Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PW7vpNunGef0nuxIo9EJNy0HogM.roa
File: PW7vpNunGef0nuxIo9EJNy0HogM.roa (raw, json)
Hash identifier: fm6emT8o5kWPiR2Knyfl9TC5acp/YaKMlRVbcx8XWRA=
Subject key identifier: 3D:6E:EF:A4:DB:A7:19:E7:F4:9E:EC:48:A3:D1:09:37:2D:07:A2:03
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01936B6793BE351FD65ECE83FD868589FC44
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PW7vpNunGef0nuxIo9EJNy0HogM.roa
Signing time: Wed 27 Nov 2024 02:16:10 +0000
ROA not before: Wed 27 Nov 2024 02:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43793
IP address blocks: 5.175.96.0/20 maxlen: 20
5.175.112.0/20 maxlen: 20
31.47.144.0/20 maxlen: 20
46.183.80.0/21 maxlen: 21
78.111.240.0/20 maxlen: 20
109.205.144.0/21 maxlen: 21
185.43.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 18 Dec 2024 02:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:67:93:be:35:1f:d6:5e:ce:83:fd:86:85:89:fc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 27 02:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d6eefa4dba719e7f49eec48a3d109372d07a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:2b:72:d3:50:28:a7:57:ab:12:f3:cb:0c:
55:54:c4:12:bd:1f:95:0c:93:e9:14:0b:21:2a:9f:
58:b4:14:ed:40:cf:57:f5:fe:2e:67:5f:62:d7:da:
85:bb:c1:11:92:c6:a2:9f:d7:2c:9a:80:af:72:0f:
9b:26:ad:7f:cb:2d:d1:d7:08:56:9d:e9:f9:0f:91:
0b:91:b8:a2:be:23:fd:35:15:18:c6:4f:d2:e3:ac:
55:79:07:af:50:11:53:31:54:d4:1c:bb:96:ee:89:
a0:52:32:24:36:3b:80:60:47:6e:8d:a2:53:67:4d:
68:6c:f7:62:94:cf:75:d4:6e:e3:08:fd:b1:17:4f:
09:27:ef:38:7e:ea:17:1c:64:cb:ea:c1:cb:47:08:
85:9e:e1:2e:d5:ac:75:08:2c:99:e1:2f:0c:ee:7b:
51:ae:55:7a:3e:35:70:c8:68:bf:bf:68:da:50:3a:
ee:61:83:ff:31:3e:ab:1f:52:4b:29:c5:74:92:33:
0c:b5:1a:e2:62:ca:9b:82:10:cf:97:bb:00:1c:e1:
34:ad:7a:46:22:c2:bd:4f:49:fb:a3:d2:2d:5f:56:
49:42:b8:3a:c2:ad:5f:af:b3:c2:6c:f1:8b:3d:2e:
43:b4:53:f2:84:04:d8:35:16:9d:34:7b:03:30:f5:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:EF:A4:DB:A7:19:E7:F4:9E:EC:48:A3:D1:09:37:2D:07:A2:03
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PW7vpNunGef0nuxIo9EJNy0HogM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.96.0/19
31.47.144.0/20
46.183.80.0/21
78.111.240.0/20
109.205.144.0/21
185.43.100.0/22
Signature Algorithm: sha256WithRSAEncryption
14:35:ca:88:61:2d:56:60:9f:65:dc:97:9a:1d:ff:8a:88:da:
3d:ee:8b:78:4b:a7:1a:2d:8f:cb:bc:4f:19:31:7e:e1:ac:86:
3c:ee:0e:29:cb:fd:eb:18:34:3b:99:86:14:7f:72:b8:c7:d5:
2c:74:3b:35:f7:0c:cf:0a:f3:af:31:d1:ef:86:b8:24:b8:c6:
bf:42:b6:45:3a:b9:2f:6b:f3:eb:85:5d:1e:27:3e:1b:67:45:
c1:70:97:cf:8b:98:58:0f:ea:db:76:bd:eb:02:80:1b:b2:07:
c2:aa:cb:91:0f:ad:02:c5:e1:f1:21:0e:2e:81:ec:65:41:f4:
f6:da:d9:75:b6:9d:f1:c1:8d:b2:3a:44:61:57:a5:37:db:ec:
bc:44:8d:43:de:ac:fb:7b:6c:57:03:0e:a3:4d:67:1b:81:48:
24:95:e0:81:12:f1:8e:16:79:57:1c:c8:7f:cc:e1:e7:f9:7d:
3a:81:b8:ad:f6:a8:e2:ca:61:90:50:0e:43:2f:d1:0c:64:e5:
02:0d:74:20:27:0a:33:17:7d:ef:fb:b4:1f:66:a0:b3:72:89:
13:08:ea:5b:a5:31:c1:c1:43:9c:fa:46:53:8a:28:d7:95:f5:
05:50:6c:3e:cf:77:70:2a:e3:35:d6:b4:a7:4f:a4:0f:76:20:
b0:89:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:40:53 2025 by rpki-client