Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/1gk8AiKEE1ldi5UnpnqFdulqTQw.roa
File: 1gk8AiKEE1ldi5UnpnqFdulqTQw.roa (raw, json)
Hash identifier: ZI+A7yY8Jc0hM4nD0IEdWMuKOiXQWeODjPkmQ27nltA=
Subject key identifier: D6:09:3C:02:22:84:13:59:5D:8B:95:27:A6:7A:85:76:E9:6A:4D:0C
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0193FC1389A56620B3976AEFA582E160DF48
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/1gk8AiKEE1ldi5UnpnqFdulqTQw.roa
Signing time: Wed 25 Dec 2024 04:29:18 +0000
ROA not before: Wed 25 Dec 2024 04:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206264
IP address blocks: 2.57.214.0/24 maxlen: 24
2.57.215.0/24 maxlen: 24
5.183.209.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.139.122.0/24 maxlen: 24
80.251.152.0/23 maxlen: 24
89.42.231.0/24 maxlen: 24
89.249.49.0/24 maxlen: 24
93.123.72.0/24 maxlen: 24
94.156.33.0/24 maxlen: 24
185.177.74.0/24 maxlen: 24
185.177.75.0/24 maxlen: 24
185.191.124.0/24 maxlen: 24
185.191.125.0/24 maxlen: 24
185.191.126.0/24 maxlen: 24
185.191.127.0/24 maxlen: 24
2a0d:1000::/29 maxlen: 29
2a0d:1000::/30 maxlen: 30
2a0d:1004::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fc:13:89:a5:66:20:b3:97:6a:ef:a5:82:e1:60:df:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Dec 25 04:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6093c02228413595d8b9527a67a8576e96a4d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:1b:24:cc:ae:10:fd:3f:b9:43:e8:ce:44:
b6:46:e5:51:ce:d1:25:6c:cb:0e:93:cb:f6:01:a2:
29:9b:ae:1b:16:a8:5e:52:e3:15:c9:48:e5:f5:ac:
bc:92:f5:94:27:cf:91:c9:22:11:24:60:71:bb:16:
24:7f:c2:27:12:44:0d:7f:4c:bf:0d:a5:ea:18:2b:
38:ba:b5:de:41:8b:47:72:e4:b9:d1:8e:32:fc:55:
f2:09:af:81:c8:27:c0:5a:a9:63:d1:58:29:f5:9e:
3e:2e:9d:46:9a:4d:cf:cd:53:b6:04:ac:97:71:bb:
ec:2d:4d:fc:0f:64:26:0d:a5:f7:43:2a:d0:76:d0:
07:e0:01:64:f4:c4:2d:69:1e:29:97:c2:a5:ab:42:
b0:a5:ec:c0:20:a1:63:2f:c9:ec:14:5e:93:4e:f5:
6e:22:87:d8:c2:35:e1:34:75:7e:73:4d:53:de:74:
2b:b8:d3:ed:e9:a9:55:c1:fb:4a:d5:b7:84:92:3e:
66:33:8d:c4:a2:e5:d6:ee:84:c3:a1:1c:2a:21:e3:
c2:2d:c4:ff:e1:a7:7d:5f:30:ba:25:42:27:f2:3d:
5d:6b:bb:af:a9:12:92:dd:29:e6:ec:c7:3e:af:92:
7f:9b:97:e0:de:0d:70:3a:99:d2:c3:44:99:a2:f8:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:3C:02:22:84:13:59:5D:8B:95:27:A6:7A:85:76:E9:6A:4D:0C
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/1gk8AiKEE1ldi5UnpnqFdulqTQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.214.0/23
5.183.209.0/24
45.129.84.0/24
45.139.122.0/24
80.251.152.0/23
89.42.231.0/24
89.249.49.0/24
93.123.72.0/24
94.156.33.0/24
185.177.74.0/23
185.191.124.0/22
IPv6:
2a0d:1000::/29
Signature Algorithm: sha256WithRSAEncryption
a7:49:f9:d8:5e:5c:c2:b9:5b:87:e6:e0:ab:cc:a2:88:b6:40:
39:50:b7:40:92:b2:f1:cc:ec:10:a3:e7:f0:61:4f:a2:4c:68:
a9:21:41:45:54:6e:b4:1b:0d:69:71:fc:44:2b:b1:ba:00:f2:
5f:ee:2f:67:11:3b:5e:18:ca:a6:3a:39:68:5b:96:60:b2:92:
4f:46:66:f7:e1:64:a3:ca:92:ba:7c:da:bd:ce:d0:f6:7f:b9:
c2:30:55:8c:db:d7:d7:b1:16:30:2a:f3:f2:80:ad:67:a8:6d:
f2:57:87:9b:b1:a2:41:42:cc:cd:43:d6:b4:a6:74:14:45:a9:
2f:36:53:2c:5e:93:87:94:2b:cb:6c:fe:ec:f8:27:9e:c4:97:
35:eb:76:f6:28:2b:72:41:24:e1:78:09:d4:bc:57:e8:76:0b:
87:eb:c7:4d:9c:57:65:3f:9e:58:71:f7:e8:cd:38:3a:15:48:
84:24:e7:a2:f8:96:43:7b:14:eb:d5:0d:5e:33:4b:ec:c7:c0:
0a:a3:c2:1f:4a:84:2a:c3:1f:c7:0c:c9:2e:5b:a7:e4:6a:2e:
f7:56:b3:f7:af:71:e3:7d:3b:61:73:73:5b:80:3b:ea:be:90:
e8:cf:09:99:8d:d8:e7:ae:ae:2b:c0:15:17:5a:7c:b4:da:03:
8b:42:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:11:51 2025 by rpki-client