Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fDZrYJArJorlM6aV2Y5R6bC7Xx0.roa
File: fDZrYJArJorlM6aV2Y5R6bC7Xx0.roa (raw, json)
Hash identifier: tfJthD3SM21wLprc0vWES9vEP6xltyU+JSJQO3PW1TY=
Subject key identifier: 7C:36:6B:60:90:2B:26:8A:E5:33:A6:95:D9:8E:51:E9:B0:BB:5F:1D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EC79FA642ABBBD0D2EE1CB7EDAB270875
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fDZrYJArJorlM6aV2Y5R6bC7Xx0.roa
Signing time: Wed 10 Apr 2024 10:48:32 +0000
ROA not before: Wed 10 Apr 2024 10:48:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15468
IP address blocks: 5.143.176.0/20 maxlen: 21
5.143.184.0/21 maxlen: 21
94.242.148.0/24 maxlen: 24
94.242.149.0/24 maxlen: 24
94.242.150.0/24 maxlen: 24
94.242.151.0/24 maxlen: 24
94.242.160.0/19 maxlen: 19
94.242.160.0/20 maxlen: 20
94.242.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 10 Apr 2024 11:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:9f:a6:42:ab:bb:d0:d2:ee:1c:b7:ed:ab:27:08:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 10 10:48:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c366b60902b268ae533a695d98e51e9b0bb5f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:64:2b:27:37:a5:4a:1a:9c:2b:65:ac:41:
19:8d:a5:3b:90:50:e4:5d:cf:3c:65:bd:29:1e:0e:
d0:d4:d3:37:19:02:4c:d8:e6:fc:cd:e2:6b:02:93:
f4:84:bb:f8:d4:d5:f3:2d:e7:87:42:38:73:30:60:
75:20:4e:c9:1c:18:f0:1b:5a:21:da:53:07:5f:e1:
4a:85:32:b3:66:c9:09:ad:f9:64:05:34:69:7e:04:
e3:e8:8e:58:c9:2d:8f:db:15:4b:b0:54:bc:24:f2:
d3:07:90:f9:7d:b0:4c:c2:cd:a6:fe:92:3a:56:83:
a6:ee:b1:40:bf:28:c9:4c:a3:91:b7:ad:08:71:b8:
95:eb:a8:ba:64:6e:69:b3:30:c1:71:08:fb:7d:e9:
ad:7f:83:dc:8b:14:cd:b1:b0:aa:38:39:df:e3:73:
5e:71:e5:bd:44:30:81:90:60:c9:93:70:60:75:2e:
0a:c4:cb:e7:5c:6f:ac:f5:f8:d3:78:1f:51:3c:58:
e9:e2:b9:92:7c:93:46:e7:c6:49:24:ad:10:23:86:
2b:9b:65:6f:7f:e7:20:97:3a:fc:6a:83:94:25:16:
a1:de:08:ec:66:9b:03:94:a2:7d:89:19:f5:01:c3:
9d:f3:11:04:2f:e2:73:f7:ba:45:88:5f:bf:a0:f9:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:6B:60:90:2B:26:8A:E5:33:A6:95:D9:8E:51:E9:B0:BB:5F:1D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fDZrYJArJorlM6aV2Y5R6bC7Xx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.143.176.0/20
94.242.148.0/22
94.242.160.0/19
Signature Algorithm: sha256WithRSAEncryption
03:8c:94:28:2d:10:da:6e:90:c9:1f:99:70:e1:a8:99:52:8b:
85:57:03:75:f4:ae:ee:a6:2f:27:c7:aa:28:e1:f8:b1:7b:9d:
ed:48:59:95:4a:f3:1a:fe:a9:4a:d8:6e:b7:69:8d:47:08:ee:
2e:1b:14:90:60:24:91:ea:9b:23:c3:ab:80:b6:f0:9c:31:28:
23:e7:78:be:15:f3:cd:d4:c3:64:01:13:df:de:26:9f:cd:f7:
38:d7:85:86:b0:a6:f4:de:18:04:7b:37:ce:05:86:23:f7:e5:
00:08:71:c0:20:e0:6f:83:ee:77:a3:9b:fb:84:f2:dc:fe:72:
5f:0d:11:7b:b7:10:f5:a1:db:d7:33:dd:16:ee:83:4e:a8:57:
cf:da:82:2a:cb:36:c2:44:47:46:46:9b:d2:f2:a5:2a:f6:1a:
16:16:cd:25:a6:d5:d7:7a:e5:fa:06:90:85:1b:c9:a8:de:68:
c6:18:3e:7b:e3:12:2a:38:db:c2:82:4a:99:25:1d:78:7b:2d:
c4:93:cd:c9:3e:82:db:78:2f:9f:43:5c:fa:6c:71:bc:13:0a:
4f:44:18:86:7d:d5:d3:83:31:0e:1a:bb:7b:4b:82:72:7c:3f:
39:8c:a7:21:cd:d9:a6:b9:cc:c7:04:12:26:9a:17:8f:4f:6e:
07:f4:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:51:01 2025 by rpki-client