Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/cVj3jhSzL4bNbURpSYIWDdmpauY.roa
File: cVj3jhSzL4bNbURpSYIWDdmpauY.roa (raw, json)
Hash identifier: prYQWAju/oDgcRvwGEbxnYzHSQhm8BJrih5+Ghw1lYk=
Subject key identifier: 71:58:F7:8E:14:B3:2F:86:CD:6D:44:69:49:82:16:0D:D9:A9:6A:E6
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0193772D7CCDBBA73725D05C3707244C063D
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/cVj3jhSzL4bNbURpSYIWDdmpauY.roa
Signing time: Fri 29 Nov 2024 09:08:09 +0000
ROA not before: Fri 29 Nov 2024 09:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 07:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:2d:7c:cd:bb:a7:37:25:d0:5c:37:07:24:4c:06:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Nov 29 09:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7158f78e14b32f86cd6d44694982160dd9a96ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:60:8f:79:6b:98:ca:d1:12:f3:d7:a2:73:
f5:3d:d3:80:23:ab:b2:b5:9a:6f:52:f2:24:50:22:
7e:23:0e:7b:f6:db:fb:93:c2:3b:fb:76:a5:2b:a9:
41:27:9b:36:4f:01:b4:9b:41:00:9a:2a:ca:18:04:
ae:34:3c:34:e6:7d:1f:96:54:21:61:8a:5b:46:e0:
6e:12:83:df:63:ad:15:cb:2c:92:4a:e3:0c:10:4b:
a3:5b:d3:61:74:7c:55:a8:68:e4:ee:ba:59:66:14:
41:ba:47:bb:3d:8d:16:66:69:63:5b:1e:4d:d6:b3:
d8:3c:ba:83:23:3d:14:25:86:56:93:c6:2c:7f:89:
49:ac:e8:33:aa:28:63:e4:2f:3e:b1:32:1f:e7:d2:
9b:e6:66:07:05:04:51:b7:fe:6f:62:f9:bd:26:46:
9f:67:cf:4c:79:75:48:8c:b8:43:eb:96:8c:5b:58:
d4:fd:e4:e5:8f:43:52:5a:c5:1c:06:be:14:38:85:
fb:35:78:77:a0:76:35:00:73:1f:22:57:aa:3f:a3:
e9:7e:84:c4:cc:2c:9b:9a:0a:1f:ff:83:ae:6e:d7:
2d:d0:d9:c4:cb:c2:8d:25:ef:6b:1d:55:ab:3e:fe:
ed:6f:d5:b0:92:33:10:01:80:3b:16:17:20:4a:f5:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:F7:8E:14:B3:2F:86:CD:6D:44:69:49:82:16:0D:D9:A9:6A:E6
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/cVj3jhSzL4bNbURpSYIWDdmpauY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7a:e2:7e:d3:e2:1d:03:2d:44:be:92:77:29:41:dc:b4:48:
56:8d:23:29:10:66:37:96:d0:ba:79:8a:af:cf:4a:e6:1c:c7:
99:e0:5d:b5:1a:e4:e2:c5:c0:66:b6:47:a6:f1:f0:36:4a:de:
23:f4:f3:b1:54:5a:1a:4b:96:3e:d5:17:64:d1:fb:5b:e1:c9:
cf:18:06:02:2d:16:b5:93:39:96:a2:02:03:e9:7a:7c:8a:bb:
2e:31:7b:b5:53:c3:55:06:7e:1c:f6:b5:e6:35:37:63:7d:9d:
01:f2:f5:a7:bc:8c:de:c6:73:b3:d5:17:46:6d:9d:a8:ef:09:
45:c9:98:e3:dd:b6:27:a3:72:73:53:59:09:58:dd:86:28:c6:
e9:ba:86:6a:10:1d:56:9c:2d:e1:2b:ed:32:1e:28:9b:11:75:
4c:0c:c9:5c:e7:be:01:ff:f1:90:3f:e4:04:88:f8:af:8d:14:
8b:0a:34:5e:36:e3:0d:46:6a:b4:d1:ec:38:35:f8:3c:58:ab:
44:39:63:53:2b:71:64:e0:c4:5b:5e:dc:6c:bb:6d:13:48:9e:
27:46:be:e1:48:00:3c:1b:dd:82:b1:d9:e8:a8:75:1e:60:d1:
59:41:d2:7a:34:ee:2b:dd:d8:8d:29:d0:73:b5:44:e7:dc:6d:
4a:d7:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:32:15 2025 by rpki-client