Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/7S4s-505kHkd2xwjqIIjfQnQTso.roa
File: 7S4s-505kHkd2xwjqIIjfQnQTso.roa (raw, json)
Hash identifier: QvgvhUqW00ktp09K8jTWVBjcmTjMAl+IJ1dctV7yQ6w=
Subject key identifier: ED:2E:2C:FB:9D:39:90:79:1D:DB:1C:23:A8:82:23:7D:09:D0:4E:CA
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 019362C9264F0E7166CFD86846037226696A
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/7S4s-505kHkd2xwjqIIjfQnQTso.roa
Signing time: Mon 25 Nov 2024 10:06:09 +0000
ROA not before: Mon 25 Nov 2024 10:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.102.0/24 maxlen: 24
109.245.103.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
109.245.113.0/24 maxlen: 24
109.245.114.0/24 maxlen: 24
109.245.115.0/24 maxlen: 24
109.245.116.0/24 maxlen: 24
109.245.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:c9:26:4f:0e:71:66:cf:d8:68:46:03:72:26:69:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Nov 25 10:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed2e2cfb9d3990791ddb1c23a882237d09d04eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:ba:e8:c3:95:95:37:8d:a0:c1:48:66:3d:
30:7e:e0:df:26:98:0e:72:83:d8:5c:bb:29:a4:6c:
72:61:3f:91:d0:87:0e:9b:27:23:7a:f3:65:84:ed:
9e:3b:07:1c:f4:2c:89:58:bb:59:ff:0a:34:b2:37:
36:74:eb:d0:63:b4:4e:c6:92:ca:80:e8:7a:58:d6:
39:61:8b:88:47:af:90:bb:24:00:f5:4b:ff:3d:a8:
9d:c7:d1:e4:14:23:56:cd:d9:ef:5f:13:df:d0:53:
1c:37:16:35:14:d1:6c:9e:d3:15:21:0b:b4:2f:bb:
6f:25:a5:1c:bf:a3:06:03:a1:18:be:05:d2:24:5e:
61:88:0a:17:65:68:d9:15:f1:9d:ee:c3:a5:df:21:
c8:27:da:28:5d:16:4e:81:a1:e0:a0:3f:26:e1:02:
b1:dc:e7:52:6d:c2:f7:6d:44:8e:49:5f:7d:3b:81:
89:5c:6d:46:e6:6b:05:06:e9:e5:fe:38:24:0c:86:
94:46:58:48:a8:49:39:63:6e:11:8d:4a:73:26:22:
38:8b:04:83:fc:26:b1:cf:e7:cb:bd:8b:32:79:e6:
68:62:8f:1f:eb:81:9f:4d:74:73:04:7a:02:34:95:
dd:ac:b3:4a:c7:2c:bc:16:47:e6:61:dc:ab:8e:cb:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2E:2C:FB:9D:39:90:79:1D:DB:1C:23:A8:82:23:7D:09:D0:4E:CA
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/7S4s-505kHkd2xwjqIIjfQnQTso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.96.0/21
109.245.112.0-109.245.117.255
Signature Algorithm: sha256WithRSAEncryption
30:6b:b1:59:0a:b8:2e:29:4a:d2:cd:7d:86:ab:cc:57:12:5a:
12:d8:d0:ce:5e:9f:4f:a4:cc:8f:44:24:b0:18:ca:2c:3f:f0:
41:be:e6:11:17:72:08:23:e2:1a:67:ca:f2:9b:92:be:67:a1:
89:ab:9e:9a:21:0a:11:0d:1c:29:87:10:56:ba:ba:34:34:af:
18:a8:82:b8:90:d4:d3:a0:51:b3:2e:b8:b0:0e:db:a9:37:f8:
3d:2f:2b:1c:10:76:aa:34:94:40:13:39:e6:3e:18:ba:db:ef:
d2:1c:9b:e7:fc:f8:09:e1:b3:ea:a6:66:4d:82:d4:cc:56:c2:
86:1d:a8:a4:bd:7e:dd:c0:6a:06:b6:b3:67:66:68:ca:bb:d5:
fb:38:9b:86:83:3f:a6:76:ca:9e:98:03:21:59:78:e4:06:00:
e1:8c:83:12:e3:f6:f2:7d:03:78:7b:6d:39:42:f6:78:e7:61:
20:3a:12:5d:1c:6f:56:e5:3d:44:39:92:d4:21:a4:2d:a0:a0:
3c:38:cd:5f:33:d5:5f:b9:0d:4f:ce:33:bd:f1:4a:9a:33:a2:
ab:01:0e:9d:ce:3c:81:7f:53:4c:4d:ee:1a:a9:8e:e0:cf:43:
68:44:d9:9e:ec:83:ac:35:c5:eb:7d:4a:fb:82:46:50:01:88:
b1:a4:5d:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 01:23:31 2025 by rpki-client