Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/MafDt_0qAIfzTTJRQJ1GH0w8jj8.roa
File: MafDt_0qAIfzTTJRQJ1GH0w8jj8.roa (raw, json)
Hash identifier: LhR+A6snhH+mEGqYdfzea9uSs8dBZspk4jQcTkmwhnc=
Subject key identifier: 31:A7:C3:B7:FD:2A:00:87:F3:4D:32:51:40:9D:46:1F:4C:3C:8E:3F
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0193BAB2739CB45B296D0975378AD6153414
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/MafDt_0qAIfzTTJRQJ1GH0w8jj8.roa
Signing time: Thu 12 Dec 2024 11:47:57 +0000
ROA not before: Thu 12 Dec 2024 11:47:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
45.147.196.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
185.203.240.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
185.224.132.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:b2:73:9c:b4:5b:29:6d:09:75:37:8a:d6:15:34:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Dec 12 11:47:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31a7c3b7fd2a0087f34d3251409d461f4c3c8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:80:c5:1f:d8:50:3a:a7:d5:1c:3a:e8:93:
b3:9d:2e:c4:32:37:96:c2:95:e9:d8:f0:62:01:cd:
94:c8:b6:60:37:0e:c0:ed:b6:77:88:9e:86:39:af:
85:e3:77:1f:80:0b:0d:46:89:ab:be:bb:02:4a:66:
79:72:4f:bb:b3:6a:60:9e:0f:d9:12:c9:f6:07:4c:
44:b4:85:f1:0d:71:93:85:37:c7:5d:91:51:be:bf:
11:ce:78:62:e4:d7:b7:92:13:e2:a5:17:95:5a:98:
47:f5:38:a5:35:73:da:9a:9a:58:41:88:bb:5c:96:
ac:b4:66:7a:6e:ba:ca:fc:c5:86:33:7b:37:8b:8a:
84:27:17:80:71:cc:63:19:4d:81:02:99:99:da:9e:
35:db:42:8e:ab:c5:07:88:b0:32:e2:e4:8b:93:0f:
60:87:2c:52:fe:f0:73:b3:b7:d1:0f:97:c5:c3:10:
58:55:fd:37:aa:6b:50:bc:82:66:cb:4e:60:d5:07:
59:46:20:58:48:62:d0:f2:a5:3b:86:05:dd:40:19:
59:61:8e:e0:a8:7c:1b:29:c9:2b:c8:a8:6e:d0:d4:
01:83:c6:db:7e:28:5c:3a:40:42:c2:7e:a2:af:1c:
52:58:07:5d:1f:ac:5d:72:40:e3:fc:d4:3a:7f:34:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:C3:B7:FD:2A:00:87:F3:4D:32:51:40:9D:46:1F:4C:3C:8E:3F
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/MafDt_0qAIfzTTJRQJ1GH0w8jj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
45.147.196.0/24
77.83.175.0/24
91.211.248.0-91.211.250.255
92.119.114.0/24
95.215.204.0/24
95.215.206.0/23
185.203.240.0/23
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
185.224.132.0/24
185.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:37:24:10:14:58:62:15:bb:1c:1a:c9:81:f7:7d:70:77:9e:
65:14:8b:b2:19:a4:a7:14:4d:56:a5:58:fc:51:e4:a8:1a:02:
4f:34:f7:68:18:5c:f8:97:f5:af:98:86:41:f5:9a:ba:2c:97:
9d:4c:e9:56:6c:26:92:07:9f:b2:0b:16:20:bd:04:99:f7:07:
f4:5f:ba:d8:46:c2:42:ce:c3:5a:df:11:8a:ac:89:b3:9c:6d:
44:3e:06:20:a1:0e:9c:5a:38:bb:1c:05:11:fe:01:b7:2f:73:
58:a3:d4:87:45:a9:4f:72:59:34:33:9d:7a:ce:79:7d:98:46:
55:93:6c:ff:ee:e2:4a:d1:70:5e:e2:51:97:36:97:5c:9d:7f:
0a:11:72:f4:83:a4:46:b4:c9:b1:62:4b:ed:32:be:86:9d:fe:
08:c3:5f:09:3b:20:5d:27:95:a5:81:5e:33:7d:1d:b0:75:3f:
7a:d4:b3:17:e0:cb:21:c5:8c:6e:3f:49:06:17:94:47:6b:11:
28:f5:17:9e:eb:a1:b5:bb:f1:8c:91:ff:f0:4c:08:23:c8:61:
1a:f4:db:17:13:8b:97:32:b7:aa:9d:04:49:7f:48:34:0e:3c:
a3:4c:ae:33:f3:4d:20:64:ed:64:83:ce:92:57:ab:b4:32:84:
72:4f:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:12:05 2025 by rpki-client