Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/kQxCGM-ew5Zqz8OTQQLXfc7pn40.roa
File: kQxCGM-ew5Zqz8OTQQLXfc7pn40.roa (raw, json)
Hash identifier: XwkB5z/438bUh4Y639FlweYS6HyYyac9SEqLiGTGVA4=
Subject key identifier: 91:0C:42:18:CF:9E:C3:96:6A:CF:C3:93:41:02:D7:7D:CE:E9:9F:8D
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018DECA9CFF67E2C329B0A402FD511719C48
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/kQxCGM-ew5Zqz8OTQQLXfc7pn40.roa
Signing time: Tue 27 Feb 2024 22:22:48 +0000
ROA not before: Tue 27 Feb 2024 22:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47890
IP address blocks: 2.57.122.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
45.129.14.0/24 maxlen: 24
45.129.15.0/24 maxlen: 24
45.138.96.0/24 maxlen: 24
45.138.97.0/24 maxlen: 24
45.138.98.0/24 maxlen: 24
45.138.99.0/24 maxlen: 24
45.148.9.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
80.94.94.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
2a0c:9f00:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 13:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:a9:cf:f6:7e:2c:32:9b:0a:40:2f:d5:11:71:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Feb 27 22:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=910c4218cf9ec3966acfc3934102d77dcee99f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:3b:50:34:54:c8:52:61:d7:c5:09:b9:e9:
f6:3d:90:43:d0:c1:02:ce:1e:06:9d:1d:ee:1d:30:
ce:d9:e6:ab:77:93:06:97:cf:a1:e8:a1:cc:68:48:
4a:d1:83:67:62:9b:3a:2d:52:cd:bb:f5:77:9d:46:
f7:ee:a1:ba:1b:6e:46:b2:1b:2c:6a:47:a7:43:30:
61:c9:34:a4:28:6a:d1:1d:96:98:ef:b3:d3:9f:a8:
08:f0:94:1a:6e:87:b2:30:ec:c9:f8:73:ef:f5:9b:
bb:23:99:72:49:73:5a:70:dd:d9:57:25:33:05:f4:
2a:ef:5a:95:88:db:5b:83:54:3a:7f:48:2b:7d:8d:
66:30:e1:dd:e5:2b:89:25:78:6c:23:e3:35:5b:8d:
4e:4d:2e:9a:e9:f0:9a:35:bb:65:2d:61:c4:b9:a1:
01:24:71:fc:3a:11:ee:71:5f:fb:f8:49:e1:65:6b:
95:a0:b5:69:36:1b:e2:fd:4e:ef:7c:fc:68:57:c2:
aa:91:14:db:ae:c9:77:9a:3f:94:a1:5a:90:85:b2:
f9:60:8f:a1:34:5c:7a:ad:5b:eb:f4:06:23:9a:cc:
b9:04:5b:51:0a:ca:09:37:9f:73:0f:f3:07:b1:7f:
5d:ac:83:2d:2b:0e:ee:51:27:be:db:ee:ed:7e:7a:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:42:18:CF:9E:C3:96:6A:CF:C3:93:41:02:D7:7D:CE:E9:9F:8D
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/kQxCGM-ew5Zqz8OTQQLXfc7pn40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.212.0/23
45.129.14.0/23
45.138.96.0/22
45.148.9.0/24
45.148.11.0/24
80.94.92.0/24
80.94.94.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.32.162.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
2a0c:9f00:2::/48
Signature Algorithm: sha256WithRSAEncryption
12:d0:5f:a4:0f:a8:2b:9a:28:c7:f0:5a:52:32:1d:58:7c:e8:
37:88:1e:3a:a1:76:8b:22:1a:66:17:01:74:08:26:44:f9:e0:
30:1f:18:4e:20:5d:2e:61:38:93:c2:1c:12:c6:04:be:40:89:
5b:45:da:ac:5f:9f:3b:be:03:a6:81:81:3d:3d:88:b9:c8:4d:
5d:2c:7a:da:82:12:ad:7d:7a:67:d1:6b:c4:fb:78:a9:2a:62:
0c:0a:b3:93:6b:97:28:7e:8d:88:de:e0:02:a7:9a:bc:35:45:
7e:6d:e5:03:28:24:fa:73:3d:ed:05:6c:d0:74:78:1b:d7:78:
e4:0e:a5:17:6e:79:55:7d:80:48:f0:54:69:8a:77:47:a0:49:
dd:aa:91:43:49:b4:29:46:24:88:12:7a:86:6c:b8:fb:43:cd:
5a:c6:f3:ac:6d:00:82:0d:94:90:9e:06:a5:1b:09:47:71:de:
ed:e0:b1:55:90:29:7b:47:cb:d1:f3:99:07:9a:16:d3:0a:af:
d2:8a:3b:5b:53:63:d1:6a:ef:0e:5f:60:53:01:bb:07:5a:b4:
b0:a0:6e:20:d2:e7:28:e4:e8:f8:de:24:ee:e0:1d:d2:68:fb:
fb:a9:64:f6:69:01:94:5d:3d:d4:51:41:d7:4c:e5:dd:33:52:
3e:6a:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:06 2025 by rpki-client