Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/c3t8jgnbnL3Z8FstV4DT29chaS4.roa
File: c3t8jgnbnL3Z8FstV4DT29chaS4.roa (raw, json)
Hash identifier: H176x9QQ/SnkDDB5cl48Nu2rJNmqovZjOPXps3Cye6k=
Subject key identifier: 73:7B:7C:8E:09:DB:9C:BD:D9:F0:5B:2D:57:80:D3:DB:D7:21:69:2E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195B9674D7EFBF20C86970A6EFB88DDE91E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/c3t8jgnbnL3Z8FstV4DT29chaS4.roa
Signing time: Fri 21 Mar 2025 15:51:49 +0000
ROA not before: Fri 21 Mar 2025 15:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.182.115.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.56.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 07:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:67:4d:7e:fb:f2:0c:86:97:0a:6e:fb:88:dd:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 21 15:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737b7c8e09db9cbdd9f05b2d5780d3dbd721692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:d1:af:0d:2f:e2:3e:1f:a8:4c:b3:ba:b7:
59:9d:d1:0b:5e:9c:28:e0:b5:a0:83:24:53:c7:c7:
bb:df:2c:1b:6d:2f:0b:b5:13:09:54:fe:85:2a:97:
ce:61:b7:c8:5c:e5:86:99:12:12:26:b4:16:7e:bc:
1d:f5:57:28:c2:39:4b:a0:a7:a0:d1:1b:74:e2:c4:
b6:a4:4b:57:ad:e3:b7:56:30:47:24:83:71:03:33:
97:d4:68:39:88:25:78:77:b1:72:bb:bb:61:03:07:
9a:e5:d4:43:0d:12:46:dd:85:0c:18:e5:59:ce:1a:
6f:28:54:1e:f6:5e:da:91:ce:5a:53:15:50:c4:c2:
f1:35:f2:14:b9:e5:4a:35:d4:5a:4c:4c:62:75:15:
21:0b:cf:9a:27:08:b7:38:50:e7:fc:22:ef:fe:7f:
81:fe:65:6b:cd:88:8a:5c:7d:81:08:45:f1:f4:3c:
18:6a:c1:85:21:e3:f9:97:65:11:ff:7a:96:2c:4a:
c7:72:ec:fd:cf:a2:f8:1d:ec:63:9b:2e:7b:99:ee:
02:0b:fa:d1:ba:72:ee:87:2a:4d:61:6d:16:eb:71:
f2:f4:14:cc:bd:4b:19:35:9c:f3:5e:69:78:c2:1c:
99:cc:30:9c:cd:09:22:86:01:42:c0:99:3a:26:0b:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7B:7C:8E:09:DB:9C:BD:D9:F0:5B:2D:57:80:D3:DB:D7:21:69:2E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/c3t8jgnbnL3Z8FstV4DT29chaS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
77.242.150.0/24
83.137.153.0/24
88.151.56.0/23
88.209.221.0/24
88.209.224.0/24
88.209.232.0/22
88.209.246.0/24
Signature Algorithm: sha256WithRSAEncryption
42:42:55:25:c3:a7:73:cb:f7:ff:f9:ad:e3:42:1b:81:89:cb:
8f:53:6c:96:64:f7:0c:10:23:8a:16:40:a5:4e:17:ad:a9:bd:
8f:5a:9b:ef:e5:8c:01:e4:75:64:58:55:2a:c9:fe:01:15:bf:
38:c9:8d:55:39:7f:85:2f:c0:c9:0f:91:c4:68:92:19:a2:fe:
33:de:c5:f1:66:e1:c3:f3:78:07:e4:c8:be:ed:98:84:8a:09:
2b:0e:06:54:a0:38:48:f9:e3:8b:13:89:2c:36:20:75:d0:47:
74:d3:16:9a:30:d1:e5:e1:99:af:84:2a:fa:4b:8c:17:d5:ca:
92:d2:65:a5:51:58:8d:ed:a1:ec:d4:e6:f5:eb:f6:bb:a2:ae:
f6:5a:24:2e:6a:16:4c:d1:a6:b7:0e:76:fb:6e:19:75:3a:92:
60:4b:cd:12:7f:e9:72:86:e8:f5:4a:de:70:29:4c:c5:6f:f5:
43:dc:64:5f:a0:3a:52:18:fb:7e:71:68:cd:3d:cf:fc:13:52:
c7:90:8f:cc:dc:d4:51:e6:39:a8:dc:f0:ce:f8:d4:43:f8:cf:
78:1d:d3:f9:88:3c:b9:37:99:66:aa:8e:2f:20:b9:82:c5:35:
69:50:29:96:e8:67:a2:0d:c8:b3:29:ab:87:35:3c:6c:34:99:
33:e6:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:44 2025 by rpki-client