Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/SYD7z2K7LtQcr8z1xHf3B8jt9CY.roa
File: SYD7z2K7LtQcr8z1xHf3B8jt9CY.roa (raw, json)
Hash identifier: 5C3q6+0YmTxeJHGALmjc4Gi484hz6VnuJt/gzttslF4=
Subject key identifier: 49:80:FB:CF:62:BB:2E:D4:1C:AF:CC:F5:C4:77:F7:07:C8:ED:F4:26
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 019349086FCFC9F525E860167EB739FDF128
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/SYD7z2K7LtQcr8z1xHf3B8jt9CY.roa
Signing time: Wed 20 Nov 2024 10:05:09 +0000
ROA not before: Wed 20 Nov 2024 10:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48348
IP address blocks: 89.248.96.0/20 maxlen: 24
89.248.96.0/24 maxlen: 24
89.248.97.0/24 maxlen: 24
89.248.98.0/24 maxlen: 24
89.248.99.0/24 maxlen: 24
89.248.100.0/24 maxlen: 24
89.248.101.0/24 maxlen: 24
89.248.102.0/24 maxlen: 24
89.248.103.0/24 maxlen: 24
89.248.104.0/24 maxlen: 24
89.248.105.0/24 maxlen: 24
89.248.106.0/24 maxlen: 24
89.248.107.0/24 maxlen: 24
89.248.108.0/24 maxlen: 24
89.248.109.0/24 maxlen: 24
89.248.110.0/24 maxlen: 24
93.174.0.0/21 maxlen: 24
93.174.1.0/24 maxlen: 24
93.174.2.0/24 maxlen: 24
93.174.3.0/24 maxlen: 24
93.174.4.0/24 maxlen: 24
93.174.5.0/24 maxlen: 24
93.174.6.0/24 maxlen: 24
93.174.7.0/24 maxlen: 24
185.15.76.0/22 maxlen: 24
185.15.76.0/24 maxlen: 24
185.80.4.0/22 maxlen: 24
185.80.6.0/24 maxlen: 24
2a05:7900::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Nov 2024 10:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:08:6f:cf:c9:f5:25:e8:60:16:7e:b7:39:fd:f1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Nov 20 10:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4980fbcf62bb2ed41cafccf5c477f707c8edf426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:5e:c4:1d:80:ca:f3:0d:62:18:8c:1e:05:
3d:44:87:98:c0:b9:16:67:92:45:98:1c:a9:9e:e0:
75:7e:9e:95:b0:31:07:f1:a9:09:13:62:c1:56:01:
fc:eb:d1:41:14:c2:c3:66:4c:bf:df:41:cb:10:a8:
88:64:32:1c:08:8c:23:d2:89:33:b8:bd:6a:e9:ec:
d1:70:5c:26:cb:3d:1e:4b:08:82:6c:c9:c1:80:1e:
6b:fb:23:d7:d8:27:57:50:77:29:fa:19:91:df:cd:
a3:bc:20:9e:5b:5d:76:44:60:11:9b:91:19:c6:b7:
83:53:5a:e6:80:b4:33:c4:ca:83:f7:d3:85:6a:23:
cd:cf:0c:e9:cf:87:88:73:ab:69:0a:1d:94:08:9a:
aa:d7:55:b5:7f:50:44:e6:f7:fd:5c:88:b9:d2:2c:
a8:d0:7d:88:6c:fc:23:51:21:a7:3b:94:73:56:89:
1f:79:36:cb:6b:c5:3e:c7:e5:5e:0e:d7:5c:74:7a:
3b:c0:40:09:53:9d:e2:f9:28:7d:ac:f8:f5:37:43:
3b:71:1a:af:d7:ad:8c:9c:60:10:d4:07:50:cb:28:
f2:6d:28:22:38:95:f3:e0:8e:36:da:80:d4:25:ce:
d8:99:ac:83:74:9c:af:fe:7e:30:09:25:d4:8e:1e:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:FB:CF:62:BB:2E:D4:1C:AF:CC:F5:C4:77:F7:07:C8:ED:F4:26
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/SYD7z2K7LtQcr8z1xHf3B8jt9CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.96.0/20
93.174.0.0/21
185.15.76.0/22
185.80.4.0/22
IPv6:
2a05:7900::/29
Signature Algorithm: sha256WithRSAEncryption
2c:73:e1:68:7b:5d:ac:70:9b:37:7e:8c:02:9d:54:82:9a:e9:
a0:be:f8:6f:f7:df:1a:98:3f:b4:b3:65:bb:d4:f1:0e:3f:09:
a4:13:e6:e7:ee:f3:c6:8c:dd:29:06:6d:80:ce:99:81:f9:02:
2a:7f:a8:e3:ee:89:95:39:7d:0d:f2:00:10:29:22:8d:97:2a:
bd:26:16:87:c6:38:a6:33:4a:77:f3:20:7d:fd:af:fb:fe:40:
5a:7c:fe:12:84:a6:f0:e1:1e:22:4c:b9:a6:a1:5d:9c:5a:b9:
b3:19:9c:17:64:3e:99:59:2e:ab:7d:05:c2:68:a2:5b:c0:96:
7e:de:18:a8:13:be:4b:6c:eb:be:95:6b:08:b1:97:72:bc:a7:
23:d5:61:ce:15:c1:ab:1e:04:87:ec:3c:12:7b:ed:25:85:fb:
f6:75:80:c7:b1:50:e3:53:18:86:6b:ba:aa:03:0b:eb:bf:e4:
cb:65:90:1e:28:9b:25:de:d6:62:4b:fa:a9:2d:6f:25:94:ec:
db:46:f5:1c:b8:48:4a:60:ff:e1:1e:c2:e6:03:18:1f:a0:5b:
49:97:32:a4:65:1e:0c:ae:5c:cc:00:c8:31:9c:31:6b:67:d3:
08:56:5c:d6:0f:97:a4:80:8f:6d:1a:f1:e1:a9:f7:d8:d1:c4:
a8:c9:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:48:32 2025 by rpki-client