Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/1-R2LItGCL62zgoCZ0cN-GlC5LDU.roa
File: 1-R2LItGCL62zgoCZ0cN-GlC5LDU.roa (raw, json)
Hash identifier: 0aVN8BMM85EeHu6Wn248QqBkUWbEJxOwPzDNVF9fCXI=
Subject key identifier: F9:1D:8B:22:D1:82:2F:AD:B3:82:80:99:D1:C3:7E:1A:50:B9:2C:35
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0192587BEC05B65D8E3D4FAAAEF337BA4403
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/1-R2LItGCL62zgoCZ0cN-GlC5LDU.roa
Signing time: Fri 04 Oct 2024 17:02:48 +0000
ROA not before: Fri 04 Oct 2024 17:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 45.88.78.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.205.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 18:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:7b:ec:05:b6:5d:8e:3d:4f:aa:ae:f3:37:ba:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Oct 4 17:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f91d8b22d1822fadb3828099d1c37e1a50b92c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:a2:bf:30:85:33:01:2e:a0:54:6a:98:18:
5d:8d:5c:4e:7c:57:95:99:ae:1e:25:20:e0:0e:7b:
7c:52:48:5f:dc:45:07:4d:03:e7:99:2c:28:69:17:
99:c7:b6:f2:ac:43:3a:61:64:29:bc:be:f6:ee:86:
92:69:d9:4c:6f:76:75:47:c8:8f:3c:3b:b8:ca:cf:
4c:7c:11:e1:b8:26:b8:71:3a:4a:59:e8:26:6e:3e:
4f:6c:73:cd:05:11:ff:8d:7b:76:56:34:4d:f0:fc:
fa:2d:bb:1a:46:1c:63:1a:83:1f:5b:7e:de:5b:a0:
ad:4f:fd:20:12:37:b9:1f:b6:06:ee:93:0d:f0:e8:
67:28:82:c9:71:21:aa:68:51:8f:01:30:c2:14:a4:
23:ea:22:b4:b1:50:23:cb:09:67:bc:54:03:4e:26:
c8:d5:f3:fa:1d:be:f9:83:a6:70:60:51:70:73:b5:
cc:e6:65:04:57:da:f7:45:da:bf:5e:83:ce:1d:0b:
d7:73:bd:bf:32:ea:58:81:43:2d:0e:12:03:e3:ad:
51:39:c2:46:1e:85:04:fd:70:a5:1c:33:a1:69:aa:
22:a4:ea:6b:08:dc:20:3f:14:ec:e5:0f:9d:f0:3b:
cd:5c:3e:5c:7a:2a:82:76:12:1a:87:c5:d2:b7:72:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:8B:22:D1:82:2F:AD:B3:82:80:99:D1:C3:7E:1A:50:B9:2C:35
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/1-R2LItGCL62zgoCZ0cN-GlC5LDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.78.0/24
95.215.204.0/22
Signature Algorithm: sha256WithRSAEncryption
95:56:1e:08:de:14:c7:68:d7:30:7c:2d:9d:95:26:ac:a6:b2:
b6:c4:20:25:11:c4:fb:f9:65:89:4a:1c:d3:35:50:4f:33:0f:
3c:54:b6:e9:54:29:a5:4e:25:cd:d3:2b:30:91:a8:93:35:6d:
1c:cc:a4:e1:4a:fa:68:08:7c:40:e0:d8:16:f0:ed:b2:59:e2:
8c:c3:14:49:03:00:49:5b:ad:63:e6:b7:82:50:da:29:0c:3e:
e6:7b:ac:bf:57:05:0f:18:f5:3b:7c:6f:bd:55:69:c7:9d:b4:
4f:e5:9e:c6:9a:41:a7:bb:0d:f7:33:5d:76:2c:d0:89:e5:da:
1f:17:91:d9:c4:0d:eb:97:dc:d1:0c:d5:77:06:55:0e:1c:b8:
31:ed:82:c0:15:a6:b4:ad:4f:cf:55:cf:a9:5f:34:9a:a7:1f:
f1:78:b8:64:61:f3:67:0d:7e:06:c8:b6:40:bd:1c:3a:a0:6d:
d9:09:c7:35:b2:6d:79:75:b1:34:38:aa:a9:7e:21:f3:b4:67:
74:35:41:a9:61:93:f1:08:83:38:f8:33:36:8e:ef:8a:ab:5d:
ef:07:ee:1c:d4:63:e2:78:a4:de:b5:7f:20:57:01:4e:e2:b6:
a3:20:02:7a:ff:2f:fa:12:51:44:6d:78:f8:c8:67:d1:ac:cd:
72:8b:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:13:21 2025 by rpki-client