Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/_un10ExSmoQkw3aA43K7fN3ML44.roa
File: _un10ExSmoQkw3aA43K7fN3ML44.roa (raw, json)
Hash identifier: B/u09eL9SoStsupof0zR4XsVG1iBva2WuMFAGrAAkuc=
Subject key identifier: FE:E9:F5:D0:4C:52:9A:84:24:C3:76:80:E3:72:BB:7C:DD:CC:2F:8E
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F30220ACE3FEC3EDDE624F6712134DBFE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/_un10ExSmoQkw3aA43K7fN3ML44.roa
Signing time: Tue 30 Apr 2024 17:51:28 +0000
ROA not before: Tue 30 Apr 2024 17:51:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52053
IP address blocks: 85.117.241.0/24 maxlen: 24
185.255.112.0/24 maxlen: 24
193.38.250.0/24 maxlen: 24
194.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 13:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:22:0a:ce:3f:ec:3e:dd:e6:24:f6:71:21:34:db:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Apr 30 17:51:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fee9f5d04c529a8424c37680e372bb7cddcc2f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:86:d8:30:b2:5e:f4:23:87:94:ba:7f:87:
d1:2c:eb:f7:f8:83:9d:06:5a:68:36:09:4b:bd:70:
48:04:7a:25:0f:65:bf:6f:63:1b:ac:b9:4e:c0:8c:
cd:02:bc:44:03:08:c8:50:77:3a:bb:54:f2:fb:71:
9d:f8:1f:79:86:59:ab:f6:8e:42:24:30:e8:e3:bc:
08:b7:c1:a1:72:33:93:b4:df:05:08:6b:f1:ff:73:
0b:bd:f3:99:c2:80:da:85:0b:be:1a:bb:0a:b2:31:
f7:af:5d:f9:01:45:1b:8e:2d:56:09:b4:fb:c5:d1:
33:e6:25:9b:b9:d7:fa:10:6b:e4:d9:c9:b0:56:38:
1c:4b:20:f9:22:62:30:fe:dd:44:0a:d0:0b:9b:bf:
33:7c:21:c9:a8:1f:91:ee:5a:9d:a3:b4:91:3e:e9:
66:a4:e0:6b:d0:ee:58:a7:6b:77:6d:e3:18:e6:6e:
9d:5e:32:f4:61:b7:cc:bb:52:54:8c:ca:37:e8:3d:
1d:6c:a0:70:41:29:03:04:06:5f:ac:b6:84:2e:f6:
c1:38:23:78:59:75:95:ee:9a:bf:de:f5:5e:95:a5:
87:6d:9a:f2:d8:ee:ed:a8:9a:0b:46:3e:38:0b:88:
72:ef:02:a7:3f:40:f5:32:ce:d8:25:86:d4:da:0b:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:F5:D0:4C:52:9A:84:24:C3:76:80:E3:72:BB:7C:DD:CC:2F:8E
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/_un10ExSmoQkw3aA43K7fN3ML44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.241.0/24
185.255.112.0/24
193.38.250.0/24
194.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:65:0a:04:29:a2:63:96:e5:4c:a2:b3:50:14:df:48:e1:43:
f8:25:dc:a9:91:06:9c:35:70:ed:32:b5:8f:a2:5f:40:2b:0b:
c0:d2:49:48:c8:4f:56:9d:d1:b1:e6:6d:2b:cc:3f:43:66:09:
e7:e4:52:83:ca:71:f6:37:31:91:ed:55:66:a8:77:5f:e8:a6:
45:f7:f7:72:16:98:b0:76:56:db:43:86:15:8b:19:db:e1:a9:
c4:d5:f7:79:54:77:af:c0:47:84:1f:de:52:88:1c:15:31:1a:
e6:59:f6:73:37:67:fa:c4:d3:23:64:27:fd:fc:fc:79:8f:f5:
2f:a0:35:85:fc:66:ad:04:4f:bb:32:f1:58:f5:42:43:3f:d6:
d1:c1:26:d1:d4:39:68:2a:01:41:d6:47:7a:59:dc:bf:0b:0a:
68:3e:82:fb:2e:9a:1a:42:2f:e9:11:f4:95:88:b8:0f:8b:84:
0a:9e:2a:03:8f:e0:5e:30:62:cf:33:df:18:8e:75:a9:cb:6f:
4d:4d:5b:65:82:5c:de:5d:41:6f:52:bd:72:e8:c2:52:95:f0:
e7:7c:96:df:2b:47:14:13:25:8c:37:90:54:5b:7d:0f:48:e6:
f2:86:7a:10:80:f9:0a:88:03:01:28:79:40:ee:a8:c7:24:9f:
11:23:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:37 2025 by rpki-client