Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Szp7YNbcbDjU_WGR-tKInkHPAMc.roa
File: Szp7YNbcbDjU_WGR-tKInkHPAMc.roa (raw, json)
Hash identifier: l2CdQTtwnSluEeM1eenqDlAXPMryDbdYGFc1V8ffZRc=
Subject key identifier: 4B:3A:7B:60:D6:DC:6C:38:D4:FD:61:91:FA:D2:88:9E:41:CF:00:C7
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D2629D2C7B0887ABAD2BE1DDD2D3B02DC
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Szp7YNbcbDjU_WGR-tKInkHPAMc.roa
Signing time: Sat 20 Jan 2024 09:18:11 +0000
ROA not before: Sat 20 Jan 2024 09:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
45.153.49.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
194.93.3.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
194.169.162.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:29:d2:c7:b0:88:7a:ba:d2:be:1d:dd:2d:3b:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 20 09:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b3a7b60d6dc6c38d4fd6191fad2889e41cf00c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:8f:13:de:87:51:f9:6a:d1:d6:80:9f:7b:
bd:6b:f0:5b:49:25:b6:a2:95:16:77:b6:45:74:46:
7b:55:76:8c:a1:6a:e0:c1:c6:07:88:81:2c:11:57:
ff:af:34:f7:da:3b:94:cb:b2:18:19:e6:37:1c:b7:
db:6c:f3:fb:d3:8a:32:f0:c7:e3:bf:97:d0:eb:d2:
da:5f:ec:cf:7a:9c:b9:22:71:fb:58:33:65:ed:f6:
23:db:19:c6:e5:61:76:68:e5:fc:e4:fb:1e:1e:ee:
25:c1:0e:87:91:85:1f:9c:9e:f7:a2:86:33:93:bc:
f5:4a:a5:78:3e:a2:d3:d4:21:ac:a3:39:70:37:f4:
0a:0c:bd:4d:b3:a1:00:70:a0:bf:07:ad:ee:c9:25:
94:f2:c6:38:ff:ce:45:de:31:ea:8d:aa:14:f2:77:
24:07:74:80:f1:c8:6c:e4:d0:64:32:0f:63:8d:e5:
2b:a6:e1:81:46:81:9b:fa:79:94:c7:aa:9c:81:1b:
58:7e:b9:bd:d2:38:25:aa:25:cb:98:a2:a6:59:46:
a4:6b:6c:43:d4:4b:44:68:f8:f0:32:d4:d9:15:1c:
a8:5b:c4:fa:c8:17:84:72:16:8b:dc:eb:4e:fe:dc:
f0:0f:01:52:4b:18:ae:97:72:ff:63:22:fa:60:61:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:7B:60:D6:DC:6C:38:D4:FD:61:91:FA:D2:88:9E:41:CF:00:C7
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Szp7YNbcbDjU_WGR-tKInkHPAMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
45.153.49.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
194.93.3.0/24
194.169.161.0-194.169.162.255
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b8:3a:c6:ea:0e:ad:36:06:6e:a3:4f:20:49:3a:24:c2:31:
fc:0a:93:28:e8:57:9e:76:85:ba:d8:c0:c9:48:46:10:37:43:
3c:89:ea:58:ad:fe:b9:5a:3d:c0:92:de:9a:61:25:48:db:7b:
da:7e:4e:d3:50:72:55:56:25:b9:42:94:bb:e8:42:87:47:07:
4e:c0:03:c4:d8:77:65:36:01:7f:03:f5:6c:e1:55:d9:f5:06:
07:dd:65:fa:a4:60:17:94:c3:e7:ef:51:25:38:99:2c:d8:89:
a4:36:5f:79:3b:cf:55:a9:6c:aa:5c:64:cc:47:58:ec:f8:f2:
5f:e3:0a:08:35:a9:3f:93:e9:08:0d:cb:60:d2:81:e9:cd:51:
36:28:6a:20:74:db:31:84:c8:97:33:68:96:54:aa:a8:fa:f6:
95:4c:20:1c:c3:87:03:bd:4a:72:18:8d:a1:32:ef:24:9b:93:
cf:29:fd:4b:b4:bc:15:ab:66:e8:e2:f8:d5:ca:38:58:64:d0:
7e:a3:2b:91:dd:04:12:90:f4:95:e5:82:f7:4c:cb:a4:db:ac:
b7:4a:0d:00:75:92:b5:e6:ae:0c:6e:b7:cb:0b:f0:e6:49:80:
06:7a:ad:85:11:07:b5:8b:a2:3e:f7:f1:ef:27:47:ce:34:0b:
2c:96:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:25 2025 by rpki-client