Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mrGbcBgjdKfwaUJ4lmPsJi29xsY.roa
File: mrGbcBgjdKfwaUJ4lmPsJi29xsY.roa (raw, json)
Hash identifier: yBg2OihUkiR4MC6tju7PhzJtKgpquPRBisbiI4ninGE=
Subject key identifier: 9A:B1:9B:70:18:23:74:A7:F0:69:42:78:96:63:EC:26:2D:BD:C6:C6
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448D3F6F1D4ADE83F3BC5D96462684
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mrGbcBgjdKfwaUJ4lmPsJi29xsY.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41717
IP address blocks: 2.58.244.0/24 maxlen: 24
2.58.245.0/24 maxlen: 24
2.58.246.0/24 maxlen: 24
2.58.247.0/24 maxlen: 24
2.58.248.0/24 maxlen: 24
2.58.249.0/24 maxlen: 24
2.58.250.0/24 maxlen: 24
2.58.251.0/24 maxlen: 24
5.183.116.0/23 maxlen: 23
5.183.116.0/24 maxlen: 24
5.183.117.0/24 maxlen: 24
5.183.118.0/24 maxlen: 24
5.183.119.0/24 maxlen: 24
5.183.120.0/23 maxlen: 23
5.183.120.0/24 maxlen: 24
5.183.121.0/24 maxlen: 24
5.183.122.0/24 maxlen: 24
5.183.123.0/24 maxlen: 24
45.8.32.0/24 maxlen: 24
45.8.34.0/24 maxlen: 24
45.8.35.0/24 maxlen: 24
45.139.194.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
80.66.199.0/24 maxlen: 24
95.214.166.0/24 maxlen: 24
95.214.167.0/24 maxlen: 24
185.198.71.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 00:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8d:3f:6f:1d:4a:de:83:f3:bc:5d:96:46:26:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ab19b70182374a7f06942789663ec262dbdc6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:b2:00:1a:32:a4:25:a1:62:a4:0a:39:12:
fd:8f:27:4b:88:d5:3e:51:db:94:fa:06:76:89:b0:
89:6c:d7:05:63:f0:8f:79:cb:0c:40:95:21:12:80:
c5:f8:38:86:fc:e2:0d:78:54:e6:3d:66:30:ad:2c:
2c:e1:0a:61:49:40:71:c3:d4:c6:8e:66:fd:2b:2d:
ad:51:79:4e:c1:b7:b9:5a:64:be:22:31:07:b8:92:
26:eb:ad:33:a0:3d:15:4f:62:7a:d6:00:91:08:73:
cb:7b:aa:8c:2b:f2:95:4e:34:2b:8f:0d:ab:e1:b3:
30:05:52:26:1f:42:c6:39:b7:85:36:fa:64:2f:04:
94:4f:38:38:4e:d8:11:a4:66:2b:42:7c:b1:9a:d1:
93:9c:6a:c0:55:14:5f:a0:15:06:08:47:4e:56:77:
32:50:40:24:80:8d:ce:2b:38:07:4a:02:e1:2a:d0:
d6:ec:ed:71:16:ea:f7:8d:fd:bc:8f:f0:9a:55:89:
8f:ad:af:e0:cd:d0:35:d9:da:ac:c0:8b:bc:11:bd:
d2:b6:bc:d8:73:c1:80:aa:23:64:e3:a8:9f:05:98:
5b:ee:90:07:d7:ac:68:d5:e3:2b:02:e6:59:1f:07:
22:a7:41:72:a2:3a:e9:da:55:1b:16:95:59:4f:3e:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:9B:70:18:23:74:A7:F0:69:42:78:96:63:EC:26:2D:BD:C6:C6
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mrGbcBgjdKfwaUJ4lmPsJi29xsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
45.8.32.0/24
45.8.34.0/23
45.139.194.0/24
45.141.44.0/22
80.66.199.0/24
95.214.166.0/23
185.198.71.0/24
194.104.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ac:33:55:bc:58:f9:76:db:4f:da:98:95:41:d8:7b:2f:34:
13:69:1d:bc:3b:de:ee:83:5f:f6:6f:85:a1:96:f7:ee:d2:16:
31:87:0c:12:8e:44:c1:55:7c:70:c6:b3:8a:ea:e5:db:cd:68:
66:1c:a1:89:c2:a6:09:52:29:1a:ca:26:ed:5f:be:a0:57:ef:
3a:ae:9b:6c:88:d2:c5:38:de:ce:d1:a9:60:57:e9:e2:ca:6b:
67:0f:0e:5a:d2:ec:95:c3:8c:76:ee:92:4c:fd:9e:f1:2d:81:
7c:cd:b9:e6:5c:43:3a:83:15:60:9e:1c:d2:4e:bc:0d:17:4d:
05:34:86:b9:17:d4:78:97:b0:2a:49:3e:72:5b:f7:68:68:b0:
af:73:20:6f:32:23:46:61:5f:25:cb:bd:8c:c2:97:ab:65:00:
d4:03:f4:2c:cd:bd:53:cd:5d:7a:75:3e:6a:84:eb:a7:f7:e2:
cd:26:8e:ed:d5:72:f1:8d:db:57:a9:2d:43:de:38:d7:f6:2f:
87:fc:68:78:ab:35:aa:48:4e:bb:97:8e:5f:c8:08:54:a3:66:
ab:67:5a:f9:e2:d4:3f:ec:3e:86:0c:17:af:f5:1b:83:51:0c:
55:0b:8e:76:f1:54:7a:6b:70:02:ae:af:5f:45:c3:31:0c:8a:
33:2f:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:00:22 2025 by rpki-client