Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DSW5vE_ppZ4t5dbC1xpkYA6Q-sY.roa
File: DSW5vE_ppZ4t5dbC1xpkYA6Q-sY.roa (raw, json)
Hash identifier: 634RMtIJN7r0ofrHkTLK+cw7t20IMotWTDP7lMUm+B0=
Subject key identifier: 0D:25:B9:BC:4F:E9:A5:9E:2D:E5:D6:C2:D7:1A:64:60:0E:90:FA:C6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019343FBB814FDD735A219C2032F105CDCC2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DSW5vE_ppZ4t5dbC1xpkYA6Q-sY.roa
Signing time: Tue 19 Nov 2024 10:33:10 +0000
ROA not before: Tue 19 Nov 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2.57.148.0/24 maxlen: 24
5.133.110.0/24 maxlen: 24
45.88.82.0/24 maxlen: 24
45.88.83.0/24 maxlen: 24
45.91.161.0/24 maxlen: 24
45.132.207.0/24 maxlen: 24
45.136.248.0/24 maxlen: 24
45.138.145.0/24 maxlen: 24
45.143.140.0/24 maxlen: 24
45.147.244.0/24 maxlen: 24
45.147.245.0/24 maxlen: 24
45.147.247.0/24 maxlen: 24
80.242.62.0/24 maxlen: 24
87.247.143.0/24 maxlen: 24
103.145.21.0/24 maxlen: 24
109.94.216.0/24 maxlen: 24
109.94.217.0/24 maxlen: 24
109.94.218.0/24 maxlen: 24
109.94.219.0/24 maxlen: 24
192.144.16.0/24 maxlen: 24
194.59.12.0/24 maxlen: 24
194.156.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:fb:b8:14:fd:d7:35:a2:19:c2:03:2f:10:5c:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 19 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d25b9bc4fe9a59e2de5d6c2d71a64600e90fac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:a3:cc:1a:38:c1:ef:8e:bc:6c:ea:07:9d:
14:6d:4c:cc:72:42:a9:8f:36:0a:8a:82:db:d3:11:
84:77:c4:5f:40:5b:1d:57:74:2e:5a:d3:51:00:a9:
45:4d:65:b0:7e:c7:a4:a5:e8:a0:c3:8f:83:db:15:
f6:99:fa:91:43:a4:6c:ad:22:aa:d7:a4:e9:ce:cd:
cd:a1:6b:4d:66:30:99:99:25:ce:4d:f3:76:16:d6:
8d:d2:6f:ce:54:8d:a1:8a:03:ee:9c:a0:82:2c:eb:
7b:e8:bb:04:4a:e0:15:4e:b7:ef:f5:ce:43:00:77:
44:84:d0:1b:dd:d1:7f:e9:7f:c1:a5:e9:8d:af:bc:
80:29:08:40:e5:ec:34:68:58:cd:b2:25:75:90:4f:
71:a1:76:eb:73:ca:8d:33:dc:6f:52:93:60:67:18:
a8:30:70:c0:74:0e:65:69:4d:a5:a5:82:9e:30:d3:
4e:b0:14:82:8a:16:98:37:e0:75:d9:43:14:ce:9d:
32:47:95:4a:87:5a:af:b0:0d:02:45:a3:d6:06:7b:
d2:5e:70:30:de:b2:90:d9:32:58:da:08:c3:f4:4c:
d4:c0:8e:81:62:25:6f:d2:49:45:99:01:40:0b:f6:
8c:2f:ba:ca:a3:a1:52:00:da:95:d3:0f:76:85:3c:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:B9:BC:4F:E9:A5:9E:2D:E5:D6:C2:D7:1A:64:60:0E:90:FA:C6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DSW5vE_ppZ4t5dbC1xpkYA6Q-sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.148.0/24
5.133.110.0/24
45.88.82.0/23
45.91.161.0/24
45.132.207.0/24
45.136.248.0/24
45.138.145.0/24
45.143.140.0/24
45.147.244.0/23
45.147.247.0/24
80.242.62.0/24
87.247.143.0/24
103.145.21.0/24
109.94.216.0/22
192.144.16.0/24
194.59.12.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e0:7a:b6:c1:a1:66:14:a1:0b:7c:dd:2d:24:1f:fc:5a:79:
d2:0e:fe:8e:78:fd:30:ff:74:05:94:1d:b0:7e:fc:5b:60:7f:
57:ab:4a:4b:74:37:4d:34:f8:31:68:5f:3b:22:dd:bc:d9:0b:
9a:c5:07:0d:72:9c:1d:92:1a:45:66:5d:8e:83:33:1d:4c:21:
08:95:40:82:b7:a8:a1:b6:61:81:2d:08:0d:02:a1:7b:af:76:
49:b1:ee:0b:ac:59:c6:4b:67:66:93:fd:82:73:31:41:75:44:
5c:74:68:71:7d:6a:a9:44:5e:3a:86:f8:d3:77:35:c2:e0:23:
a9:12:f0:ce:25:a6:e6:7d:37:43:ab:37:2c:89:d5:80:da:f5:
fa:3f:23:a6:78:60:38:2e:2e:e5:f4:f2:24:88:0e:c9:45:c6:
a8:21:ed:cf:85:17:93:e7:11:eb:64:7f:15:6e:fc:a9:aa:5d:
32:f6:9a:a6:fc:44:34:20:53:fd:0e:87:82:fb:9a:d1:7f:c3:
b5:c3:01:b1:cb:1f:bc:b5:e5:c5:e4:6c:97:08:69:28:71:7b:
88:d3:6a:b7:f8:16:ae:fd:f2:43:ee:6c:17:1d:f6:b5:d5:ba:
2e:c1:7b:d9:e9:4f:fc:97:03:7d:87:c1:15:ed:8e:44:34:c4:
3f:ad:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:47 2025 by rpki-client