Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/PXCtwJ1Q8o34S2O21RnB_bcyuQM.roa
File: PXCtwJ1Q8o34S2O21RnB_bcyuQM.roa (raw, json)
Hash identifier: /QaCd6XsfOvjtv0j+epc1J/hqdNFtB+UwIqRVdF89xY=
Subject key identifier: 3D:70:AD:C0:9D:50:F2:8D:F8:4B:63:B6:D5:19:C1:FD:B7:32:B9:03
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 01919E9CD037C92B062ADCAB2578DF4F2E04
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/PXCtwJ1Q8o34S2O21RnB_bcyuQM.roa
Signing time: Thu 29 Aug 2024 14:49:22 +0000
ROA not before: Thu 29 Aug 2024 14:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 09:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:9c:d0:37:c9:2b:06:2a:dc:ab:25:78:df:4f:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Aug 29 14:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d70adc09d50f28df84b63b6d519c1fdb732b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:81:eb:3f:9a:99:37:e9:95:33:59:2a:d7:
58:98:a1:0a:49:73:f9:ef:dd:d3:c9:2f:13:0c:5e:
a1:84:81:8c:fe:a2:14:d3:7b:3c:ec:b2:3c:75:f6:
65:34:9a:42:10:d6:b9:7f:64:27:7f:50:ce:e1:b0:
35:28:be:11:bb:2b:64:a3:b4:be:97:66:86:56:28:
1f:1f:45:23:ab:62:fb:9b:5f:4f:d0:83:81:2b:e8:
56:c1:a1:89:47:11:d1:b7:e4:96:18:fb:6b:8a:b0:
51:1d:17:4d:be:44:8c:51:a1:28:4d:b8:a9:6e:10:
9c:bc:3d:b0:d2:2e:79:8e:4e:32:bf:08:b7:fc:c5:
48:5a:34:e1:69:5d:09:76:d4:f9:07:4f:45:ce:53:
67:b0:06:17:76:f1:1f:e5:23:b2:fa:f3:80:9a:1b:
c3:ed:cb:31:2c:b4:8f:78:02:cb:65:fe:45:ea:44:
5a:c8:b2:f4:68:86:d3:75:64:74:f1:2c:25:9b:8b:
2e:12:2c:07:66:74:42:4c:88:ba:50:c3:66:50:6c:
e9:6a:a8:3f:f0:50:0e:05:99:5b:51:96:9e:a0:0a:
72:22:fd:34:83:c3:57:89:00:04:e0:bc:80:45:d7:
16:20:20:f0:a2:05:ac:b5:fe:f4:71:21:de:c8:08:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:AD:C0:9D:50:F2:8D:F8:4B:63:B6:D5:19:C1:FD:B7:32:B9:03
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/PXCtwJ1Q8o34S2O21RnB_bcyuQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
77.83.175.0/24
91.211.249.0/24
92.119.114.0/24
185.203.241.0/24
185.209.20.0/24
185.219.83.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e1:ca:15:36:30:a3:b9:bb:0a:c3:91:2e:be:98:10:fa:74:
50:14:6d:b3:d5:5a:28:e5:3d:b4:96:67:4a:6e:1f:89:20:94:
17:fe:5b:60:b0:a9:ff:1f:24:f6:1f:39:b7:57:ce:46:c6:57:
16:0d:fe:8f:48:8f:1d:0a:d9:e8:34:bb:c7:2c:bb:fe:9d:de:
98:05:77:15:82:12:4a:18:c3:24:7f:ea:f8:d1:a1:de:e9:65:
9d:06:48:2d:e7:de:42:f5:b4:32:69:c7:3f:9e:a0:ef:80:b8:
ed:8c:8b:e3:7e:0b:9e:74:d5:ef:8c:01:2b:5f:16:6c:77:c9:
45:23:2a:11:72:8f:59:8c:d1:19:dd:67:8f:ec:b0:ea:de:38:
e2:d1:69:92:d3:da:6f:df:c3:cb:09:99:c8:da:5d:e5:72:9b:
81:c6:e4:09:b0:55:a6:11:fc:54:0c:f1:8e:22:a6:e4:6e:df:
7e:9d:e8:45:99:ca:af:11:ee:4f:73:f3:2e:b3:99:64:3b:4f:
a5:a0:7a:8a:3d:cc:6c:56:6a:37:dc:5a:b3:71:0f:02:91:bf:
ef:d0:7e:61:79:59:57:9a:33:95:11:04:a7:b7:45:dd:50:f8:
88:ad:e2:1d:47:0f:41:5c:f6:8e:3d:df:8a:44:89:16:b6:67:
53:23:4a:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:50:36 2025 by rpki-client