Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/VPz9c_KKWxmftThngdyg9A-ieuA.roa
File: VPz9c_KKWxmftThngdyg9A-ieuA.roa (raw, json)
Hash identifier: 54aoZJb+76Tp8XGBA3aLji43ldpPK+Owuu8YBQ/2ZsQ=
Subject key identifier: 54:FC:FD:73:F2:8A:5B:19:9F:B5:38:67:81:DC:A0:F4:0F:A2:7A:E0
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 0193E41BB0147653050A817379B15D44107E
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/VPz9c_KKWxmftThngdyg9A-ieuA.roa
Signing time: Fri 20 Dec 2024 12:47:19 +0000
ROA not before: Fri 20 Dec 2024 12:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61071
IP address blocks: 88.213.210.0/24 maxlen: 24
88.213.211.0/24 maxlen: 24
88.213.213.0/24 maxlen: 24
88.213.214.0/23 maxlen: 23
88.213.214.0/24 maxlen: 24
88.213.215.0/24 maxlen: 24
178.217.88.0/22 maxlen: 24
185.134.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:1b:b0:14:76:53:05:0a:81:73:79:b1:5d:44:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Dec 20 12:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54fcfd73f28a5b199fb5386781dca0f40fa27ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:54:ef:60:a3:60:c8:6b:fc:98:90:57:ad:
e7:de:77:2b:7a:57:b7:5f:e5:d0:82:22:12:50:a6:
13:7c:2a:23:b0:d0:e6:c7:33:d7:e2:2a:dc:a5:71:
1c:dc:c2:4f:91:d0:6a:30:51:2f:ad:d4:1f:b7:2a:
7b:ea:ff:72:ec:11:76:a3:c0:98:5b:9f:b5:70:c2:
0d:e0:27:b7:35:a2:62:dc:8b:ff:f1:99:65:1d:67:
42:21:bf:e4:23:6a:20:5d:26:46:06:95:36:17:69:
de:80:a7:b6:71:59:9e:d7:1c:42:29:68:be:3b:dd:
cb:2e:a3:ca:af:1c:e0:ce:b0:40:7e:09:5a:93:c8:
34:3d:83:e9:93:70:d2:40:7c:9c:4d:c2:61:03:28:
cf:79:52:e3:95:d7:c2:7f:b5:d5:19:70:41:89:bf:
7f:9a:ff:6c:86:33:4a:13:af:60:21:a8:71:64:37:
83:be:0d:3f:47:36:b4:d8:1a:62:e3:5a:46:88:d3:
2d:cb:9d:2d:36:08:64:2c:46:86:a3:f2:60:c3:be:
67:08:0d:f2:54:61:e5:55:c7:60:64:fd:d2:c6:97:
b2:69:97:c9:76:68:43:7d:2d:8c:4d:12:c9:75:2d:
52:21:89:a9:92:12:0a:56:30:09:67:95:c9:de:78:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:FD:73:F2:8A:5B:19:9F:B5:38:67:81:DC:A0:F4:0F:A2:7A:E0
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/VPz9c_KKWxmftThngdyg9A-ieuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.213.210.0/23
88.213.213.0-88.213.215.255
178.217.88.0/22
185.134.228.0/22
Signature Algorithm: sha256WithRSAEncryption
77:44:a6:e3:dc:6a:81:d7:80:0b:24:7b:71:3b:80:6f:96:db:
9c:3c:bd:ec:2a:a3:cf:fc:68:20:aa:80:5d:20:70:38:15:bd:
65:e7:12:14:c3:4f:c9:4f:4e:9b:23:76:70:1d:d0:28:b8:d3:
10:f2:86:d7:31:e0:40:59:04:c0:3a:07:03:9d:27:fc:80:08:
58:76:bc:d7:83:c3:56:55:4e:79:33:62:dc:a1:47:8e:89:bd:
d4:fe:24:dd:3f:f0:b0:9d:fd:f2:2e:9c:bd:27:46:05:36:d4:
f6:f7:2c:13:8b:6f:9c:68:fe:16:89:b3:dc:8d:60:6a:3b:56:
72:c0:11:9b:5d:89:7e:4f:98:d5:6f:89:b0:55:e2:3d:d6:34:
f1:f3:15:8a:98:fd:7d:da:1d:89:47:b6:bc:87:6f:9a:49:a8:
51:f5:34:f3:36:f9:b6:ae:e6:bb:c0:40:0d:ce:49:36:c2:c5:
17:95:66:3c:ca:ac:1c:02:34:4e:5e:ee:16:92:40:92:8d:3b:
e2:76:7f:ae:9d:2f:17:27:be:91:13:12:a4:17:02:53:81:d9:
b2:c4:63:89:de:f7:22:6a:47:0d:87:50:69:1d:19:6a:8e:38:
f4:50:c7:d0:84:6e:1d:61:3d:f8:a2:98:de:39:34:fd:de:01:
c0:20:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:02:19 2025 by rpki-client