Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RIq_gaC_LDZ3M2P0cJf13o__OXI.roa
File: RIq_gaC_LDZ3M2P0cJf13o__OXI.roa (raw, json)
Hash identifier: uO/ZP83OtW6xYu29UoC4XLYwkvnP6bIlk5AbexRdkN4=
Subject key identifier: 44:8A:BF:81:A0:BF:2C:36:77:33:63:F4:70:97:F5:DE:8F:FF:39:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193F7169951AAC7FD9F2240E7633CBEFA55
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RIq_gaC_LDZ3M2P0cJf13o__OXI.roa
Signing time: Tue 24 Dec 2024 05:14:33 +0000
ROA not before: Tue 24 Dec 2024 05:14:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 14:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:16:99:51:aa:c7:fd:9f:22:40:e7:63:3c:be:fa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 24 05:14:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448abf81a0bf2c36773363f47097f5de8fff3972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:5e:3e:c0:28:3e:09:30:e9:a9:d6:4c:d9:
a5:b2:62:de:e6:20:84:81:16:df:c3:90:f5:0c:2e:
8c:13:9e:c2:05:3a:c8:2d:ce:bf:44:04:09:8e:d3:
ee:03:8f:ed:97:fd:8b:6a:aa:b7:a7:26:29:b5:30:
63:bd:9f:35:29:b6:6e:9a:e6:9b:80:76:c8:fc:f1:
7f:b9:e7:1a:7a:f3:07:5e:ee:b2:bd:49:7a:d9:27:
9d:a0:bf:61:2c:34:14:f5:f9:b3:35:44:9c:5d:32:
5f:61:10:fd:bc:6b:42:38:9d:df:ce:01:20:22:51:
5b:07:36:df:33:b6:f0:21:17:e9:07:72:da:c1:f2:
ce:48:2d:6b:e3:f8:d4:0b:f9:b3:2a:c0:86:34:95:
58:87:d4:04:6d:75:26:2a:e6:ee:7f:0a:d7:f7:77:
09:4d:bc:2f:9c:5f:08:99:19:d8:1b:8a:95:a9:54:
08:61:b1:1b:75:71:31:0c:e9:a6:36:ad:e4:20:01:
c0:d9:f9:13:94:fe:da:9d:83:5d:80:8f:3a:90:b0:
36:52:a9:f1:ee:6b:a6:b2:0b:4c:94:c6:ec:ba:c9:
52:fe:1e:46:b2:c5:f0:4c:c7:13:68:7c:7f:0f:ba:
69:e6:1c:26:91:dc:b3:35:3b:ae:ca:16:1b:6f:c0:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:BF:81:A0:BF:2C:36:77:33:63:F4:70:97:F5:DE:8F:FF:39:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RIq_gaC_LDZ3M2P0cJf13o__OXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.138.0/24
77.90.54.0/24
87.239.130.0/24
89.106.69.0/24
94.103.163.0/24
94.249.148.0/24
95.215.32.0/24
95.215.34.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
65:03:14:7e:75:2f:5a:11:aa:61:ca:87:a5:39:35:90:d2:72:
3f:e3:4a:c7:bb:d5:e9:bc:ef:4b:8b:98:03:a0:02:74:8f:a2:
0c:d6:d0:31:de:54:19:98:f1:ba:a5:7b:a3:e9:f9:45:d2:ad:
c6:d3:9e:90:05:b9:ce:86:10:69:25:7d:4c:73:0d:33:29:f3:
61:f7:05:cb:95:b3:ab:80:8e:9c:9e:19:62:16:4f:b1:7f:dd:
8d:a0:83:6c:b9:ad:3e:ab:45:87:05:4c:b0:c8:59:07:5d:9c:
c1:91:22:77:46:60:e0:72:3d:2d:f5:e9:db:ef:59:02:66:17:
89:67:88:9c:21:d6:f6:37:c6:da:60:7a:66:9c:75:cc:58:fd:
6f:32:50:52:42:6c:cc:db:8d:37:b0:9e:8d:a7:42:cf:cc:0e:
6d:9e:34:1c:3c:fa:62:ab:f3:64:38:78:fc:a3:3f:4e:8f:7a:
89:56:4c:16:c9:3a:be:75:97:54:9d:82:e5:84:7d:a7:29:7e:
28:40:a0:d6:db:99:f9:ca:31:73:63:ca:30:da:1a:60:79:34:
59:84:99:f2:54:98:17:49:8d:27:96:49:8c:e3:d7:a9:ea:67:
3f:06:fc:bf:15:61:1d:50:09:f7:87:96:bf:5e:ea:0d:92:83:
64:bc:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:23 2025 by rpki-client