03:0f:4e:
cc:3a:f5:19:d6:49:ff:a5:be:05:6a:6c:aa:0d:f5:f2:d6:fc:
ce:2a:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:41 2025 by rpki-client