Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vUfkvPT4AGUXa_xAXNsfQx60KZM.roa
File: vUfkvPT4AGUXa_xAXNsfQx60KZM.roa (raw, json)
Hash identifier: IZIR/L9LE+yp1Mot286vf9pjS1R/HbwD41FztssBPYI=
Subject key identifier: BD:47:E4:BC:F4:F8:00:65:17:6B:FC:40:5C:DB:1F:43:1E:B4:29:93
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019146CAC6CC780D4D7BA2A0251CD168D46C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vUfkvPT4AGUXa_xAXNsfQx60KZM.roa
Signing time: Mon 12 Aug 2024 13:32:59 +0000
ROA not before: Mon 12 Aug 2024 13:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 18:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:ca:c6:cc:78:0d:4d:7b:a2:a0:25:1c:d1:68:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 12 13:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd47e4bcf4f80065176bfc405cdb1f431eb42993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:26:05:04:18:4c:e0:76:17:fe:16:31:ce:
2e:ff:c8:0f:7e:5e:85:15:bd:1d:21:68:3d:6a:de:
ab:63:4a:39:3c:3c:40:45:a4:86:3a:f5:65:f4:24:
ef:95:44:65:97:0b:cb:f8:69:27:99:da:b2:41:f0:
26:bd:ea:ee:7a:6c:b5:91:b6:75:71:73:79:cf:fa:
93:5c:27:c8:85:f8:32:36:44:af:ae:af:cc:15:2e:
6c:17:5b:9b:36:ec:53:24:2f:b6:b7:51:d6:4e:1e:
b5:d1:17:83:5d:9a:03:af:c8:47:96:39:c1:c3:80:
14:19:77:a6:8d:de:cc:72:b3:62:be:c0:83:f6:02:
a8:4e:f6:01:8d:ed:6b:dd:b3:cf:73:88:3c:b2:72:
e7:95:a0:56:56:a6:8d:78:e4:da:6e:76:ac:77:d6:
4b:c2:25:1e:09:24:22:a0:b0:a0:dc:dd:8e:db:66:
d6:5b:8c:e2:a8:59:e9:05:f7:17:30:9f:11:fb:de:
23:c1:08:bf:f0:67:d3:71:66:8f:de:63:97:78:f9:
e1:c3:b0:d0:a0:03:3e:4d:aa:c3:8c:84:71:01:2d:
ea:73:93:d3:46:cc:33:79:8f:30:97:1b:32:57:89:
93:1a:c7:40:ad:33:31:9b:7c:37:5e:8c:a4:a2:e3:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:E4:BC:F4:F8:00:65:17:6B:FC:40:5C:DB:1F:43:1E:B4:29:93
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vUfkvPT4AGUXa_xAXNsfQx60KZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2b:40:e0:17:c3:11:fb:07:32:36:a1:18:51:a4:a2:ae:49:
3c:13:47:04:ae:6b:13:89:c0:22:5d:bc:79:12:39:51:3e:be:
74:3c:8d:2a:6c:ce:d0:33:08:9e:27:95:69:f1:36:c6:16:1d:
39:b2:de:b8:3a:ca:da:54:7c:88:b4:53:26:03:d2:9f:b1:79:
ee:4f:dc:a8:45:6b:3a:02:0a:cf:76:5f:cd:de:e5:d2:9b:91:
f7:aa:32:e3:73:85:e3:bd:08:0c:be:78:89:aa:5e:34:66:b2:
cc:5e:7d:6c:04:85:bd:be:09:53:7a:fc:7d:0f:01:8d:24:f8:
42:dd:26:1d:b2:34:53:e5:62:b3:c2:18:e6:33:2a:df:27:74:
94:5b:76:f6:bf:a1:af:b1:3e:98:b7:dd:12:23:04:80:aa:c6:
a8:95:4a:bd:c4:63:f7:c5:6c:2d:a0:4e:c2:0f:ca:51:33:1f:
25:57:56:d3:a4:1a:d7:3e:dc:0b:d3:be:fe:86:bc:e1:cb:06:
7f:15:6f:ce:21:85:9c:3a:42:64:d8:fc:60:97:e0:54:00:ad:
0a:28:92:d7:c0:d1:c2:db:dd:41:be:4a:5b:5d:38:2d:c4:cf:
45:c3:a8:3a:a1:5c:65:36:fa:b5:ab:9d:02:1c:7d:8b:b0:0b:
56:6e:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:20 2025 by rpki-client