Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/S-RP-rIyn8JGou7rP7iUSDEgZlY.roa
File: S-RP-rIyn8JGou7rP7iUSDEgZlY.roa (raw, json)
Hash identifier: hE2r0OYHWw+/9x03Wtj1i6lkSxGDptaekNPoJKUJOOs=
Subject key identifier: 4B:E4:4F:FA:B2:32:9F:C2:46:A2:EE:EB:3F:B8:94:48:31:20:66:56
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01928A3EEAC2A87377EFD6F175C9F9CAA02A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/S-RP-rIyn8JGou7rP7iUSDEgZlY.roa
Signing time: Mon 14 Oct 2024 08:57:12 +0000
ROA not before: Mon 14 Oct 2024 08:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.171.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:3e:ea:c2:a8:73:77:ef:d6:f1:75:c9:f9:ca:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 14 08:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4be44ffab2329fc246a2eeeb3fb8944831206656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:f2:41:ea:db:27:fb:8a:db:38:6d:a8:73:
31:fa:f5:14:84:50:1f:1d:66:b0:63:53:ee:ec:bc:
ab:8d:82:ba:ae:08:a2:da:13:5a:e0:27:25:a5:a0:
fa:bf:d0:d3:50:ca:81:c9:be:a7:b1:77:1c:0e:14:
72:a7:b6:49:02:dd:86:a1:d9:d5:39:01:ed:5b:a1:
06:26:bd:a9:7e:a9:29:ce:3a:d3:33:df:91:1b:c6:
1e:71:96:0c:52:e3:46:07:9a:b0:ae:3f:5f:f0:15:
81:6b:ad:8b:3c:02:13:ee:27:33:22:b5:d3:00:74:
44:93:b7:33:38:50:ca:cc:43:3e:dc:55:1e:cd:86:
6d:02:b9:fb:d7:81:bd:f1:98:a3:82:80:7e:a4:1d:
e2:4b:9a:51:97:e8:58:e9:9a:52:e9:97:76:c5:01:
ac:f2:db:18:b4:74:d5:73:12:c5:38:39:98:98:2a:
60:96:14:a8:43:40:53:33:18:23:a4:f6:66:8d:66:
2d:d3:59:bd:18:1d:c1:7f:a7:27:69:61:c4:74:b3:
51:a9:8a:54:48:0a:b6:7c:15:0d:60:80:93:93:5f:
09:03:7e:d0:79:19:17:ef:02:0c:24:a1:91:b3:45:
20:fe:47:44:97:16:f2:35:e1:be:58:c0:a2:bb:91:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:4F:FA:B2:32:9F:C2:46:A2:EE:EB:3F:B8:94:48:31:20:66:56
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/S-RP-rIyn8JGou7rP7iUSDEgZlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.151.56.0/24
88.151.61.0/24
88.209.192.0/24
88.209.207.0/24
88.209.209.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:63:46:d7:01:2c:06:db:7e:db:69:af:31:db:80:aa:f9:0a:
50:a1:82:8f:48:ee:43:67:c4:4c:04:26:ec:f1:74:06:c6:fe:
f5:bc:77:2d:88:71:77:0f:1f:ad:35:a4:96:d0:62:3d:66:d8:
62:57:93:f6:23:a0:0b:82:b2:d0:ab:83:0a:17:ea:83:4c:34:
8f:4b:89:46:e1:12:05:13:c0:c3:67:fa:ba:25:fc:64:9c:68:
68:d0:ac:b9:6f:38:de:c4:f0:de:1f:3e:2f:3f:8e:73:10:9a:
9f:ad:f7:06:ba:60:4b:18:b0:2b:9e:3b:e3:a9:78:7a:46:57:
36:f3:2d:04:18:61:e2:11:f6:dc:c3:a8:20:52:a6:71:5a:45:
9c:ad:1e:13:8c:88:30:f2:21:f2:60:04:74:3a:ef:c1:70:3c:
28:80:ae:49:fb:e3:bc:d4:72:a6:41:9a:cf:4c:b8:8e:da:47:
43:21:cf:20:a5:6b:0d:c1:23:82:af:eb:94:88:9b:df:15:d3:
84:9d:08:43:ee:e5:93:62:1c:88:4f:c3:ea:1f:d2:53:c1:23:
d8:a1:7a:1e:54:cf:38:46:69:da:ce:06:91:b0:18:9e:30:19:
e2:6b:8f:ec:e6:1e:39:88:4d:45:2a:b5:e2:d2:7f:74:a5:b3:
4f:42:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:05 2025 by rpki-client