Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/0l4WBxS7dqy4q-bRpka4VT9dLv8.roa
File: 0l4WBxS7dqy4q-bRpka4VT9dLv8.roa (raw, json)
Hash identifier: 5XzowngYhdzdkCbRiy+m2yY2iu07nnHqb5HCFebW16A=
Subject key identifier: D2:5E:16:07:14:BB:76:AC:B8:AB:E6:D1:A6:46:B8:55:3F:5D:2E:FF
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0193BA8621520F18CBDF122F61AF55778742
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/0l4WBxS7dqy4q-bRpka4VT9dLv8.roa
Signing time: Thu 12 Dec 2024 10:59:32 +0000
ROA not before: Thu 12 Dec 2024 10:59:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 45.88.78.0/24 maxlen: 24
81.91.176.0/22 maxlen: 22
81.91.176.0/24 maxlen: 24
81.91.177.0/24 maxlen: 24
81.91.178.0/24 maxlen: 24
81.91.179.0/24 maxlen: 24
95.215.205.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
103.246.144.0/22 maxlen: 22
103.246.144.0/24 maxlen: 24
103.246.145.0/24 maxlen: 24
103.246.146.0/24 maxlen: 24
103.246.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 11:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:86:21:52:0f:18:cb:df:12:2f:61:af:55:77:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Dec 12 10:59:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d25e160714bb76acb8abe6d1a646b8553f5d2eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:6f:1c:a2:e2:2d:43:fa:78:54:bb:e3:04:
8b:da:30:fd:23:36:a4:49:24:c8:e9:7c:2d:13:a6:
89:a8:98:e8:3a:b4:03:02:59:66:db:3f:a2:80:44:
8d:aa:f6:b5:da:48:95:c0:d3:75:66:1f:89:4d:83:
10:17:2e:f6:47:9a:60:97:e2:eb:d9:74:6b:9b:ac:
79:e3:2e:0c:03:08:ff:58:74:0a:ba:27:fb:01:b6:
05:3d:dc:ef:68:de:5a:7e:35:df:07:3d:4c:23:b8:
3e:39:dc:e5:95:e9:3a:d2:7a:6d:6b:c1:50:b2:80:
31:95:5f:7c:55:11:0f:e6:21:8b:df:d4:ff:a8:1f:
62:de:47:94:6d:0e:60:eb:e5:25:5d:48:00:8f:5d:
7c:82:42:f5:9e:7d:af:ed:29:ef:14:1a:38:2b:ad:
6f:d9:1d:32:ab:02:1c:82:8d:34:f3:e7:7f:ea:f9:
51:6d:32:86:7a:6d:9f:d6:50:b8:47:e2:9e:28:d9:
e5:f4:2d:4c:bf:bc:d3:1f:23:59:19:f4:f2:71:13:
f0:95:a9:00:fd:1f:50:96:87:0d:be:f1:32:eb:ae:
3b:d6:fb:2e:97:0e:4c:76:87:47:b4:ca:17:38:06:
dc:3d:f4:c2:b8:33:d3:81:b9:2f:39:46:01:45:85:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:16:07:14:BB:76:AC:B8:AB:E6:D1:A6:46:B8:55:3F:5D:2E:FF
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/0l4WBxS7dqy4q-bRpka4VT9dLv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.78.0/24
81.91.176.0/22
95.215.205.0-95.215.206.255
103.246.144.0/22
Signature Algorithm: sha256WithRSAEncryption
75:c5:7f:a9:3d:c2:a7:f8:2a:41:ac:c7:6c:98:98:6d:3a:ef:
d6:5c:7c:13:52:18:ec:74:94:97:45:43:97:0b:c2:b9:e1:87:
93:bd:7e:48:3d:30:b0:33:e8:5b:d1:1c:0d:2f:02:78:42:14:
c2:0b:2e:c0:29:f1:99:e4:47:8e:b1:3e:48:fd:95:9f:19:a4:
18:e6:41:8a:4d:59:2e:82:4d:18:4e:59:35:60:b3:e7:41:7d:
31:00:dd:ab:86:8b:ce:b1:a0:ec:21:47:2b:0d:1d:48:cf:2d:
78:51:14:38:7f:f8:69:4d:95:23:7d:93:ca:39:b4:cc:84:42:
17:dc:75:fe:64:1f:ac:d4:5b:6a:a2:ed:df:f4:0e:88:b5:94:
2f:f8:87:29:e7:75:b0:6f:1c:ab:5f:fe:a2:28:cc:1c:c9:d8:
3b:db:8d:59:46:d6:b7:d8:b4:1f:77:4a:11:79:7a:1f:81:6b:
d2:14:4c:2f:66:b8:bc:0e:d0:ef:32:7f:33:20:34:e5:93:56:
8e:23:04:33:24:05:fd:89:80:09:e1:b2:fe:87:be:60:94:9f:
6a:40:5b:21:fe:6a:4b:d4:48:04:ba:ea:91:00:a6:c4:8d:f9:
7b:d0:e4:01:3c:67:79:f2:e8:2b:db:49:fc:94:02:4f:18:ae:
9a:2b:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:52:54 2025 by rpki-client