Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DQiaa8BXpZb_VW37i4mTG_fQFJE.roa
File: DQiaa8BXpZb_VW37i4mTG_fQFJE.roa (raw, json)
Hash identifier: WZTYVoikjMRcfyX0egkAa3aUG3/RAC2Wf/ywc/db8H4=
Subject key identifier: 0D:08:9A:6B:C0:57:A5:96:FF:55:6D:FB:8B:89:93:1B:F7:D0:14:91
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01961B28FA9746C3CAA94908B455A9ECF42E
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DQiaa8BXpZb_VW37i4mTG_fQFJE.roa
Signing time: Wed 09 Apr 2025 15:26:32 +0000
ROA not before: Wed 09 Apr 2025 15:26:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.67.230.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.121.0/24 maxlen: 24
103.113.68.0/24 maxlen: 24
185.235.242.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 15:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:28:fa:97:46:c3:ca:a9:49:08:b4:55:a9:ec:f4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 9 15:26:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d089a6bc057a596ff556dfb8b89931bf7d01491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:54:9a:d4:b8:38:e1:05:09:6a:ea:c3:e2:
1f:6f:dc:4d:4e:b5:98:14:83:b7:85:28:28:39:81:
2f:fa:79:17:77:e2:47:18:9b:48:20:a9:93:33:ca:
3a:73:1b:bf:79:b1:be:b3:a2:48:4d:47:32:46:a9:
ea:33:70:65:7a:94:0a:d9:35:5b:dd:68:65:67:78:
69:69:0a:29:87:fe:2f:8c:63:0c:33:5c:11:c8:74:
84:8e:f4:49:93:e0:57:b4:ba:5d:73:1b:1c:b5:7b:
b1:3b:1f:9d:f0:81:e9:94:36:3e:c6:66:64:00:09:
d9:f0:97:77:36:1f:17:0c:6f:b8:fa:2a:a1:fd:f7:
5a:2e:a9:40:46:7d:f6:5b:2b:79:18:f3:fc:cc:23:
7f:92:44:ad:c4:fa:dc:38:fb:21:b8:74:e4:39:02:
03:91:00:1f:52:d6:db:81:c6:15:3a:95:94:9a:ad:
2f:59:21:33:47:ad:ab:ad:12:0a:f1:08:53:b1:dd:
29:c5:13:37:44:7b:d6:86:42:07:1b:b5:0e:23:25:
4a:0e:de:99:6f:09:e4:6b:c8:8f:3c:2a:64:b0:98:
45:2c:ae:c0:b1:02:1b:b2:ab:5a:fc:78:60:b1:57:
d7:2d:a9:58:2e:eb:95:ae:5a:90:9b:9c:32:0a:5a:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:9A:6B:C0:57:A5:96:FF:55:6D:FB:8B:89:93:1B:F7:D0:14:91
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DQiaa8BXpZb_VW37i4mTG_fQFJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.230.0/24
94.131.113.0/24
94.131.121.0/24
103.113.68.0/24
185.235.242.0/24
185.250.149.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0f:43:be:56:20:90:23:83:fe:6c:c0:3e:85:ab:74:fc:d8:
5a:44:2f:ce:42:ac:0b:69:bb:97:b3:75:8b:d4:ad:93:59:07:
25:86:3c:bc:d0:30:49:71:54:46:20:79:8c:32:c8:58:ac:9a:
74:20:d9:aa:cf:c4:f3:1a:47:c8:8a:b6:5e:47:36:51:0f:2b:
71:dd:14:aa:13:b5:82:35:6e:42:2d:35:5b:ff:28:03:6b:2c:
10:91:90:4d:4b:46:56:82:e0:03:63:7c:43:de:4b:a8:99:1c:
3d:4f:13:f3:c3:08:05:ec:d0:34:64:08:03:7f:56:9f:9b:b5:
8a:eb:f7:6c:40:e5:3b:cf:43:4a:2b:c3:4a:43:23:81:29:00:
fb:a2:42:13:ac:e3:72:ef:6e:fc:05:42:3b:d3:f9:42:96:39:
3f:6b:d5:da:83:ab:42:86:1f:c0:a4:90:c3:53:9b:6c:e7:b8:
cb:4c:f5:e5:30:ff:d6:23:e6:4a:7c:28:a9:87:87:50:b2:14:
6a:08:bc:94:e7:b3:8b:65:26:cc:a4:2b:1c:32:b7:f4:b8:7f:
9b:75:30:ce:b4:49:a3:ca:c6:9f:4f:b3:73:40:9b:3a:e8:a4:
75:8d:0a:c7:3b:1b:09:f1:be:ad:97:e3:e5:6c:6b:c8:a8:bf:
05:9e:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:34:10 2025 by rpki-client