Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/LV2Z4TNQlGbPZIrLAUvoiBwWKo8.roa
File: LV2Z4TNQlGbPZIrLAUvoiBwWKo8.roa (raw, json)
Hash identifier: UA8fieMmfw5B7yd1qE7NEWus64tLe6kTdroXxOlpSI4=
Subject key identifier: 2D:5D:99:E1:33:50:94:66:CF:64:8A:CB:01:4B:E8:88:1C:16:2A:8F
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 019391E38FB2FB57B9E08BC3023F139CC562
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/LV2Z4TNQlGbPZIrLAUvoiBwWKo8.roa
Signing time: Wed 04 Dec 2024 13:37:10 +0000
ROA not before: Wed 04 Dec 2024 13:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 45.88.0.0/24 maxlen: 24
45.148.145.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 16:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:e3:8f:b2:fb:57:b9:e0:8b:c3:02:3f:13:9c:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Dec 4 13:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d5d99e133509466cf648acb014be8881c162a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:cd:c3:03:4e:95:cf:ce:4b:15:88:da:32:
76:31:bf:92:f2:4c:02:3b:83:85:14:63:4a:00:96:
4e:b8:60:2b:70:53:a6:07:fe:63:78:41:a0:46:42:
e3:a1:04:6b:4c:5a:c5:fc:33:a8:80:7b:47:02:fa:
14:f0:d1:58:47:2c:8e:bf:f1:62:f7:2b:a6:5c:f4:
58:be:7a:4b:60:67:be:71:db:d7:de:40:fc:b5:04:
c8:21:04:83:c5:45:31:af:05:98:7d:e4:6c:de:13:
df:30:02:ce:71:b2:5b:47:3d:0d:6e:1a:60:4f:e6:
b6:f3:3c:46:1d:62:e7:d7:46:bb:93:01:b2:fd:34:
c2:3f:fd:75:2a:6f:88:7c:83:f3:43:38:9c:a3:c9:
ab:94:cb:af:16:38:ef:d1:ec:36:49:59:89:37:87:
05:a0:ae:c8:61:81:2a:22:30:40:6f:64:c9:af:1f:
73:90:3a:52:7b:80:90:62:c6:8d:ff:75:38:b5:89:
63:51:d7:ac:1f:f2:c8:ba:32:6d:60:74:6f:99:a3:
82:dc:de:04:9f:f5:d7:d1:b9:00:fc:fd:c9:42:ae:
1a:fa:b4:03:0e:02:03:b7:10:8c:41:13:55:b7:31:
91:61:8e:66:eb:07:f5:58:58:da:47:5f:17:0f:d0:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:99:E1:33:50:94:66:CF:64:8A:CB:01:4B:E8:88:1C:16:2A:8F
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/LV2Z4TNQlGbPZIrLAUvoiBwWKo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.0.0/24
45.148.145.0-45.148.146.255
Signature Algorithm: sha256WithRSAEncryption
42:7d:c0:ce:2b:b2:3e:aa:b3:ca:be:ab:d4:35:f6:3c:7b:ca:
1b:5e:55:a5:e5:55:9c:9c:29:18:f0:76:e6:ef:7f:9a:1c:5b:
ee:07:05:43:29:eb:e6:89:87:f4:28:d5:b3:80:9d:9d:12:5d:
9e:98:91:53:65:23:9b:0f:d7:85:c4:86:35:11:a1:33:28:6c:
bf:f2:dc:fc:06:06:48:31:23:cb:52:e3:d1:e8:a5:e2:f9:c8:
55:53:1d:9d:8a:a3:e1:2d:01:9e:c0:db:c0:0a:5d:8e:69:ae:
55:af:a8:be:cf:4a:4b:d8:53:80:fb:0d:bd:66:07:3b:f0:fc:
52:93:94:93:64:99:cb:04:af:bd:df:6b:ae:6e:8f:96:21:11:
c4:bd:35:00:3c:2a:fc:e0:56:0a:c1:1d:ce:3e:c9:a2:19:99:
81:07:58:f4:e7:8a:04:c1:18:2f:3e:94:0a:a5:c9:4a:13:83:
ae:63:66:68:f1:f9:74:03:38:f3:99:a9:3b:81:3a:cc:86:1b:
ac:36:43:7f:3e:52:10:fc:5f:5a:42:8c:05:93:87:10:b5:e9:
43:ba:95:c3:b1:42:18:93:fe:33:ce:bf:2e:12:a2:22:0c:42:
a3:e0:62:47:ef:cf:7d:01:a4:27:f2:e3:6b:81:5f:09:4c:06:
9a:2a:77:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:47:52 2025 by rpki-client