Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aSIrTQq3ib_g3NCwVvRRM1ahJCI.roa
File: aSIrTQq3ib_g3NCwVvRRM1ahJCI.roa (raw, json)
Hash identifier: lZc3Igu0kigJGqnVV/xEHyVobwF6O7gRAxI3Bb875Ic=
Subject key identifier: 69:22:2B:4D:0A:B7:89:BF:E0:DC:D0:B0:56:F4:51:33:56:A1:24:22
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 0193B4F0D58118D100BD4691C7E08A300779
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aSIrTQq3ib_g3NCwVvRRM1ahJCI.roa
Signing time: Wed 11 Dec 2024 08:58:22 +0000
ROA not before: Wed 11 Dec 2024 08:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51101
IP address blocks: 88.135.186.0/24 maxlen: 24
178.217.112.0/21 maxlen: 21
185.230.224.0/22 maxlen: 22
195.43.66.0/23 maxlen: 23
2a0c:3100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:f0:d5:81:18:d1:00:bd:46:91:c7:e0:8a:30:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Dec 11 08:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69222b4d0ab789bfe0dcd0b056f4513356a12422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:8c:ef:11:59:40:09:65:8c:d2:41:7e:6b:
f0:ec:68:54:fb:6d:29:c6:fe:46:6e:c8:d3:a8:47:
36:51:2c:78:0c:43:1d:6e:02:2c:0f:f4:e5:11:9a:
19:61:3d:87:c8:8a:60:87:da:b9:45:d5:be:3a:b8:
aa:e6:8d:89:17:d7:50:f9:d9:4a:6c:17:78:70:ba:
92:45:eb:d2:b3:89:68:ed:88:fe:0c:64:51:8b:50:
ed:f1:3f:35:6b:9b:90:6f:d8:94:83:f5:47:a4:f3:
18:e3:f2:11:03:a6:c8:55:c4:af:a8:c2:f8:44:72:
de:91:22:54:06:a6:eb:fe:08:7a:85:30:c4:1c:6d:
10:78:06:8a:5c:88:88:cd:15:a5:ea:95:40:bd:03:
31:11:c4:68:7e:bd:fd:70:d7:77:bc:84:15:2c:32:
3e:1d:d3:d5:c6:76:70:07:c8:53:e0:a5:05:5d:db:
f8:06:e9:6f:97:68:01:19:1b:19:fc:2b:a1:62:e0:
92:22:66:6a:a6:67:41:3f:6f:0e:0a:ca:c4:bc:28:
f5:e7:04:2a:8c:82:7e:f9:a3:46:dd:05:93:03:06:
25:4b:a6:e6:d1:c5:2b:8c:99:39:b4:4f:89:56:06:
fc:b3:4e:92:84:72:06:57:8e:03:17:ca:5f:d8:39:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:2B:4D:0A:B7:89:BF:E0:DC:D0:B0:56:F4:51:33:56:A1:24:22
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aSIrTQq3ib_g3NCwVvRRM1ahJCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.186.0/24
178.217.112.0/21
185.230.224.0/22
195.43.66.0/23
IPv6:
2a0c:3100::/29
Signature Algorithm: sha256WithRSAEncryption
06:b6:a7:1e:02:f0:72:30:eb:95:2a:31:50:98:0c:bb:49:7a:
87:7e:7c:32:79:64:04:40:e8:68:ba:b2:4d:b8:29:53:53:49:
69:51:6e:be:7d:43:13:19:59:93:86:50:60:7c:4b:2f:ed:37:
05:cb:9d:20:88:2a:38:6a:9a:f1:d2:b8:2c:42:92:60:35:d4:
c0:f2:44:48:8a:b5:4c:1e:17:f6:3a:51:f3:94:9b:1f:7d:e2:
28:fc:36:80:56:c1:d5:e5:13:7d:b7:08:4b:41:bc:59:66:12:
17:f9:9e:4e:f1:bf:d3:1d:9c:c3:ad:57:3b:c0:05:d9:30:40:
42:5f:d3:b6:58:2a:85:01:1a:26:78:59:93:75:b7:07:3d:c7:
b2:f9:33:90:bb:69:36:64:8e:61:fb:10:62:9e:c9:27:e9:d0:
46:ce:ac:b1:43:08:4d:94:45:24:bf:af:93:7e:16:33:fd:dd:
74:2c:32:95:62:af:5e:b1:91:13:74:e5:2f:9d:a8:9b:67:c0:
bc:8e:cb:f3:3a:bc:10:95:44:07:1e:94:63:29:49:c0:4f:0c:
64:57:8b:7a:81:11:ef:4c:b8:8f:09:17:bf:2e:7e:fa:a4:9f:
fd:0e:be:6b:3a:b2:f8:a7:8c:62:b7:96:41:9e:32:16:48:da:
e4:ee:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:50:28 2025 by rpki-client