Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/D7JiELskX1YS_JSC9Z-FsYrPeHA.roa
File: D7JiELskX1YS_JSC9Z-FsYrPeHA.roa (raw, json)
Hash identifier: Qm0xtwcW/7bxEVkUNCfWfAQre5+DGTVJwfWGdrDvSeA=
Subject key identifier: 0F:B2:62:10:BB:24:5F:56:12:FC:94:82:F5:9F:85:B1:8A:CF:78:70
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01932A08A57464B2125979AADA3AE71A6A90
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/D7JiELskX1YS_JSC9Z-FsYrPeHA.roa
Signing time: Thu 14 Nov 2024 09:37:09 +0000
ROA not before: Thu 14 Nov 2024 09:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
62.112.200.0/22 maxlen: 22
77.83.132.0/22 maxlen: 22
185.122.44.0/24 maxlen: 24
185.122.45.0/24 maxlen: 24
185.122.46.0/24 maxlen: 24
185.122.47.0/24 maxlen: 24
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0:1::/48 maxlen: 48
2a01:57e0:200::/39 maxlen: 39
2a01:57e0:400::/39 maxlen: 39
2a01:57e0:600::/39 maxlen: 39
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:08:a5:74:64:b2:12:59:79:aa:da:3a:e7:1a:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Nov 14 09:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fb26210bb245f5612fc9482f59f85b18acf7870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:e9:df:2d:67:9d:c0:8d:89:97:69:66:11:
be:a4:6b:6a:d9:99:75:62:30:41:90:6e:12:6a:64:
50:e5:f9:be:2e:ae:b6:a4:f4:16:3a:7b:bb:66:f6:
5c:c1:2b:ba:48:a0:ef:2d:5c:6c:f2:90:70:9a:96:
c7:19:29:64:04:64:6b:b7:56:15:c2:2c:14:38:f7:
de:98:04:73:8c:52:69:ac:a2:96:aa:bb:1b:dc:ee:
59:52:ec:8f:27:f4:35:57:06:bd:92:2d:62:72:69:
38:6a:2a:73:f0:11:64:ab:e1:ab:08:fd:bb:2f:89:
2e:2d:92:a6:4d:37:f7:56:96:a7:f4:ed:4e:6e:af:
08:2c:9b:45:01:47:9c:90:dc:65:20:fa:b2:8c:88:
df:69:1b:ae:5f:33:5e:7e:6f:9a:c0:a3:5f:70:ac:
e1:76:71:01:cb:3f:9a:48:81:6c:31:d3:eb:9f:04:
6d:e0:54:77:20:79:df:58:f7:3a:aa:3a:ff:ca:34:
32:10:9a:37:11:d1:c8:71:49:bc:fd:25:40:07:ed:
67:31:f4:f0:ae:aa:1d:d0:4b:ae:81:ef:e5:d1:5c:
29:31:02:52:08:b4:63:c6:b0:76:b1:93:e8:9e:5e:
06:07:69:78:f2:45:b4:83:1f:cc:04:99:1a:f2:a9:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:62:10:BB:24:5F:56:12:FC:94:82:F5:9F:85:B1:8A:CF:78:70
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/D7JiELskX1YS_JSC9Z-FsYrPeHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
62.112.200.0/22
77.83.132.0/22
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0:1::/48
2a01:57e0:200::-2a01:57e0:7ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:70:da:d3:ef:a5:30:0e:bd:36:19:a4:6d:ae:4f:81:17:f0:
70:8e:a5:15:55:4b:27:6a:32:09:58:50:ba:93:05:d5:8e:da:
73:7e:22:87:d6:e0:10:ac:f0:fd:25:e1:01:fb:4d:bd:1d:65:
3b:05:08:9c:15:26:b8:ec:2d:6c:4b:74:f6:aa:f9:73:c9:7c:
8e:a1:cf:96:4e:2f:5b:dd:55:bf:76:9a:b6:6f:10:10:2a:6a:
b2:fd:22:cb:9a:c1:b2:a3:2e:86:ee:46:49:5f:84:83:7a:b6:
03:db:a4:3d:a9:28:19:d8:c4:fa:3e:7b:fa:66:73:ce:2f:f5:
20:86:e7:a6:42:c9:e7:01:32:1d:47:6d:3d:43:da:e4:ca:0a:
bf:f4:67:90:ad:1a:08:13:51:bc:82:b4:73:36:d4:e5:68:ca:
6d:c9:95:08:14:be:d5:ed:48:f2:7a:19:0a:5f:00:c4:06:56:
e8:02:12:c6:35:32:80:37:21:30:0f:26:d0:c8:71:73:c2:32:
89:ea:db:7e:06:5f:d6:74:2d:54:7c:98:91:31:46:b0:db:a4:
14:a8:f2:cb:ad:ae:66:6c:00:28:76:ff:36:29:4a:8c:22:bf:
a0:dd:f7:fb:f2:70:03:8f:18:a4:97:53:ae:83:b3:9d:23:50:
ce:43:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:44 2025 by rpki-client