Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TIfzKue-WrlGbA-9KAUKBrSTP7o.roa
File: TIfzKue-WrlGbA-9KAUKBrSTP7o.roa (raw, json)
Hash identifier: WsAre2VXLJNecyxsclGEL+QoNCqv2qnSOlm2gPdwWcs=
Subject key identifier: 4C:87:F3:2A:E7:BE:5A:B9:46:6C:0F:BD:28:05:0A:06:B4:93:3F:BA
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019536E355BCCC497EA6381C071FF0A54A9C
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TIfzKue-WrlGbA-9KAUKBrSTP7o.roa
Signing time: Mon 24 Feb 2025 07:37:03 +0000
ROA not before: Mon 24 Feb 2025 07:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.144.0/21 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 26 Feb 2025 08:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:e3:55:bc:cc:49:7e:a6:38:1c:07:1f:f0:a5:4a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 24 07:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c87f32ae7be5ab9466c0fbd28050a06b4933fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:61:3d:36:a6:c3:5c:49:39:f3:d7:0b:f8:
2e:de:27:dd:ee:62:54:78:f2:36:ba:2f:da:f1:b5:
3b:9f:84:20:86:9b:ca:2d:e9:6b:63:67:df:b8:6e:
7a:e7:ff:39:d2:9c:12:86:29:32:7a:18:bc:c0:b7:
71:c8:83:33:5d:69:37:d6:c9:55:3d:52:25:2a:87:
21:d1:a5:56:3f:50:94:da:8d:6e:31:09:a5:97:c5:
36:74:06:50:d7:06:23:57:1c:ed:d7:54:e1:26:0b:
cb:6a:2d:41:7f:70:bd:cf:ea:f1:55:1f:ca:b5:24:
22:4c:cc:16:ec:87:b4:e8:3a:dc:c0:3e:b3:ae:9d:
7f:fb:be:6a:00:b5:b8:53:74:0e:88:35:7c:f7:af:
bb:30:90:5e:19:f8:9e:bf:17:56:2f:a4:23:fe:b2:
e2:15:d5:8f:3f:f9:00:d7:47:36:a5:bb:7e:12:37:
c3:2a:56:10:b2:5d:04:f8:f5:e8:97:63:e8:3b:da:
e4:5c:a6:92:03:76:cb:81:03:d6:1e:72:95:e8:f0:
d2:59:20:76:d4:ea:27:80:d5:5d:8e:be:f3:e0:dc:
dc:26:bf:b8:a6:03:6e:ad:1c:03:0e:3f:7b:32:1f:
97:32:4a:ba:5b:7b:99:51:31:26:16:aa:cd:d2:df:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:87:F3:2A:E7:BE:5A:B9:46:6C:0F:BD:28:05:0A:06:B4:93:3F:BA
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TIfzKue-WrlGbA-9KAUKBrSTP7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.144.0/21
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
a1:15:74:07:4b:e8:68:0c:e4:0d:3e:08:f6:e3:13:fe:7e:24:
a8:44:10:cc:43:5f:af:e9:ea:e7:a2:82:b7:a0:31:64:05:9f:
04:12:50:53:e2:ee:47:bc:70:02:6b:6a:29:bf:24:6c:e3:b3:
19:45:61:6a:0f:04:9d:c9:05:e9:de:3a:22:c7:2a:f3:90:08:
73:65:28:4b:8a:9d:24:17:3f:c3:83:34:69:94:19:87:f3:fb:
11:71:c2:92:ce:2d:81:36:8a:c1:dd:57:1b:72:e6:e1:60:dd:
ad:c9:46:46:82:e7:13:6b:fc:fe:2a:a7:e1:9e:c3:17:12:ba:
53:c8:80:ed:5e:17:77:fc:8e:c2:20:86:67:75:65:37:c5:a0:
09:91:4d:1c:da:10:45:ac:87:e0:00:6a:c6:01:ae:e0:74:db:
bf:70:6c:5b:b8:96:3f:d7:69:b8:e5:5e:62:f9:20:ab:7e:84:
33:86:02:f9:e9:4a:df:fa:a1:55:56:68:a8:20:90:fb:86:96:
5e:0f:7d:bf:61:60:1b:47:29:81:c1:26:3a:10:05:a4:4a:a4:
4c:04:94:d7:4a:59:6f:d6:75:29:37:b1:59:14:0f:b5:92:d2:
70:52:19:d4:00:09:92:59:fa:eb:9e:ed:f1:18:f6:da:89:7b:
d8:47:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:46 2025 by rpki-client