Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CIFwyGCh0y4Rvmfy9yjpbDbMLns.roa
File: CIFwyGCh0y4Rvmfy9yjpbDbMLns.roa (raw, json)
Hash identifier: WLiKOL9Dkh82X+LS7fdLU+ANoiY6LSHGXIxoafPvLg4=
Subject key identifier: 08:81:70:C8:60:A1:D3:2E:11:BE:67:F2:F7:28:E9:6C:36:CC:2E:7B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019393AE3E84999D6BF81AD509E61716ACC4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CIFwyGCh0y4Rvmfy9yjpbDbMLns.roa
Signing time: Wed 04 Dec 2024 21:58:10 +0000
ROA not before: Wed 04 Dec 2024 21:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 931
IP address blocks: 45.139.6.0/23 maxlen: 24
178.173.240.0/20 maxlen: 24
188.253.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 22:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:ae:3e:84:99:9d:6b:f8:1a:d5:09:e6:17:16:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 4 21:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=088170c860a1d32e11be67f2f728e96c36cc2e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:09:d2:79:2b:7b:c6:96:dd:59:59:56:95:
4b:7d:54:64:16:dc:58:ba:c6:49:cb:f1:da:86:39:
2a:07:f7:d5:32:9f:2d:c0:cf:f0:5a:b8:99:f1:3d:
48:05:e5:90:49:93:3a:17:fc:79:01:25:c9:25:57:
ba:90:7d:5b:82:b5:94:4c:30:90:c0:23:39:3e:f9:
7b:2d:a8:1d:e7:f9:6f:29:36:5a:77:2a:19:05:00:
2c:79:f0:80:36:12:a1:34:09:c6:a6:2c:27:71:fb:
68:ad:e2:6e:90:90:28:6a:f6:c7:52:b8:96:3c:41:
86:ed:a8:fd:37:8a:9a:fb:dc:03:58:9a:5a:5a:4a:
12:d2:a9:2c:aa:3f:ac:57:94:61:2c:b8:78:30:c5:
c3:59:70:ef:9b:be:77:93:83:93:eb:74:ca:71:96:
de:e0:cc:06:b3:c9:63:bf:aa:e1:3e:7c:77:26:1c:
38:9f:ca:8c:56:7f:37:8e:ad:fe:86:65:6a:53:21:
cd:82:a6:65:b4:78:ea:8f:16:5b:78:4f:fc:03:2c:
0d:60:02:d4:10:0e:7e:21:72:5a:f7:b1:68:91:84:
90:af:ba:ca:3c:4a:b5:f8:76:4f:d2:00:67:f2:07:
83:77:4c:91:d4:37:8a:8e:d0:ae:97:4b:31:92:49:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:70:C8:60:A1:D3:2E:11:BE:67:F2:F7:28:E9:6C:36:CC:2E:7B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CIFwyGCh0y4Rvmfy9yjpbDbMLns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
178.173.240.0/20
188.253.28.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:ac:09:ef:b5:74:c7:4b:bf:57:d5:88:5b:5e:65:a4:ad:83:
49:d3:12:70:75:6c:c1:c4:83:51:94:41:90:31:aa:53:51:a3:
56:87:e9:3a:a3:c2:cb:c0:eb:09:66:6a:2c:75:41:74:2c:fc:
01:e5:0b:3b:14:33:78:78:f5:ac:e2:1e:7a:eb:a8:f3:9d:8e:
80:9d:14:26:67:b4:ae:54:c0:82:8f:db:1b:9b:0e:b6:95:a0:
7f:d2:e3:9c:8f:50:92:5a:12:9a:48:7c:75:8b:71:40:78:24:
b6:66:6e:61:0b:1d:7b:61:aa:a9:e0:27:fd:5f:d3:62:db:05:
05:c6:0d:87:da:5e:83:c5:67:8e:48:f0:29:db:0c:ce:ea:20:
6d:3b:bc:4e:01:18:e7:8f:2b:94:9e:11:7e:82:26:d1:01:db:
e2:34:0b:ee:23:14:58:e1:89:0e:03:4e:e2:14:ac:00:31:15:
52:0e:8d:36:61:b2:57:ed:0c:0e:c7:cf:fd:26:ae:7e:13:04:
76:73:86:84:62:f5:c4:d3:df:64:a1:10:30:48:aa:36:67:25:
9a:6d:9d:2a:7a:d0:37:7a:6a:3f:4e:96:cb:3e:4a:c4:ff:c2:
2a:9f:a3:28:31:71:3f:0a:b6:70:c8:bf:32:53:db:a7:05:de:
7d:8e:6d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:34:02 2025 by rpki-client