Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/KY0_bve0UJscNTo6scwadEmhyYo.roa
File: KY0_bve0UJscNTo6scwadEmhyYo.roa (raw, json)
Hash identifier: Ct93OvYeX1dEfX8hXpUc076gxGczqvNbes8Qv+qcxyM=
Subject key identifier: 29:8D:3F:6E:F7:B4:50:9B:1C:35:3A:3A:B1:CC:1A:74:49:A1:C9:8A
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0193C5C379DAB9490BB8DBFD2AD589B0579D
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/KY0_bve0UJscNTo6scwadEmhyYo.roa
Signing time: Sat 14 Dec 2024 15:22:22 +0000
ROA not before: Sat 14 Dec 2024 15:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44244
IP address blocks: 2.144.0.0/16 maxlen: 24
2.145.0.0/16 maxlen: 24
2.146.0.0/16 maxlen: 24
2.147.0.0/16 maxlen: 24
5.112.0.0/16 maxlen: 24
5.113.0.0/16 maxlen: 24
5.114.0.0/16 maxlen: 24
5.115.0.0/16 maxlen: 24
5.116.0.0/16 maxlen: 24
5.117.0.0/16 maxlen: 24
5.119.0.0/16 maxlen: 24
5.120.0.0/16 maxlen: 24
5.121.0.0/16 maxlen: 24
5.122.0.0/16 maxlen: 24
5.123.0.0/16 maxlen: 24
5.124.0.0/16 maxlen: 24
5.125.0.0/16 maxlen: 24
5.126.0.0/16 maxlen: 24
5.127.0.0/16 maxlen: 24
92.42.48.0/21 maxlen: 24
2a01:5ec0::/36 maxlen: 37
2a01:5ec0:1000::/36 maxlen: 37
2a01:5ec0:2000::/36 maxlen: 37
2a01:5ec0:3000::/36 maxlen: 37
2a01:5ec0:4000::/36 maxlen: 37
2a01:5ec0:5000::/36 maxlen: 37
2a01:5ec0:6000::/36 maxlen: 37
2a01:5ec0:7000::/36 maxlen: 37
2a01:5ec0:8000::/36 maxlen: 37
2a01:5ec0:9000::/36 maxlen: 37
2a01:5ec0:a000::/36 maxlen: 37
2a01:5ec0:b000::/36 maxlen: 37
2a01:5ec0:c000::/36 maxlen: 37
2a01:5ec0:d000::/36 maxlen: 37
2a01:5ec0:e000::/36 maxlen: 37
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:c3:79:da:b9:49:0b:b8:db:fd:2a:d5:89:b0:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Dec 14 15:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=298d3f6ef7b4509b1c353a3ab1cc1a7449a1c98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:71:73:ac:89:4a:3d:5e:f4:da:6a:9a:23:
26:c9:c1:35:da:cb:b2:14:10:8e:d7:d1:23:b2:61:
55:a3:8c:07:11:40:ba:05:00:f1:c7:64:84:09:96:
0b:f3:b3:bc:bb:aa:10:89:aa:c6:c2:14:53:cd:24:
78:9d:71:ae:3d:06:95:38:e1:b8:50:3c:83:e2:4b:
67:b1:b9:51:ed:c7:d0:60:a3:f9:a5:6a:ec:24:8b:
a6:58:8a:34:f3:64:a6:ed:7b:19:5f:6a:7b:3e:0a:
98:c8:1a:fd:74:d1:9e:98:a1:c8:de:ff:aa:b1:08:
b4:09:e8:9c:ed:2e:04:bf:91:cf:0d:c3:dc:5d:f7:
2d:cc:99:1a:00:21:19:a2:ea:d1:b0:d5:bf:5b:c0:
a8:c9:dc:54:bd:40:c0:cf:6b:ab:78:88:75:6a:62:
f1:e3:74:28:8d:bf:67:0c:21:56:df:59:e5:29:38:
50:f0:0c:9e:3d:df:ec:cd:a5:a9:36:ee:72:b5:14:
50:89:95:f5:87:66:69:7c:b8:5f:a5:65:40:cc:dc:
54:aa:75:5c:13:8d:27:3e:c9:6d:ea:58:a3:a6:9e:
92:38:57:06:10:93:b1:1e:f6:ce:07:24:5a:67:24:
6f:da:80:fa:4c:cf:66:66:b3:02:af:d1:f5:af:97:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:3F:6E:F7:B4:50:9B:1C:35:3A:3A:B1:CC:1A:74:49:A1:C9:8A
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/KY0_bve0UJscNTo6scwadEmhyYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.144.0.0/14
5.112.0.0-5.117.255.255
5.119.0.0-5.127.255.255
92.42.48.0/21
IPv6:
2a01:5ec0::-2a01:5ec0:efff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:58:55:d2:88:84:25:c4:5a:dc:b9:71:97:6c:95:96:4b:83:
11:6f:9e:a1:0c:5d:f8:cb:fe:50:1c:c3:d1:83:2c:03:a2:d7:
d3:69:a3:29:36:b1:73:7b:1c:8f:85:66:35:17:46:da:6c:a2:
21:e5:8e:40:37:71:b9:66:04:29:61:d9:2b:70:d8:de:e2:2d:
c3:6b:22:5f:f1:ee:9f:06:05:e2:11:90:2a:e1:3c:31:d7:b4:
05:d5:50:ed:ac:ed:4e:08:67:52:4c:50:ff:41:f6:e2:fd:98:
cc:28:1e:c9:31:0c:15:2e:bf:3e:87:e0:bd:29:af:f6:45:3d:
70:52:f8:ec:e9:e1:31:05:be:b5:e9:26:b9:a9:1a:25:e8:64:
63:f2:da:50:c7:b4:06:87:6b:b4:58:f7:dc:df:64:5c:b6:a7:
40:9f:21:78:f2:34:c6:fd:11:85:f3:fd:40:12:9a:a4:2d:9f:
ea:87:ba:c0:f0:22:bf:ae:97:30:7c:87:5e:71:92:7c:09:b5:
4e:ed:35:22:76:1b:98:82:75:97:e6:50:9f:08:93:a2:d7:d7:
fc:bc:55:22:9e:07:17:4d:4d:4f:d3:24:a0:a9:cc:a4:67:a9:
00:6a:ef:42:dd:34:21:c3:67:e5:79:af:cf:22:d6:74:21:8a:
c1:04:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:04:00 2025 by rpki-client