Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_xDcibG8ejK5RvyU5e22T2tTTQs.roa
File: _xDcibG8ejK5RvyU5e22T2tTTQs.roa (raw, json)
Hash identifier: 2i+zlQcqMjtNs8A86s4HZf45yRQTvBR96Fl2Kbs/QBE=
Subject key identifier: FF:10:DC:89:B1:BC:7A:32:B9:46:FC:94:E5:ED:B6:4F:6B:53:4D:0B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0190DA2A5C9513A8BC6BACBC61C2D7835B8B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_xDcibG8ejK5RvyU5e22T2tTTQs.roa
Signing time: Mon 22 Jul 2024 11:18:47 +0000
ROA not before: Mon 22 Jul 2024 11:18:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.87.20.0/24 maxlen: 24
45.140.214.0/24 maxlen: 24
45.142.204.0/24 maxlen: 24
45.142.206.0/24 maxlen: 24
45.144.156.0/24 maxlen: 24
45.144.158.0/24 maxlen: 24
45.145.249.0/24 maxlen: 24
136.144.25.0/24 maxlen: 24
2a07:e343::/32 maxlen: 32
2a0f:e381::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:2a:5c:95:13:a8:bc:6b:ac:bc:61:c2:d7:83:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 11:18:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff10dc89b1bc7a32b946fc94e5edb64f6b534d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:88:88:b3:a5:dd:4d:6e:fc:49:45:68:da:
cd:14:ac:69:45:54:6c:d6:8a:84:b6:a1:dd:6c:ca:
d3:74:b7:01:53:02:0e:bc:16:a4:cd:b4:d8:88:b5:
7b:75:57:8e:15:59:54:26:db:e3:f6:51:4b:34:36:
c6:f0:a0:55:3e:b5:88:21:d5:ef:7f:b2:75:b2:0c:
4f:39:c9:6f:6f:09:d6:70:e9:10:2f:46:45:bc:57:
1a:bb:5b:bd:29:6b:eb:1e:3f:be:6e:ae:8d:fc:74:
25:68:25:83:f3:19:34:ae:1f:1a:e4:70:54:89:78:
e4:06:0b:e3:64:26:52:3b:ee:8c:e0:a2:22:94:fb:
ed:0e:cf:06:b0:f1:46:2e:f5:a4:c3:50:91:41:43:
6d:90:33:a9:18:88:45:49:44:ae:1e:2f:0b:38:15:
33:ee:1c:09:28:e9:69:6d:6f:22:71:3d:a5:7e:d1:
54:94:9a:4c:b5:0a:e4:84:6a:6c:e7:6d:0d:6a:fb:
14:d7:48:d3:57:d3:63:14:7c:25:5a:04:86:9a:cc:
d2:58:91:5a:12:ce:ba:e1:b8:36:6e:8e:af:d5:cd:
cd:1e:bc:43:49:ab:52:12:08:87:bd:3c:83:cc:55:
00:b1:4c:25:90:d5:04:ac:1d:86:0a:3a:e1:32:6a:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:DC:89:B1:BC:7A:32:B9:46:FC:94:E5:ED:B6:4F:6B:53:4D:0B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_xDcibG8ejK5RvyU5e22T2tTTQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.20.0/24
45.140.214.0/24
45.142.204.0/24
45.142.206.0/24
45.144.156.0/24
45.144.158.0/24
45.145.249.0/24
136.144.25.0/24
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
42:9d:64:74:b1:97:7a:2a:26:09:da:71:9a:ea:de:c6:d8:ca:
9e:c5:43:f0:4e:68:52:ee:a9:11:07:ba:a6:30:f2:6d:f6:ac:
ff:e0:63:f8:1e:ca:1e:fd:5e:ba:75:e6:de:f6:37:7d:1f:ce:
ca:d0:d7:03:88:45:f3:27:05:00:db:94:db:e1:a7:23:b3:81:
39:d5:b9:86:35:e0:e8:07:c1:2d:ad:54:06:89:40:1f:35:55:
85:22:a7:c1:61:63:b3:13:c9:0a:79:69:3f:31:7e:27:94:8f:
6b:9c:56:e0:04:36:03:eb:15:7e:e2:56:6b:8a:02:69:ab:68:
6d:68:fd:d2:96:64:0f:a7:10:64:c2:4d:8a:a1:b9:01:ca:db:
3e:93:43:a3:ef:53:8d:21:0c:57:5d:90:4b:eb:3a:44:53:34:
d9:b0:8a:98:ac:9c:2a:77:86:50:85:0b:48:43:d2:b5:f6:3e:
7f:4b:1e:54:42:9d:33:8a:c3:14:5c:1f:e4:0f:77:35:fd:06:
c7:35:67:f8:ee:d3:f4:86:38:a6:28:ba:fa:7a:b6:29:3f:5f:
05:c4:cc:0b:a7:3a:ff:3b:32:a0:e1:ec:2b:d7:94:d4:2f:a8:
33:3d:e6:eb:0b:29:68:a3:0a:ec:80:f2:b6:27:f3:11:82:6a:
30:86:e8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:14 2025 by rpki-client