Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/1-sEbznIGGIUzMS0xfxhWFKvOWsA.roa
File: 1-sEbznIGGIUzMS0xfxhWFKvOWsA.roa (raw, json)
Hash identifier: eU9fnbCqO40tAuoxELvzlgClbY64cf3P5cNbvuk3U58=
Subject key identifier: FA:C1:1B:CE:72:06:18:85:33:31:2D:31:7F:18:56:14:AB:CE:5A:C0
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0195EB15CED2AB9E7737FFA8DB3F80988C2E
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/1-sEbznIGGIUzMS0xfxhWFKvOWsA.roa
Signing time: Mon 31 Mar 2025 07:23:49 +0000
ROA not before: Mon 31 Mar 2025 07:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61060
IP address blocks: 37.44.8.0/21 maxlen: 21
185.144.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 14:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:15:ce:d2:ab:9e:77:37:ff:a8:db:3f:80:98:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Mar 31 07:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac11bce7206188533312d317f185614abce5ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:c4:2b:d5:5f:27:f1:93:31:0a:82:07:8c:
f2:79:1a:fb:cc:a4:49:05:d4:22:1c:e0:36:d9:71:
32:f7:50:71:5c:82:da:a0:e7:63:32:62:71:1b:4f:
4b:92:8a:87:d2:c5:76:a5:37:e6:c1:85:74:f3:13:
69:49:75:3d:70:fd:b1:5e:ba:e1:d4:09:d7:2e:5c:
9d:12:1c:67:66:aa:43:e6:8b:c4:0f:38:ab:85:f2:
67:b1:8f:bc:d6:3b:05:04:47:a7:76:9a:a2:42:47:
92:df:03:be:5d:fa:7e:31:35:2c:ef:3d:cf:63:55:
2d:34:1f:78:28:ca:02:89:2a:c1:e0:18:b9:b2:08:
dd:eb:ba:fe:fc:89:b8:e5:c4:bf:84:49:de:cb:4c:
ba:60:19:16:70:53:06:64:b3:3d:6e:bf:e6:40:2c:
8a:97:54:c4:ae:09:81:68:21:60:e0:f1:0d:cf:18:
b7:bb:00:c2:c9:a8:52:e9:62:df:e9:e9:ee:da:6a:
c4:d1:8a:37:34:a1:c0:60:d5:97:86:98:ec:d9:e4:
6b:5c:31:07:7c:de:4f:bf:49:0c:b6:ec:4d:5e:f5:
eb:4d:49:53:90:bb:8b:61:c1:f4:88:b6:7f:28:1f:
64:8b:cf:0b:dd:46:44:6c:9e:a9:4d:5b:e3:f2:ed:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:1B:CE:72:06:18:85:33:31:2D:31:7F:18:56:14:AB:CE:5A:C0
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/1-sEbznIGGIUzMS0xfxhWFKvOWsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.8.0/21
185.144.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:68:08:e0:5f:60:a2:d3:65:77:ca:cb:8c:fe:97:f4:e9:b8:
65:97:02:98:80:86:0c:f8:bd:39:ee:6f:83:11:03:a1:f5:a3:
60:e5:37:ac:e7:a3:a8:65:4c:8a:89:18:f4:ef:b5:55:e5:c4:
ba:e7:d8:19:86:0a:e9:7f:2c:41:61:b6:36:64:c0:88:f8:49:
81:bd:aa:f8:cf:8e:13:1f:fa:47:19:ae:83:24:30:ad:13:62:
3c:8a:b6:9e:c9:70:bf:cb:fe:8f:28:c2:bc:d3:2e:2c:22:f0:
0b:ef:1d:1f:5d:6c:23:61:bd:50:78:6f:29:30:db:bd:18:32:
4f:a4:bd:96:e2:f6:92:1c:bf:ee:07:c5:11:b4:8a:64:25:bd:
50:ac:f8:6a:56:4b:7c:ba:97:11:51:3c:54:40:25:f9:89:b6:
7f:e8:fd:1f:e4:79:3b:17:72:e5:68:f3:ff:64:bd:bd:dc:c9:
da:11:58:b5:1d:a8:ab:b3:a8:72:5a:54:0d:f7:ef:7a:f3:78:
3c:d2:06:ed:7f:9b:54:7a:db:bb:94:ed:3e:a2:55:83:b5:90:
88:1e:4b:5a:c9:cf:81:0d:c7:f0:a7:4f:8c:91:b8:ed:53:98:
fd:18:ae:ce:0f:ce:fc:77:7e:d2:3e:d4:92:c6:18:ff:98:19:
11:6e:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:15:47 2025 by rpki-client