Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TZ3p58hxgHMk8mO2vjYEkyC7O40.roa
File: TZ3p58hxgHMk8mO2vjYEkyC7O40.roa (raw, json)
Hash identifier: 7x3uhOmwgrLfTOIIxdUpUvSAn7dKjGuNhg7NKua2n/Q=
Subject key identifier: 4D:9D:E9:E7:C8:71:80:73:24:F2:63:B6:BE:36:04:93:20:BB:3B:8D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01919349583544DC9D95332D4424518BDA25
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TZ3p58hxgHMk8mO2vjYEkyC7O40.roa
Signing time: Tue 27 Aug 2024 10:02:22 +0000
ROA not before: Tue 27 Aug 2024 10:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41691
IP address blocks: 81.22.192.0/24 maxlen: 24
87.117.128.0/21 maxlen: 21
87.117.136.0/23 maxlen: 23
87.117.138.0/24 maxlen: 24
87.117.140.0/22 maxlen: 22
87.117.146.0/23 maxlen: 23
87.117.148.0/23 maxlen: 23
89.221.192.0/22 maxlen: 22
89.221.197.0/24 maxlen: 24
89.221.205.0/24 maxlen: 24
109.172.48.0/22 maxlen: 22
109.172.52.0/23 maxlen: 23
109.172.102.0/23 maxlen: 23
109.172.104.0/22 maxlen: 22
109.172.118.0/23 maxlen: 23
2a02:25e0:f00::/40 maxlen: 40
2a02:25e0:7700::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:49:58:35:44:dc:9d:95:33:2d:44:24:51:8b:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 10:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d9de9e7c871807324f263b6be36049320bb3b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:e8:9e:64:02:d9:5e:ea:ff:f4:6a:4c:6f:
c5:40:45:30:00:a5:48:1f:e4:4b:a1:ae:f9:e1:cb:
0e:04:88:b5:57:9e:e3:50:f2:3e:ff:23:08:8d:37:
1c:e0:b0:c2:ac:49:cc:b9:b4:bb:33:51:7a:b0:87:
b5:fe:c4:6c:3b:31:bd:e9:8b:03:67:8b:b7:d0:2b:
21:7d:df:f9:44:2d:64:2f:c5:d9:83:81:23:4b:0b:
58:10:84:f0:7e:c9:5e:b7:30:3b:db:82:69:77:a5:
5d:04:e1:81:96:e1:7d:cd:f2:93:3b:4e:2f:7c:ea:
75:c3:23:37:53:5e:55:d2:93:e3:1e:85:cf:2d:5f:
ab:8c:99:4e:df:ac:46:71:97:ef:ca:fe:95:54:4a:
3b:27:6b:b1:02:93:5a:9b:63:44:d1:d7:e3:c1:e1:
3a:5c:b7:93:9b:93:3a:7f:84:c4:53:b7:a6:3b:53:
a4:c4:37:4a:16:96:f4:84:82:c4:ee:ba:bf:f1:53:
9f:04:e2:30:bd:de:df:1e:eb:05:b0:82:c1:e8:d2:
40:35:96:f2:df:95:88:47:3d:88:57:f1:b2:85:92:
c4:8f:37:f5:32:8f:c1:61:10:c4:e5:18:65:e1:7e:
59:49:70:23:66:0a:23:3c:7b:4a:92:3c:6b:85:4d:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:E9:E7:C8:71:80:73:24:F2:63:B6:BE:36:04:93:20:BB:3B:8D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TZ3p58hxgHMk8mO2vjYEkyC7O40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.192.0/24
87.117.128.0-87.117.138.255
87.117.140.0/22
87.117.146.0-87.117.149.255
89.221.192.0/22
89.221.197.0/24
89.221.205.0/24
109.172.48.0-109.172.53.255
109.172.102.0-109.172.107.255
109.172.118.0/23
IPv6:
2a02:25e0:f00::/40
2a02:25e0:7700::/40
Signature Algorithm: sha256WithRSAEncryption
03:18:88:5a:6e:81:38:97:4d:ed:d1:03:be:e1:54:d6:db:49:
1e:97:f8:84:eb:09:95:38:f0:9c:a4:12:dd:3b:6a:ee:68:ef:
55:d8:c5:70:d1:99:c7:20:1d:c2:b6:93:6a:c9:fb:68:d5:0e:
36:df:1d:2b:b1:3b:00:e1:d5:38:91:de:a1:7e:21:27:00:69:
9f:87:45:8e:8f:32:96:7a:e3:dd:6d:d7:ab:fd:b0:9c:58:09:
4f:46:70:47:39:10:4e:bd:1a:be:13:ce:b9:c8:ab:7d:70:8a:
02:04:f8:15:61:0e:cf:c8:4f:06:2e:10:de:0a:f4:57:ad:3e:
9e:4a:fe:5c:3a:a4:68:da:46:0e:a0:2c:34:ea:39:48:e0:dc:
27:03:6a:8b:2e:8d:6c:f6:12:a8:e4:04:24:a0:42:57:7a:6c:
3b:e0:bb:e4:1f:28:9e:0c:be:9f:b6:62:51:98:4e:5e:65:bd:
e5:96:45:d2:8a:08:78:e3:c6:e1:ce:3b:9f:be:99:b4:8e:78:
6f:ff:9a:5a:d1:a9:0e:a9:79:93:c6:05:cb:05:fb:81:00:84:
89:d2:ca:04:51:8a:e9:6b:fa:56:26:fc:a2:a3:54:7d:af:c9:
c7:3f:63:d6:60:03:1e:65:a7:3f:23:a5:26:a8:64:7b:45:e6:
de:32:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:27:58 2025 by rpki-client