Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/CcsfzGfxVSRMr0SWhUGVrEc2tJw.roa
File: CcsfzGfxVSRMr0SWhUGVrEc2tJw.roa (raw, json)
Hash identifier: n+U4YBMH7t4GHopkzIBaPCQvzyAw6lg5YGY/4RLWJl0=
Subject key identifier: 09:CB:1F:CC:67:F1:55:24:4C:AF:44:96:85:41:95:AC:47:36:B4:9C
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 01914C255134B7AD106970D4DD3C06746A6D
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/CcsfzGfxVSRMr0SWhUGVrEc2tJw.roa
Signing time: Tue 13 Aug 2024 14:29:59 +0000
ROA not before: Tue 13 Aug 2024 14:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49318
IP address blocks: 46.28.248.0/21 maxlen: 21
46.28.248.0/24 maxlen: 24
46.28.249.0/24 maxlen: 24
46.28.250.0/24 maxlen: 24
46.28.251.0/24 maxlen: 24
46.28.252.0/24 maxlen: 24
46.28.253.0/24 maxlen: 24
46.28.254.0/24 maxlen: 24
46.28.255.0/24 maxlen: 24
188.93.176.0/21 maxlen: 21
188.93.176.0/24 maxlen: 24
188.93.177.0/24 maxlen: 24
188.93.178.0/24 maxlen: 24
188.93.179.0/24 maxlen: 24
188.93.180.0/24 maxlen: 24
188.93.181.0/24 maxlen: 24
188.93.182.0/24 maxlen: 24
188.93.183.0/24 maxlen: 24
194.110.124.0/23 maxlen: 23
194.110.124.0/24 maxlen: 24
194.110.125.0/24 maxlen: 24
194.110.130.0/23 maxlen: 23
194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:25:51:34:b7:ad:10:69:70:d4:dd:3c:06:74:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Aug 13 14:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09cb1fcc67f155244caf4496854195ac4736b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:2d:13:d6:01:0b:f7:4d:9c:7c:0a:52:3b:
1e:f4:46:84:3b:6c:5b:82:6f:9d:56:32:9b:ec:4e:
8a:65:30:3d:42:21:da:73:e2:a0:7b:4f:2a:dd:ad:
9c:d3:df:52:c8:c4:0c:0c:a8:78:8a:2f:1b:25:93:
63:11:1f:a1:aa:41:70:9d:00:ea:15:dc:9a:e3:e0:
53:9d:bd:9f:37:d0:f3:d3:10:98:1d:1a:78:19:b2:
85:bc:33:37:e1:5f:72:2e:f7:89:28:7e:87:50:67:
2c:a6:b1:a3:e7:93:67:05:ec:22:ed:4d:e1:70:da:
e7:cf:86:0d:7d:67:6f:d7:af:a5:ba:a0:35:0c:5f:
62:d5:25:2d:db:c4:c0:be:58:f0:47:02:67:2f:f7:
8d:94:85:61:91:7f:19:be:4d:9d:8a:67:95:6f:f9:
cd:53:9f:a4:96:3c:11:df:1d:a9:01:42:e0:ba:62:
9d:8e:19:f7:8f:f5:cb:f4:14:fe:96:37:ae:29:5b:
dc:a8:40:a8:39:70:93:98:e8:04:d3:61:d9:3a:92:
2b:0d:05:84:49:54:9e:7f:1b:1f:55:3b:32:36:8d:
5d:09:53:22:fb:3d:64:bf:0f:eb:66:10:f7:2c:3f:
7d:7c:21:9e:04:db:c7:60:f9:bd:cc:11:24:8f:6b:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:1F:CC:67:F1:55:24:4C:AF:44:96:85:41:95:AC:47:36:B4:9C
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/CcsfzGfxVSRMr0SWhUGVrEc2tJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.248.0/21
188.93.176.0/21
194.110.124.0/23
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
98:5f:7d:b6:9a:b8:71:80:0d:a9:48:db:b2:64:0b:e6:2b:ba:
d0:7a:a9:a1:a2:69:71:b4:b2:87:cf:39:d4:7a:01:df:88:c1:
6d:3d:67:cb:33:38:c1:35:e1:f2:26:a8:7f:4b:fb:2c:e3:e8:
f5:72:08:29:ea:c5:03:56:5d:32:3d:bf:32:ab:3f:97:0f:56:
bd:43:bb:de:9a:60:05:64:9b:df:81:7c:59:bf:8d:cb:f6:e1:
e4:47:9f:a4:3a:4b:67:d7:07:95:c8:e1:e4:ff:e1:35:15:c4:
fd:16:8b:13:8a:ec:25:bf:c4:30:e9:4a:83:4d:38:dc:b1:2d:
17:aa:c1:34:f9:2a:d0:b3:a0:e2:f8:84:4f:bc:79:05:7e:1d:
11:4a:85:19:46:79:e2:3b:a1:58:d4:7c:92:26:7f:4b:ac:c3:
fd:dc:a8:be:9c:cd:5d:04:01:b0:bf:2c:60:99:cb:6b:01:a4:
a2:f3:75:d4:0b:d4:a1:f8:8f:ed:51:ce:27:e8:91:12:66:de:
d6:32:41:a8:83:68:c1:eb:45:80:25:23:82:5b:e0:5c:b9:d9:
73:d6:76:01:81:02:e7:e4:06:bd:91:e4:79:17:72:6f:67:d6:
9f:29:bf:27:96:b2:9b:39:88:1e:dc:16:b6:dd:4f:a9:83:27:
be:42:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:11 2025 by rpki-client