Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/0lSxAgvsSabmWjEBkdRpWLQgLDo.roa
File: 0lSxAgvsSabmWjEBkdRpWLQgLDo.roa (raw, json)
Hash identifier: tZYJqLtaFDZKC3sSh2roaDA6Jdv2ffZnkpBF6/p5yOQ=
Subject key identifier: D2:54:B1:02:0B:EC:49:A6:E6:5A:31:01:91:D4:69:58:B4:20:2C:3A
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0193AA49C9805461DEF4E6AE3AFD57613533
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/0lSxAgvsSabmWjEBkdRpWLQgLDo.roa
Signing time: Mon 09 Dec 2024 07:19:42 +0000
ROA not before: Mon 09 Dec 2024 07:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50667
IP address blocks: 185.99.88.0/24 maxlen: 24
185.99.89.0/24 maxlen: 24
185.99.90.0/24 maxlen: 24
188.214.156.0/24 maxlen: 24
188.240.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:49:c9:80:54:61:de:f4:e6:ae:3a:fd:57:61:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Dec 9 07:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d254b1020bec49a6e65a310191d46958b4202c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:1b:34:a6:e7:02:9e:2a:b0:4f:42:62:72:
e0:d1:34:92:88:52:7e:13:ad:9c:a7:eb:ee:ae:41:
c3:fe:44:ea:d6:fd:dc:be:21:6c:8b:50:aa:8f:78:
a5:31:ea:b4:36:30:cc:0e:9f:3e:e1:bc:e5:d9:cb:
cd:f0:31:69:bb:a5:f6:f6:97:e2:f5:d9:f1:2d:6e:
70:bd:16:4d:c6:9a:46:d3:24:57:95:dc:6a:7d:29:
7c:aa:3c:d9:6a:5e:c4:e3:2a:f4:70:72:37:63:2d:
b2:7b:4f:a6:ba:ed:a0:71:8f:f1:f3:69:af:ad:0e:
bb:7f:ef:02:e6:6a:fa:6b:a1:af:e9:f1:07:48:43:
2e:70:ee:34:3d:10:69:21:8b:eb:39:e5:6a:51:63:
ea:8c:76:1b:8b:a0:4a:5c:b2:a6:9e:76:a2:c2:6d:
d9:a0:71:5c:f6:51:f1:69:44:ba:39:04:80:25:17:
a0:fc:a2:7b:86:8a:82:be:a0:7e:b6:c6:8d:a2:ef:
28:22:62:d4:81:7b:68:09:08:a9:7b:64:b5:f7:05:
43:9d:90:89:d7:be:ef:e1:aa:ae:34:4f:d9:ad:79:
56:93:48:9f:6b:80:f9:38:ee:19:3f:24:1b:4c:9f:
e5:f1:e5:6a:96:31:fa:88:a9:01:c3:df:34:7b:db:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:54:B1:02:0B:EC:49:A6:E6:5A:31:01:91:D4:69:58:B4:20:2C:3A
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/0lSxAgvsSabmWjEBkdRpWLQgLDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.88.0-185.99.90.255
188.214.156.0/24
188.240.12.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c5:5d:09:24:3e:fc:6a:f3:53:be:a8:d6:77:59:e7:96:e2:
64:d0:fb:b3:82:c6:bd:ba:c8:eb:34:4e:b5:7d:cf:96:b5:d1:
26:1f:54:b6:c3:48:2a:8b:fb:3b:07:2e:26:3f:15:0c:71:bd:
21:6d:8d:71:a2:1e:5c:1d:22:b7:d2:90:a0:89:42:42:9b:07:
ca:bd:7a:8d:6f:9e:09:6e:96:51:da:a9:8f:48:4b:4d:0d:de:
36:b1:e3:e0:1e:b4:53:4b:7d:39:f5:e6:1f:3e:d8:33:4f:2d:
a3:aa:3d:cb:21:9c:64:e1:64:0f:a1:ff:18:45:4e:f6:b3:43:
15:e1:22:c0:f8:0b:c1:67:b4:aa:cb:d7:c3:4d:90:2f:51:49:
1e:f4:7d:3a:5f:83:53:b4:3d:c4:6e:d2:3b:40:4a:c7:33:27:
92:cf:d3:c6:1c:06:e5:58:89:d1:ed:fa:a1:fc:38:be:1b:f5:
c5:39:82:06:06:42:9c:38:6a:90:86:35:90:e4:e5:7e:23:f7:
c4:4a:92:14:dc:55:52:ca:74:b9:70:08:a2:1f:f4:43:4e:15:
fa:69:8c:94:e1:3c:8b:c9:09:51:af:73:81:e2:9d:70:2e:38:
c1:a6:1f:d4:94:82:79:0b:84:c7:56:da:96:ce:c4:8b:9b:93:
b0:41:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:48:23 2025 by rpki-client