Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/tgLGue6TJPWpOucAwbaIYs9-pxA.roa
File: tgLGue6TJPWpOucAwbaIYs9-pxA.roa (raw, json)
Hash identifier: pPpJyIOcirXUCxLVec7ViI0JFXkbVuan48pm6hMt/RU=
Subject key identifier: B6:02:C6:B9:EE:93:24:F5:A9:3A:E7:00:C1:B6:88:62:CF:7E:A7:10
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 01943FE3C3F09F045DD90655BD4743245478
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/tgLGue6TJPWpOucAwbaIYs9-pxA.roa
Signing time: Tue 07 Jan 2025 08:31:18 +0000
ROA not before: Tue 07 Jan 2025 08:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
45.12.44.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.95.140.0/22 maxlen: 24
45.130.204.0/22 maxlen: 24
45.136.60.0/22 maxlen: 24
45.145.192.0/22 maxlen: 24
45.151.204.0/22 maxlen: 24
91.225.0.0/24 maxlen: 24
91.227.240.0/23 maxlen: 23
91.239.37.0/24 maxlen: 24
94.142.164.0/22 maxlen: 22
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.157.123.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
193.3.158.0/24 maxlen: 24
194.99.66.0/23 maxlen: 23
195.64.96.0/24 maxlen: 24
195.244.14.0/23 maxlen: 23
212.52.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 07:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:e3:c3:f0:9f:04:5d:d9:06:55:bd:47:43:24:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 7 08:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b602c6b9ee9324f5a93ae700c1b68862cf7ea710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:fd:7a:1f:07:4e:8f:85:58:46:16:ff:90:
10:53:dd:5a:f7:cc:51:d8:25:ca:9d:13:98:f7:ca:
c8:53:75:b1:11:c7:4d:66:00:64:19:4e:fd:c8:fa:
2a:84:9f:b3:4a:64:ca:25:bf:d5:1c:06:f7:27:10:
13:c3:a4:cd:d2:ca:9e:77:65:ed:31:bd:2c:f2:04:
e1:ca:59:f7:91:6a:07:2c:f2:41:8b:7a:c3:ab:94:
d7:46:b7:a8:56:3d:8e:cf:de:d1:d5:ce:0b:e9:b4:
8d:29:88:0b:d0:43:e9:e8:ca:94:59:08:1a:6f:aa:
e6:e4:fb:04:1f:42:3b:70:91:a4:8f:b7:a9:b9:dd:
9c:f3:dd:05:9c:16:2b:f0:5f:3d:04:80:ad:ba:4c:
56:89:4e:39:f2:bd:0a:9d:be:3c:ab:e1:ae:a5:5c:
42:82:98:fb:c9:fd:b4:e7:1e:c6:00:bb:cb:2d:15:
59:c9:b3:8f:4a:14:93:41:a2:c1:89:74:dd:d7:12:
ab:5e:68:e7:cf:4c:fb:4b:0e:90:51:f0:44:9a:a4:
e2:5f:ba:ae:21:34:c2:32:8e:d7:22:0f:ca:bf:77:
37:dc:42:99:7c:8a:cf:80:fd:ba:6a:fc:24:9e:25:
31:f9:cd:b7:06:a3:d3:9f:81:4f:b5:78:cb:cd:92:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:02:C6:B9:EE:93:24:F5:A9:3A:E7:00:C1:B6:88:62:CF:7E:A7:10
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/tgLGue6TJPWpOucAwbaIYs9-pxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
91.225.0.0/24
91.227.240.0/23
91.239.37.0/24
94.142.164.0/22
185.39.11.0/24
185.57.176.0/22
185.157.123.0/24
185.232.89.0/24
193.3.158.0/24
194.99.66.0/23
195.64.96.0/24
195.244.14.0/23
212.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f5:78:1a:0b:fa:11:5e:40:1d:e3:e2:da:a4:69:43:b0:af:
c7:c7:86:93:07:78:93:98:53:5a:8b:20:0a:06:cc:36:5d:3a:
5d:d0:17:57:22:af:2a:85:60:98:88:55:d4:50:9f:61:0a:cf:
70:9f:7d:63:4a:01:1b:5e:af:1a:fd:03:79:e6:f8:6b:3b:ee:
e4:e5:5a:3c:bf:87:ee:54:0a:8c:ff:95:bf:6e:f9:59:63:82:
3e:c8:19:39:84:70:80:24:ae:0d:64:98:38:a7:e0:e0:b3:1f:
4c:01:86:3c:e0:9e:74:43:62:01:84:00:9b:65:3b:7b:6e:63:
a9:da:b4:93:6d:e2:c0:1c:6c:f1:8d:34:c7:45:09:e8:d5:e1:
21:0c:ff:fb:a2:f0:37:c6:86:19:37:63:f9:9c:d2:01:08:37:
5e:f9:18:c6:c3:0d:20:bc:cd:c4:f7:ea:a6:1a:25:40:0f:52:
85:5b:ce:a7:73:2a:e4:a3:df:53:50:51:86:a0:d7:97:af:24:
71:7e:44:0b:44:05:77:dd:4c:f7:74:be:77:7b:87:cb:c3:8d:
9b:35:00:51:9f:05:a8:89:a5:5a:0c:78:c5:4b:a9:1e:62:6a:
4f:73:85:46:ac:e7:71:1b:3a:d4:8d:82:2d:2e:25:b8:f1:8d:
ed:05:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:27:09 2025 by rpki-client