Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/CPcd_lXEIXATXZaHNh5xDwekH68.roa
File: CPcd_lXEIXATXZaHNh5xDwekH68.roa (raw, json)
Hash identifier: ijoEK/piaedhefz+j7wJXzY8DLvXPuHVyzqlJIz39d8=
Subject key identifier: 08:F7:1D:FE:55:C4:21:70:13:5D:96:87:36:1E:71:0F:07:A4:1F:AF
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018D9708D773FDD8BF14AF7393883C595486
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/CPcd_lXEIXATXZaHNh5xDwekH68.roa
Signing time: Sun 11 Feb 2024 07:19:15 +0000
ROA not before: Sun 11 Feb 2024 07:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
192.200.192.0/19 maxlen: 19
198.145.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 19:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:97:08:d7:73:fd:d8:bf:14:af:73:93:88:3c:59:54:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Feb 11 07:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08f71dfe55c42170135d9687361e710f07a41faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:43:4b:03:fe:04:17:65:a1:29:44:91:bf:
85:bf:c7:87:b3:5f:23:e8:40:9c:da:d9:2d:4f:5f:
94:0d:ee:36:55:ce:1e:7b:b0:1c:cb:09:0d:c1:fb:
8d:0d:5a:9c:f1:61:37:a4:88:fa:00:83:d5:d6:14:
de:ea:ea:eb:46:87:a4:9f:70:2a:7d:00:1b:0f:a5:
fd:97:36:ad:a4:22:1f:e6:f7:e0:e9:c5:9c:eb:ab:
c9:2b:60:a0:6c:0f:61:94:48:0c:3f:74:58:ca:e6:
94:b9:13:a1:d8:da:62:69:ba:c3:a3:61:19:da:87:
fe:2d:1e:0d:8e:46:7a:4a:2e:95:88:68:2e:9a:c6:
e7:ec:9d:a8:25:23:8f:5f:80:df:29:da:12:65:9f:
e0:30:ed:75:cc:3a:fd:1f:af:11:d4:38:13:46:7f:
cf:d2:05:a6:a6:fb:44:a7:20:c9:1a:8c:e3:1b:ef:
2f:ab:a3:d6:f7:36:5b:df:f5:05:c4:f5:ba:3a:92:
84:c6:98:9c:81:4d:5d:59:cb:a4:81:39:92:04:7b:
63:3d:6a:cc:21:a0:88:8e:a6:43:6b:b0:ec:78:24:
51:a7:18:32:ef:0c:59:8b:1a:f2:42:f2:42:dc:a4:
a0:9f:63:8d:d2:b7:cd:57:65:15:99:08:c4:19:15:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:1D:FE:55:C4:21:70:13:5D:96:87:36:1E:71:0F:07:A4:1F:AF
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/CPcd_lXEIXATXZaHNh5xDwekH68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0-77.223.201.255
79.139.64.0/23
176.222.48.0/22
192.200.192.0/19
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:27:67:25:23:a0:61:b7:51:33:7b:de:9e:e2:4c:73:a3:9d:
d2:8b:68:09:6a:05:45:3a:96:c5:cb:cc:c2:86:55:4f:7f:7c:
22:f4:df:f3:eb:24:65:ad:fa:e8:21:05:54:56:a0:59:b1:fc:
3d:0d:3c:79:d9:ea:f8:1c:e4:d0:f2:c6:98:a1:8d:c1:b3:42:
e1:7b:66:ce:e8:79:95:34:aa:60:a0:67:57:3d:dd:c2:5c:38:
fa:bb:85:ca:0d:22:e6:fa:6c:0b:6a:3a:62:9f:73:7d:c2:4d:
64:f7:b9:0b:99:56:e5:9c:c3:13:17:b7:a7:ab:8e:dd:a1:61:
50:8c:de:25:fe:38:72:ab:04:64:b5:96:81:9e:78:d7:fa:98:
1a:0b:91:f0:63:57:84:13:8d:40:fc:66:58:ea:9d:2a:b7:f0:
ca:c9:79:54:f0:a0:85:7f:61:f8:26:b8:68:40:07:80:fc:18:
58:74:1f:55:a2:73:c7:70:e0:08:09:51:90:87:b2:bd:e1:21:
3e:03:53:ad:c8:10:1b:e9:43:01:9e:ba:48:ad:e1:6b:50:22:
aa:3d:b6:3e:a8:c5:f0:04:99:0b:4b:07:1e:99:0e:55:4b:ee:
c9:41:3a:b4:d5:c1:51:9d:f6:a8:06:79:ed:eb:25:d6:e0:93:
3c:4a:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:45 2025 by rpki-client