Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/0lPwGlZz512bo43ttuB1zJDGXAs.roa
File: 0lPwGlZz512bo43ttuB1zJDGXAs.roa (raw, json)
Hash identifier: YZ0SPyBPsQWtH+Z1t/JOiFohI3BLijFCe3/psXe7ST0=
Subject key identifier: D2:53:F0:1A:56:73:E7:5D:9B:A3:8D:ED:B6:E0:75:CC:90:C6:5C:0B
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 018CCA2A99281828719A3818A40BF0B3504A
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/0lPwGlZz512bo43ttuB1zJDGXAs.roa
Signing time: Tue 02 Jan 2024 12:33:58 +0000
ROA not before: Tue 02 Jan 2024 12:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57958
IP address blocks: 164.138.233.0/24 maxlen: 24
164.138.232.0/24 maxlen: 24
164.138.232.0/21 maxlen: 21
164.138.237.0/24 maxlen: 24
164.138.234.0/24 maxlen: 24
164.138.239.0/24 maxlen: 24
164.138.236.0/24 maxlen: 24
164.138.238.0/24 maxlen: 24
164.138.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:99:28:18:28:71:9a:38:18:a4:0b:f0:b3:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Jan 2 12:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d253f01a5673e75d9ba38dedb6e075cc90c65c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:07:2d:e1:5c:e0:83:a4:84:76:dc:b7:02:
d9:6d:50:ea:fd:82:61:19:87:05:af:9b:d8:9c:09:
a3:f3:90:1b:a6:ff:93:33:28:4f:a3:49:dc:27:c4:
b6:e6:4c:54:ec:df:4c:2a:01:b5:a7:4a:7f:bd:b2:
50:bf:e0:9f:44:c8:98:3a:59:f4:2e:ff:44:41:f1:
ee:39:5b:d8:42:db:d4:9e:c9:91:96:17:c7:79:a9:
e2:b9:26:78:3b:ee:ff:ff:89:39:22:8e:a8:19:5d:
bb:06:a1:4d:65:06:9b:56:a1:e8:88:61:85:cd:da:
c8:40:6b:41:73:e6:8c:63:f0:2d:d4:8e:e3:e1:7d:
b9:b4:82:8f:ac:c4:cc:ba:ce:10:95:ce:8b:d6:d7:
26:4c:80:20:60:02:52:46:44:2a:3d:3e:09:6a:49:
de:13:0b:94:71:d5:7f:4b:16:82:9c:5c:44:e5:9a:
6d:09:a6:c9:b9:af:d3:fe:e6:8a:51:84:49:ad:39:
28:d7:68:bb:d3:23:f5:ea:bb:04:76:51:10:e5:61:
4f:8f:13:c1:64:f2:b0:7f:26:da:c0:ad:2f:d4:74:
d9:2c:fb:24:ad:1d:e4:aa:ab:7a:fd:83:27:b1:3a:
ef:72:4d:d7:59:4b:b9:46:18:23:a7:4d:95:00:3f:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:53:F0:1A:56:73:E7:5D:9B:A3:8D:ED:B6:E0:75:CC:90:C6:5C:0B
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/0lPwGlZz512bo43ttuB1zJDGXAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:29:64:ca:3b:72:d9:e5:ae:27:73:52:15:09:b3:f3:ee:d7:
f0:db:d4:21:9d:8a:a4:35:d5:01:25:40:86:59:66:6a:6b:02:
15:20:ec:84:07:9a:cb:5a:f3:9c:51:2d:2e:4b:ba:a6:4f:06:
01:42:af:09:a1:17:09:d3:c2:37:11:56:48:8f:97:51:83:2b:
5f:26:9d:5a:da:84:0a:bb:4b:06:03:9f:97:8e:be:16:af:4e:
17:40:84:a9:28:4f:40:a1:1e:31:70:a5:9b:52:d2:ca:84:67:
fd:0c:9e:29:c5:ec:0e:60:2e:e9:a5:2e:fa:4b:01:72:07:ce:
64:b1:99:a3:78:5d:db:6f:86:56:73:70:61:ec:fa:74:a7:84:
13:32:72:1d:ef:df:c8:9e:0f:f2:81:a3:1a:ab:a1:b5:91:d8:
46:8e:06:a4:13:64:6a:49:d2:d6:24:8f:05:d7:df:6e:db:ea:
9f:c5:71:52:f4:ba:bf:8c:da:5e:c8:e2:8e:f2:99:a7:90:db:
f9:f0:2b:9a:5f:ff:9e:e2:06:7d:ba:e4:b2:b8:c7:80:7c:cd:
49:48:f7:c5:14:0a:dd:0f:f9:27:94:4c:11:fa:30:df:85:c6:
07:f7:b1:68:67:d2:a3:a2:5c:24:02:0f:4c:26:96:0a:72:35:
10:13:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:41 2025 by rpki-client