Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/eYsz3pc4L66UFeHyWY3_3YfqDP8.roa
File: eYsz3pc4L66UFeHyWY3_3YfqDP8.roa (raw, json)
Hash identifier: bOPUjg+dCM6wtEnTMnuy62EKie0or1nYPaZpDXotgfU=
Subject key identifier: 79:8B:33:DE:97:38:2F:AE:94:15:E1:F2:59:8D:FF:DD:87:EA:0C:FF
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01925B8188C1E6A1AC88479E0EF48C457C2C
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/eYsz3pc4L66UFeHyWY3_3YfqDP8.roa
Signing time: Sat 05 Oct 2024 07:07:48 +0000
ROA not before: Sat 05 Oct 2024 07:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43700
IP address blocks: 14.102.4.0/24 maxlen: 24
14.102.5.0/24 maxlen: 24
14.102.6.0/24 maxlen: 24
14.102.7.0/24 maxlen: 24
14.102.8.0/24 maxlen: 24
14.102.9.0/24 maxlen: 24
14.102.10.0/24 maxlen: 24
14.102.11.0/24 maxlen: 24
31.172.224.0/22 maxlen: 22
31.172.224.0/23 maxlen: 23
31.172.226.0/23 maxlen: 23
45.84.244.0/22 maxlen: 22
45.84.244.0/23 maxlen: 23
78.158.0.0/19 maxlen: 19
78.158.0.0/20 maxlen: 20
78.158.16.0/20 maxlen: 20
95.215.140.0/22 maxlen: 22
95.215.140.0/23 maxlen: 23
95.215.142.0/23 maxlen: 23
185.246.240.0/22 maxlen: 22
185.246.240.0/23 maxlen: 23
185.246.242.0/23 maxlen: 23
185.252.108.0/22 maxlen: 22
185.252.108.0/23 maxlen: 23
185.252.110.0/23 maxlen: 23
185.252.204.0/22 maxlen: 22
185.252.204.0/23 maxlen: 23
185.252.206.0/23 maxlen: 23
216.25.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 07 Oct 2024 06:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5b:81:88:c1:e6:a1:ac:88:47:9e:0e:f4:8c:45:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 5 07:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798b33de97382fae9415e1f2598dffdd87ea0cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:63:26:cd:06:39:82:db:1d:bc:16:c7:70:
f2:9a:b9:91:a7:17:6e:e3:32:a0:f0:99:4a:7c:2c:
e5:7b:6a:d1:82:8e:58:24:8c:37:09:85:1d:e0:a7:
19:8c:9a:b6:58:be:1d:ef:d0:ad:d0:e7:db:31:c0:
65:13:2b:ab:67:d6:9c:5f:ad:31:2d:1d:1f:12:3e:
dd:9e:dc:34:6b:13:82:42:b7:59:a7:3d:76:38:66:
c1:8a:c2:96:54:79:ee:99:b6:20:1d:49:23:a4:25:
59:16:a7:aa:87:85:7a:1e:75:ed:8a:0f:6d:8d:8b:
75:be:e0:f6:79:a5:5e:a1:4b:7b:77:4d:df:3c:ea:
d1:08:39:27:fb:c3:98:ee:af:4d:a0:65:8c:f7:89:
f4:88:18:5b:1d:a8:b8:16:37:e7:b0:9e:bf:be:13:
d4:19:2d:bf:31:d6:7f:e6:88:26:6f:9e:b0:79:cc:
67:13:ae:40:b9:8b:27:15:ee:03:c2:bf:c7:4f:43:
59:dd:64:c8:82:26:cf:94:70:e9:6e:e6:2d:9c:3d:
55:41:d1:c8:0c:eb:8c:b8:7e:dc:22:63:a6:65:b1:
9d:94:02:d6:33:9d:2b:da:ee:82:2f:fb:75:c8:d5:
1f:18:fd:30:11:d6:b0:d8:54:bb:60:7b:b4:21:3f:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:33:DE:97:38:2F:AE:94:15:E1:F2:59:8D:FF:DD:87:EA:0C:FF
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/eYsz3pc4L66UFeHyWY3_3YfqDP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.4.0-14.102.11.255
31.172.224.0/22
45.84.244.0/22
78.158.0.0/19
95.215.140.0/22
185.246.240.0/22
185.252.108.0/22
185.252.204.0/22
216.25.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:53:f5:bd:4a:e7:eb:98:b0:78:d7:5e:6b:d4:8c:61:99:8d:
a9:ef:c9:2b:5a:a8:4a:98:ff:bd:45:49:45:86:a7:36:bc:a2:
7e:25:43:3b:57:89:1b:dc:ae:36:f1:aa:b9:af:f3:e6:78:d5:
3e:66:b5:5e:9b:b8:58:8f:4c:1b:5c:c0:f7:5c:f9:fb:72:f8:
0d:37:e6:bb:42:56:bf:3e:70:c3:98:db:8a:c3:ab:ba:35:1e:
3b:63:fb:53:30:52:60:82:09:75:d8:1c:44:f5:06:34:b8:31:
cf:7a:a4:f0:98:42:26:da:c4:bf:7d:20:ca:71:e3:2f:26:ab:
10:2d:36:ae:b6:32:57:cd:42:b2:57:e9:e3:8c:1c:fd:45:68:
b7:d2:ca:89:7b:ad:2c:40:41:fd:e8:ab:b2:9a:53:65:85:bf:
9c:04:5d:e4:3d:71:b8:bf:93:66:f7:a6:50:19:1f:19:46:5f:
df:f9:01:55:0e:0f:7a:3a:d2:03:e3:a1:09:0c:0f:98:d4:01:
67:c3:ad:29:19:8c:64:26:49:f5:62:e9:3e:e2:9a:30:8a:ec:
1d:6a:b7:a8:82:0e:ad:63:23:21:06:73:b8:40:5a:b3:10:ec:
d0:55:c9:62:79:ea:fd:aa:51:19:d1:cd:af:c5:e1:57:9c:ce:
d5:00:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 08:47:21 2024 by rpki-client on console-ams.rpki-client.org