Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KHkuxu1IJR_0p7C4M-BDWRQiyJY.roa
File: KHkuxu1IJR_0p7C4M-BDWRQiyJY.roa (raw, json)
Hash identifier: fD0+vWnvuLOerEPSux+AgmXgMAxb/gpq6gocgC45+Dk=
Subject key identifier: 28:79:2E:C6:ED:48:25:1F:F4:A7:B0:B8:33:E0:43:59:14:22:C8:96
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB910E9271051F55841ABA0039294B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KHkuxu1IJR_0p7C4M-BDWRQiyJY.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 2.58.168.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 17:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:91:0e:92:71:05:1f:55:84:1a:ba:00:39:29:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28792ec6ed48251ff4a7b0b833e043591422c896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:85:25:e0:df:9b:f2:21:6b:85:c0:87:47:
1e:52:35:87:91:0e:02:1d:0a:ab:a5:73:ce:03:81:
76:11:f8:f8:5f:38:8b:8a:df:ab:11:7b:e1:a7:e8:
20:a6:6c:01:8c:dc:d8:ce:09:6e:d3:27:f9:22:a6:
0b:52:41:be:d3:12:24:de:3b:21:95:24:3c:52:a0:
c5:87:2e:35:b7:5f:8e:53:29:2c:cd:7a:e1:9f:fd:
f9:01:98:55:8e:8a:18:4b:2c:59:96:96:86:17:a1:
19:e6:35:8b:b4:11:5c:4a:9b:74:76:64:bb:9c:80:
d8:ea:03:9c:fd:69:20:d9:d5:a2:b6:9a:9b:ae:27:
a5:48:aa:05:14:2a:4a:94:9d:99:85:d8:c3:ec:46:
ea:60:98:68:bc:13:e7:54:32:b6:34:b1:6e:7d:33:
48:7e:da:2d:16:1f:d6:17:ab:59:80:09:6b:49:66:
d4:bc:1f:d2:15:b2:9f:32:6a:39:56:cc:f6:c7:51:
30:01:d2:55:27:74:8d:da:ae:11:48:12:ea:72:46:
95:40:64:73:29:1b:d5:65:c7:f2:ef:0a:79:aa:19:
a8:a8:2c:91:3c:53:45:0c:62:56:4b:9f:e9:a9:6b:
b8:7d:3a:f5:54:2a:60:02:0f:be:0e:b1:d5:32:e7:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:2E:C6:ED:48:25:1F:F4:A7:B0:B8:33:E0:43:59:14:22:C8:96
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KHkuxu1IJR_0p7C4M-BDWRQiyJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/23
77.242.156.0/24
77.242.158.0/24
83.137.159.0/24
88.151.57.0-88.151.58.255
88.209.217.0/24
88.209.226.0/24
Signature Algorithm: sha256WithRSAEncryption
38:92:67:e2:ee:74:29:98:c3:60:8b:4d:de:60:9d:1b:b9:ec:
97:ba:0a:07:59:98:53:61:fa:ac:ce:30:32:40:76:5a:d1:b1:
29:13:aa:14:b7:07:a0:fb:fc:ae:9d:47:3d:e7:be:c7:37:f9:
87:72:8d:14:c6:35:3a:6b:6b:65:95:53:a7:3e:e0:69:fd:66:
bb:56:5d:39:79:95:d4:a7:ac:76:55:9e:7e:37:d7:29:be:76:
44:73:db:14:b2:66:aa:1a:ed:b1:90:d1:9f:b1:99:87:cb:fa:
88:8c:fc:33:5d:88:b4:a5:8c:08:59:63:00:6b:91:f1:9e:82:
48:45:e6:40:e5:c0:0e:53:f6:e8:c2:24:f4:c1:e7:97:8b:d8:
d0:ee:8b:76:81:39:4f:47:23:e9:ce:c7:60:3c:9d:58:38:03:
d9:94:3f:6d:dd:84:17:37:c3:bf:39:ca:c8:37:25:12:2d:40:
72:ef:92:bb:5b:b8:c5:8a:1b:39:48:5a:1f:82:55:e1:9a:e7:
3c:0d:7e:c3:e8:b0:f5:9b:6f:09:61:a2:54:f7:40:67:ad:9c:
fb:1d:a9:e3:79:08:7f:1d:85:f2:e6:71:e3:34:a3:d2:73:e5:
f1:c8:25:22:b5:2e:69:74:df:a4:ed:96:db:89:49:ce:48:85:
e9:02:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:11:59 2025 by rpki-client