Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tVt8psCn8aLijlnt4xjXbFHBRUA.roa
File: tVt8psCn8aLijlnt4xjXbFHBRUA.roa (raw, json)
Hash identifier: R2J/2RbPOjY6JIP1OKehTdCZUIbltRh/NKUh2vqmL6k=
Subject key identifier: B5:5B:7C:A6:C0:A7:F1:A2:E2:8E:59:ED:E3:18:D7:6C:51:C1:45:40
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192C18E89C95CBD26CE14686B3C3BE6CAC9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tVt8psCn8aLijlnt4xjXbFHBRUA.roa
Signing time: Fri 25 Oct 2024 02:43:17 +0000
ROA not before: Fri 25 Oct 2024 02:43:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.151.143.0/24 maxlen: 24
85.208.11.0/24 maxlen: 24
94.229.215.0/24 maxlen: 24
94.229.216.0/24 maxlen: 24
94.229.218.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 04:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c1:8e:89:c9:5c:bd:26:ce:14:68:6b:3c:3b:e6:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 25 02:43:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b55b7ca6c0a7f1a2e28e59ede318d76c51c14540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:db:d6:2c:d0:60:c0:30:b9:4e:df:32:b1:
8b:7b:d8:b7:16:55:c8:06:85:1d:da:04:0d:21:a4:
b6:d4:3b:35:00:2d:ce:2d:72:a0:4b:59:42:ef:0c:
79:42:05:6a:76:5e:e1:cd:39:1d:92:45:fe:8d:d1:
15:1f:2f:b4:8f:4f:e6:3e:f8:64:bc:df:f4:99:a2:
58:61:5c:8c:bf:30:7f:1b:ce:54:98:95:0b:15:fb:
53:c9:8a:72:78:30:de:92:56:04:6f:6f:3d:cb:02:
fd:bd:5f:f5:d1:d9:63:f2:a3:4e:ca:47:bc:3e:71:
ed:32:de:70:34:ef:b2:1c:f1:a1:f6:33:56:1b:47:
ce:f6:a3:ec:2c:2a:09:9a:b2:bd:f6:4e:60:67:8f:
83:8f:26:b3:ac:75:fb:f2:31:29:2a:a3:fb:44:0b:
d1:98:91:46:a8:62:8b:dd:50:e9:c9:d9:f4:19:d0:
d2:ab:15:84:dc:02:9e:90:5d:3b:50:3f:7b:d0:0f:
8a:1e:29:28:7b:cc:6b:79:4f:42:a5:2b:91:dd:68:
b0:d7:11:19:e0:20:78:0b:08:ca:19:06:1a:2f:41:
f4:27:6e:f7:fa:9a:8c:0d:fe:d1:e4:36:b3:8f:42:
ea:29:a0:b2:fd:a2:49:3d:7b:ec:c3:df:bf:51:31:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:7C:A6:C0:A7:F1:A2:E2:8E:59:ED:E3:18:D7:6C:51:C1:45:40
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tVt8psCn8aLijlnt4xjXbFHBRUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.143.0/24
85.208.11.0/24
94.229.215.0-94.229.216.255
94.229.218.0/23
194.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bc:77:60:3a:a6:bd:00:27:9c:cf:51:0a:52:5d:ef:b1:10:
ae:36:6b:39:f0:ea:7c:3c:21:bc:fd:10:65:ff:f4:39:50:1d:
19:44:af:85:09:3a:f3:68:4b:a1:36:4d:c8:74:cd:10:bb:a0:
12:a6:6b:3e:7f:98:ae:1b:15:8d:71:e5:e7:64:31:fe:12:78:
a0:e0:93:a6:78:83:15:cc:94:63:e4:b4:a8:6c:ca:80:a3:28:
89:c1:13:1d:af:07:bb:b0:32:be:00:a9:b0:7c:69:98:61:4b:
30:6a:a1:7b:9a:de:d0:d1:ff:aa:cd:44:4d:9a:c1:17:04:75:
89:e1:b6:36:f3:25:ae:d0:1b:56:fa:4c:2e:31:c1:ec:33:50:
aa:53:ca:57:6b:7f:6a:94:6e:f3:85:bd:2c:6f:ec:db:50:23:
a3:20:ff:50:82:fb:ed:e1:e1:33:30:16:f5:96:99:51:0b:19:
39:86:25:d3:c3:4b:3a:7a:1b:41:11:bf:99:4e:b7:16:ca:de:
48:86:d7:01:8e:ad:b6:ff:94:c5:33:2f:45:02:ee:ab:ac:93:
6b:dd:14:be:c5:b2:57:92:79:80:24:8e:ab:d8:4d:73:b2:ee:
3d:42:18:77:22:96:f5:97:e5:4f:06:ad:68:71:c3:4c:08:00:
d7:84:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:55:03 2025 by rpki-client