Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/SoaRPw8xxxjjP6EURPFJRBMPpu0.roa
File: SoaRPw8xxxjjP6EURPFJRBMPpu0.roa (raw, json)
Hash identifier: mYuibCl8Arczv7kptHBxeUx6jb69EMzd5tzjLiNKtCY=
Subject key identifier: 4A:86:91:3F:0F:31:C7:18:E3:3F:A1:14:44:F1:49:44:13:0F:A6:ED
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D170FE4730161E3AE192C26230796A67D
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/SoaRPw8xxxjjP6EURPFJRBMPpu0.roa
Signing time: Wed 17 Jan 2024 10:55:33 +0000
ROA not before: Wed 17 Jan 2024 10:55:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 22:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:0f:e4:73:01:61:e3:ae:19:2c:26:23:07:96:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 17 10:55:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a86913f0f31c718e33fa11444f14944130fa6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:15:67:87:6a:93:bb:dd:1c:58:5c:96:19:
da:15:7b:54:b8:4e:c1:ae:bf:13:f7:04:56:91:49:
b4:2f:4c:b4:4b:d4:66:6a:9e:a8:c8:d3:0d:f7:ad:
80:10:7b:b5:7c:af:5f:4a:70:08:f4:0e:01:9f:3b:
2a:59:5e:61:c5:6e:88:d8:4c:c3:89:16:b4:77:40:
9c:e5:f5:7e:fc:a3:d0:34:c6:8a:24:b0:1e:a4:6b:
9a:8d:22:16:d2:51:42:6c:98:09:8c:22:4f:e4:6b:
ae:45:26:61:b2:d4:1e:58:02:cd:05:8a:4b:53:84:
20:1f:77:e3:47:03:5a:95:66:c5:02:1f:44:71:78:
7f:80:d7:96:12:4c:fb:2b:d9:27:c9:15:ef:85:7c:
5a:be:4c:48:2e:da:09:62:19:ff:d0:ff:80:3d:5e:
93:23:d1:46:f5:79:73:89:98:28:bf:9d:34:2e:93:
0f:e4:22:43:6f:ad:c7:3c:f8:7f:82:a6:45:92:44:
31:d5:ec:8b:ff:42:c4:f9:0d:0f:47:a9:c6:85:8d:
7c:b9:7a:d0:fe:44:02:25:f0:8f:87:8e:f3:83:4a:
fe:94:23:64:a6:06:50:1b:00:88:47:70:9f:c1:6a:
39:75:b7:56:5c:77:f9:c0:20:2e:b8:4a:39:48:19:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:91:3F:0F:31:C7:18:E3:3F:A1:14:44:F1:49:44:13:0F:A6:ED
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/SoaRPw8xxxjjP6EURPFJRBMPpu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:3000::-2a03:32c0:3005:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7000::/47
Signature Algorithm: sha256WithRSAEncryption
9c:4c:35:1c:14:e7:3c:a7:e9:f1:a5:fa:66:a1:c2:05:35:49:
47:12:c9:74:ae:76:f0:83:cd:ad:4c:7d:cc:f5:fa:5c:63:1e:
3e:49:31:8e:4c:68:e8:4c:79:bf:a8:fa:de:89:e8:08:4b:8a:
14:df:6f:af:76:74:09:2c:52:3d:af:7d:a7:fa:23:03:f9:00:
b7:62:cf:62:15:24:ac:33:25:53:27:f8:35:23:37:44:c7:00:
68:12:b0:02:f5:c9:b1:50:a3:66:46:81:88:73:e4:64:71:c4:
b5:ef:b8:c6:ec:a7:9d:cb:96:36:3d:7d:22:e7:df:e6:85:ef:
bf:f2:8d:bb:e9:b6:58:57:24:96:21:55:a1:ae:eb:c8:18:7b:
84:1d:fe:6c:10:6a:ae:2f:54:3b:a0:c3:df:08:c2:f5:4a:77:
5f:79:cc:4c:f3:93:5d:aa:24:5c:00:83:50:3c:06:10:55:c0:
c9:9f:35:1a:5c:5f:01:56:15:eb:77:05:96:2b:52:b1:b2:38:
84:d5:8f:d1:e3:84:0b:a6:35:2f:ba:8f:c2:30:93:31:f0:47:
05:8e:89:9d:55:2b:fd:b7:05:71:9a:59:50:0c:06:de:53:52:
e9:f3:54:2a:ee:ab:a2:82:93:9f:ea:6c:48:13:e8:7f:89:98:
b4:57:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:36:18 2025 by rpki-client