Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q88e4vPt4eOE_L552LVyLuc6kUk.roa
File: q88e4vPt4eOE_L552LVyLuc6kUk.roa (raw, json)
Hash identifier: ZZACgt2ck+X2f3O+Xck3HHZn9JIK1pSWPgaihwywWgM=
Subject key identifier: AB:CF:1E:E2:F3:ED:E1:E3:84:FC:BE:79:D8:B5:72:2E:E7:3A:91:49
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01916BEA4DAB1429FDB1FB949D140FBDDBB3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q88e4vPt4eOE_L552LVyLuc6kUk.roa
Signing time: Mon 19 Aug 2024 18:33:23 +0000
ROA not before: Mon 19 Aug 2024 18:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.93.82.0/24 maxlen: 24
45.131.51.0/24 maxlen: 24
80.64.24.0/24 maxlen: 24
80.64.27.0/24 maxlen: 24
80.64.29.0/24 maxlen: 24
91.217.125.0/24 maxlen: 24
185.210.136.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
213.139.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:ea:4d:ab:14:29:fd:b1:fb:94:9d:14:0f:bd:db:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 19 18:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abcf1ee2f3ede1e384fcbe79d8b5722ee73a9149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:34:e6:52:e4:9d:e3:50:f9:ea:a1:7f:58:
5c:59:6c:9e:e8:16:21:d9:8b:e1:7b:35:39:74:02:
34:da:f6:f7:86:51:79:0c:d6:eb:04:3b:a4:f2:b7:
5f:ef:f8:7e:21:16:99:5d:dd:10:fe:2e:15:18:72:
c1:5d:f5:45:57:53:82:39:e4:bd:32:c9:77:30:c3:
33:a8:5b:e1:be:14:23:5a:ec:48:8d:21:cd:bd:43:
37:c4:76:0d:d7:06:5d:28:51:a2:62:b5:fa:9e:00:
c2:1c:e9:5a:90:8b:20:bf:c1:f3:07:9b:96:8a:69:
da:30:87:c6:47:0e:79:7b:ac:87:15:35:fc:0e:87:
3d:86:b2:d2:88:6f:a7:bb:72:8c:cc:c0:11:0d:57:
99:50:81:71:1e:05:c6:53:06:63:1e:32:d1:93:1d:
c4:fe:a3:b5:06:07:50:b0:9a:46:e1:27:c5:e0:24:
06:e2:91:10:56:c5:e0:6e:37:21:11:be:a7:f8:6a:
01:fc:86:45:90:d9:66:3a:59:cb:3e:28:b4:8d:8c:
4c:92:af:35:c1:be:b2:16:ac:43:f7:8c:1b:8a:93:
65:bf:fe:0b:35:77:a0:54:1f:10:8a:3a:a4:cf:4f:
f8:cb:0d:aa:ba:41:d7:5d:7c:53:9e:05:f4:a2:3a:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:1E:E2:F3:ED:E1:E3:84:FC:BE:79:D8:B5:72:2E:E7:3A:91:49
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q88e4vPt4eOE_L552LVyLuc6kUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.82.0/24
45.131.51.0/24
80.64.24.0/24
80.64.27.0/24
80.64.29.0/24
91.217.125.0/24
185.210.136.0/24
188.64.162.0/24
213.139.202.0/24
Signature Algorithm: sha256WithRSAEncryption
70:30:fc:2a:ed:88:2e:b7:9b:f6:88:3b:9c:d5:06:84:e5:68:
de:94:bc:cd:ca:a9:23:d1:5b:cb:c9:24:78:75:90:40:64:f2:
c8:4c:d4:d2:4f:48:4c:25:43:ce:9f:14:34:41:88:df:cc:cd:
c8:eb:03:d7:8b:ab:aa:f2:f3:a8:8a:ca:d3:63:40:26:bd:83:
30:26:d9:ea:e6:27:5f:b7:b1:8a:51:9b:5f:14:93:a6:69:c6:
40:d6:3d:bb:11:c3:72:63:80:47:54:3c:dc:2a:7b:49:d0:c2:
bf:fd:36:5c:3c:9a:ab:96:8d:12:f0:3e:df:0f:86:b7:a3:6c:
98:3c:47:6a:26:5d:46:02:9f:fd:48:86:5d:47:e2:6a:62:32:
2d:a4:58:dd:65:8c:aa:db:4a:29:96:c0:3d:38:2d:24:55:d5:
c4:aa:46:95:ac:ae:b3:0f:c8:e6:e4:3e:9d:a8:75:10:3e:77:
03:82:2e:96:be:18:c9:2b:49:bd:28:b1:00:50:39:ed:af:69:
95:0a:92:48:01:e5:f5:07:bf:d8:4a:41:6e:68:36:9f:44:70:
0a:a1:b2:b6:3a:0a:7b:8b:44:62:6e:04:13:3f:f3:4d:6a:4c:
70:a7:ca:70:97:66:db:ca:1e:f4:16:46:fb:a3:df:4a:9c:0f:
9b:36:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:14 2025 by rpki-client