Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/38wAozEAggruBTednRi9gvKBD3U.roa
File: 38wAozEAggruBTednRi9gvKBD3U.roa (raw, json)
Hash identifier: AW6rOKo6SybEfqtPhJTMhuqXu3hNaPtJ2eBXz8ZKr/I=
Subject key identifier: DF:CC:00:A3:31:00:82:0A:EE:05:37:9D:9D:18:BD:82:F2:81:0F:75
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019388BCBB9B5712CFBA5BDF4EC43705A3DB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/38wAozEAggruBTednRi9gvKBD3U.roa
Signing time: Mon 02 Dec 2024 18:58:10 +0000
ROA not before: Mon 02 Dec 2024 18:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:bc:bb:9b:57:12:cf:ba:5b:df:4e:c4:37:05:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 2 18:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfcc00a33100820aee05379d9d18bd82f2810f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:db:b1:44:de:23:2e:28:8b:93:22:d3:e7:
7c:57:e9:22:b2:76:85:88:e6:da:6b:50:8f:87:ae:
90:c2:7c:78:15:d6:fb:96:ea:05:26:cd:a3:70:a2:
ee:5d:6b:72:6b:66:1f:98:41:88:90:ce:c6:86:24:
0c:a7:fd:95:24:44:01:6a:e9:76:0c:8c:ef:11:58:
d6:90:c4:42:df:e6:4c:a4:ae:e5:5a:b8:39:dd:46:
23:33:c7:40:95:f3:46:22:54:cd:57:45:f0:32:a9:
11:9e:ab:51:74:75:ab:df:a1:e2:18:3c:0b:a7:f4:
0e:1d:70:e5:67:12:2d:01:3c:4b:03:18:10:0b:07:
43:e7:25:92:08:40:f4:55:be:55:64:32:08:6b:42:
9e:d4:1b:ff:12:44:d3:70:84:b6:80:89:7f:b1:ed:
db:94:5d:63:56:45:d5:45:ee:7f:a2:be:2c:d6:33:
c8:a0:7f:d7:b0:32:80:d2:c7:7f:c8:20:d4:cf:20:
b4:82:fa:69:d0:95:53:69:57:34:dd:bc:88:c2:fd:
92:b6:ec:e3:6d:7d:89:ca:04:99:c1:e2:5c:a3:27:
8a:52:cd:46:46:8a:94:46:bb:f8:06:80:4a:6d:c8:
24:fe:fc:b0:17:21:79:cb:44:79:f7:cf:82:0c:d7:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:00:A3:31:00:82:0A:EE:05:37:9D:9D:18:BD:82:F2:81:0F:75
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/38wAozEAggruBTednRi9gvKBD3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
c3:40:33:0e:86:02:a4:7b:e8:4a:b2:39:ea:82:d5:b7:98:97:
df:80:6c:97:34:74:70:aa:6e:8b:fb:a3:64:e1:79:1b:4c:db:
c9:39:89:b4:87:00:f4:17:c0:45:b1:d5:12:fa:fc:6e:9b:cf:
a0:38:6e:3d:9d:e2:32:22:14:80:87:04:ae:be:65:a2:90:3e:
84:f8:0c:34:ad:cd:76:e4:b0:a1:05:96:37:a9:a5:02:e4:ad:
5d:01:a5:a2:a2:f1:34:02:fa:a4:76:3e:48:b0:3c:59:dd:0f:
25:4f:f1:7a:1d:c0:f6:2a:71:10:c2:85:25:71:83:92:d7:e5:
86:90:64:df:04:4e:2e:25:96:85:f6:e8:65:81:6a:10:9b:23:
5c:62:49:27:34:02:db:01:d7:9c:14:80:e7:fa:dc:e6:35:dd:
8d:ed:a5:c8:33:a5:ae:1d:6a:de:d5:d7:32:06:e6:b5:ce:58:
48:53:d5:d2:32:8b:e7:8f:cd:06:26:fe:e9:79:f9:b8:4a:80:
cc:9b:f6:69:53:cf:b8:bb:64:a9:b1:32:74:9a:fb:3e:3d:93:
00:81:c2:89:59:06:1e:b3:d4:7f:37:b7:ee:51:f2:9a:c9:b0:
66:0b:e0:bf:16:2a:5e:75:8f:22:d1:3f:27:00:2b:af:55:09:
25:d0:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:07 2025 by rpki-client