Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/rgbtI6HQp8mnQ30FOeLDAcbBJAw.roa
File: rgbtI6HQp8mnQ30FOeLDAcbBJAw.roa (raw, json)
Hash identifier: uwreq1U9gNc3vmJst5BM4ZPDefO8sydXyWybWMLEdTA=
Subject key identifier: AE:06:ED:23:A1:D0:A7:C9:A7:43:7D:05:39:E2:C3:01:C6:C1:24:0C
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 0192284A44904F94EC7FB46CDD31DA8A36FB
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/rgbtI6HQp8mnQ30FOeLDAcbBJAw.roa
Signing time: Wed 25 Sep 2024 08:26:48 +0000
ROA not before: Wed 25 Sep 2024 08:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50533
IP address blocks: 134.101.64.0/19 maxlen: 19
134.101.64.0/24 maxlen: 24
134.101.126.0/24 maxlen: 24
134.101.127.0/24 maxlen: 24
145.14.224.0/20 maxlen: 20
145.14.224.0/23 maxlen: 23
185.160.248.0/22 maxlen: 22
2a00:17f1::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:4a:44:90:4f:94:ec:7f:b4:6c:dd:31:da:8a:36:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Sep 25 08:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae06ed23a1d0a7c9a7437d0539e2c301c6c1240c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:53:a9:36:f6:11:3b:db:30:83:93:87:82:
b3:89:f2:1e:c6:eb:ec:30:f7:9e:64:30:9f:ea:92:
13:f3:8b:dc:42:32:fd:6f:eb:87:78:53:80:7b:d6:
a8:b0:62:8c:aa:14:c7:ac:99:1c:e2:af:47:50:89:
93:46:4b:b2:21:e9:c3:98:d7:c7:46:f5:34:5d:37:
be:71:91:13:c1:28:93:9e:d6:cf:6b:bb:04:8a:87:
06:bf:29:b9:1d:32:48:7b:be:83:24:c1:4b:89:39:
9e:db:a5:4e:36:b7:88:87:78:2e:2b:2f:da:4b:2d:
d6:8e:9c:3c:21:17:a3:60:73:51:05:b9:61:b6:8f:
42:56:6e:20:83:cc:02:ff:87:4e:d4:6b:44:0a:5a:
b1:d9:c1:4d:57:58:e1:04:c3:8b:08:e7:4d:5e:e0:
52:87:61:ee:46:88:82:10:90:65:3f:d4:bd:a5:cf:
78:1a:65:f8:36:43:cd:8c:db:7e:0a:2f:3f:4d:bb:
d1:7f:8f:4a:75:2b:59:4b:58:63:76:c5:b5:04:fe:
e6:af:3c:e8:dc:f7:96:7c:04:e2:38:56:d8:e1:bc:
73:f6:39:d7:36:af:ae:3b:73:cf:e3:29:fd:dc:75:
d8:a7:13:18:1b:22:e2:b9:19:f6:55:d7:05:88:5c:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:ED:23:A1:D0:A7:C9:A7:43:7D:05:39:E2:C3:01:C6:C1:24:0C
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/rgbtI6HQp8mnQ30FOeLDAcbBJAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.64.0/19
134.101.126.0/23
145.14.224.0/20
185.160.248.0/22
IPv6:
2a00:17f1::/32
Signature Algorithm: sha256WithRSAEncryption
7c:d5:d0:c2:a1:af:42:40:2e:bc:ed:9b:b0:35:82:1f:20:d0:
4c:71:8c:cf:a7:b4:7d:f8:1d:8c:02:8e:7a:60:f3:ab:26:e7:
b2:43:75:06:8f:85:a2:d9:dc:91:cf:bd:6d:23:ed:3b:80:34:
cb:33:31:84:e4:10:70:f1:32:45:10:6b:aa:05:a7:71:d1:16:
59:57:b9:0a:71:f4:c8:db:a1:f9:af:12:f6:ee:f5:e9:05:3e:
b8:30:4b:81:46:af:ed:ba:ab:29:52:45:15:84:bf:1a:2a:f9:
c2:54:fa:51:d3:04:10:9d:71:a6:80:1d:af:7d:c9:2f:c1:40:
22:09:88:8c:17:51:04:56:b4:94:79:63:26:b3:dd:02:d9:d6:
d1:8e:d2:98:a0:8d:2b:24:c7:82:90:ee:cc:fa:ff:b8:80:9c:
b6:b2:98:3d:5b:85:49:68:6d:6d:ea:db:8e:1e:1f:87:1d:5d:
91:22:ee:e7:4a:34:cf:66:3b:a5:b6:e1:e6:d5:cb:69:a2:e1:
d1:c5:2a:01:db:1e:03:e5:be:fb:b0:b9:9d:62:13:aa:96:cc:
7e:31:58:2e:5a:28:c9:fb:bd:d4:56:d9:8e:af:5b:7c:9c:e8:
69:e1:19:6d:d8:f4:6c:d3:66:29:ef:0d:77:9f:96:5c:96:f1:
6e:0c:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:13 2025 by rpki-client