Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/7JN-1v9m3cNoP6QBlibYQzkt8w0.roa
File: 7JN-1v9m3cNoP6QBlibYQzkt8w0.roa (raw, json)
Hash identifier: 4H1WKNN+ZQfY618OhoJtBqRn4u3En+VcOzz+8Nta28A=
Subject key identifier: EC:93:7E:D6:FF:66:DD:C3:68:3F:A4:01:96:26:D8:43:39:2D:F3:0D
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 0192A691F773CF4934E2377CC1D2754B3B38
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/7JN-1v9m3cNoP6QBlibYQzkt8w0.roa
Signing time: Sat 19 Oct 2024 20:57:16 +0000
ROA not before: Sat 19 Oct 2024 20:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58096
IP address blocks: 45.93.4.0/22 maxlen: 22
91.220.69.0/24 maxlen: 24
94.141.124.0/22 maxlen: 24
185.33.228.0/22 maxlen: 32
185.154.72.0/22 maxlen: 32
185.216.192.0/23 maxlen: 32
193.105.114.0/24 maxlen: 32
193.160.204.0/23 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a6:91:f7:73:cf:49:34:e2:37:7c:c1:d2:75:4b:3b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Oct 19 20:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec937ed6ff66ddc3683fa4019626d843392df30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:5f:7f:7e:6e:b5:eb:20:e4:b9:ed:c2:8d:
43:04:4e:ca:38:54:4f:cf:3d:00:f3:17:f6:f8:af:
43:1a:7d:eb:37:4a:c4:90:56:71:3b:82:07:d0:3d:
d2:4b:aa:fb:45:36:61:80:88:a3:15:45:ed:24:c3:
b8:2e:69:90:bc:3b:1b:bf:35:32:33:7c:3d:6e:27:
4d:d8:54:9c:4f:b2:b2:28:5a:8d:40:38:a9:c4:b1:
f2:15:73:a0:9f:4e:c3:2c:9f:bb:f6:3e:4d:7c:28:
a8:7a:85:7f:26:82:a0:ec:2f:54:a0:dd:97:c7:7e:
43:9f:c5:09:01:df:d5:d7:8f:29:74:b1:b2:b7:bc:
d8:31:3e:fd:cf:23:c6:fb:ab:98:c8:5b:f7:46:65:
67:f7:1d:6a:18:5f:66:20:18:a2:23:24:44:3a:22:
0a:f8:19:cb:c1:e9:86:ba:91:f6:87:41:80:45:7e:
db:88:6d:2d:88:48:d6:81:ae:1c:6c:0c:7b:f3:0d:
a6:9e:37:c3:1b:cd:03:31:d0:b9:8a:81:e4:fb:0a:
1a:ab:89:ab:80:cc:78:6e:f1:e5:98:3b:92:cd:08:
95:79:5a:2d:eb:d8:07:a2:00:b8:89:56:03:cd:47:
7c:08:bd:d7:5b:93:3a:a9:48:76:91:40:04:a7:96:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:7E:D6:FF:66:DD:C3:68:3F:A4:01:96:26:D8:43:39:2D:F3:0D
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/7JN-1v9m3cNoP6QBlibYQzkt8w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.4.0/22
91.220.69.0/24
94.141.124.0/22
185.33.228.0/22
185.154.72.0/22
185.216.192.0/23
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:35:43:e8:e1:70:c5:fb:4d:cc:b6:83:4d:57:87:14:76:6f:
14:eb:72:83:a1:f0:7b:8b:52:4a:bb:6d:47:75:8a:49:64:8a:
41:32:59:f0:84:69:0c:1b:d8:ab:12:18:bf:a1:d6:c2:a5:96:
e2:71:fa:0b:ba:77:70:f6:45:86:e7:d8:72:18:13:ed:a0:3e:
60:2c:c3:b3:98:fb:e0:f5:27:df:e5:7b:cf:79:06:99:ee:a7:
b8:b6:22:22:fb:dc:1e:10:a7:ad:4c:7f:b4:0e:7f:d3:ed:6d:
35:ea:21:a8:2c:60:b3:4a:75:06:7a:7b:63:d2:8d:82:fe:df:
21:4e:a5:c8:7b:44:58:41:b0:a1:a5:ae:a0:67:26:50:82:36:
27:bf:3b:d5:f4:c1:67:a5:68:88:df:4f:f7:dd:aa:a2:e8:07:
29:84:dc:56:96:c9:9f:2e:fd:8d:d2:78:3a:03:82:72:f0:93:
2e:03:f0:d2:d2:a9:d0:1e:c4:c6:07:53:5e:87:7d:fb:81:5f:
9e:e5:f0:f1:a9:58:81:c6:93:3f:7d:1f:83:29:5f:b8:57:09:
bd:94:66:d4:91:63:e2:96:2a:8a:f3:54:5a:b1:56:b3:53:2f:
19:0d:7e:30:98:ea:97:b7:57:30:3d:d3:71:01:83:8a:c7:c6:
8f:76:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:23 2025 by rpki-client