Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9OMfDp204vUDNj6prWcaCwmxPYk.roa
File: 9OMfDp204vUDNj6prWcaCwmxPYk.roa (raw, json)
Hash identifier: pEPfSRnUafwHYL5vMMxmKSWyu30edn0PCvyN2gv7VY8=
Subject key identifier: F4:E3:1F:0E:9D:B4:E2:F5:03:36:3E:A9:AD:67:1A:0B:09:B1:3D:89
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0194DBA1E0EA1509122BA1A62A052B6CA0F9
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9OMfDp204vUDNj6prWcaCwmxPYk.roa
Signing time: Thu 06 Feb 2025 14:20:06 +0000
ROA not before: Thu 06 Feb 2025 14:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 45.43.64.0/23 maxlen: 24
45.43.67.0/24 maxlen: 24
45.43.68.0/22 maxlen: 24
45.43.80.0/22 maxlen: 24
45.43.84.0/23 maxlen: 24
45.43.86.0/24 maxlen: 24
45.43.87.0/24 maxlen: 24
45.43.93.0/24 maxlen: 24
45.43.94.0/24 maxlen: 24
45.43.95.0/24 maxlen: 24
87.239.253.0/24 maxlen: 24
89.33.6.0/23 maxlen: 24
94.177.5.0/24 maxlen: 24
107.181.128.0/22 maxlen: 24
107.181.132.0/23 maxlen: 24
107.181.140.0/22 maxlen: 24
107.181.148.0/23 maxlen: 24
107.181.150.0/24 maxlen: 24
107.181.152.0/24 maxlen: 24
107.181.153.0/24 maxlen: 24
107.181.154.0/24 maxlen: 24
113.20.157.0/24 maxlen: 24
113.20.158.0/24 maxlen: 24
155.254.32.0/24 maxlen: 24
155.254.33.0/24 maxlen: 24
155.254.34.0/24 maxlen: 24
155.254.36.0/22 maxlen: 24
155.254.48.0/23 maxlen: 24
155.254.61.0/24 maxlen: 24
162.220.246.0/23 maxlen: 24
198.105.100.0/22 maxlen: 24
198.105.108.0/24 maxlen: 24
198.105.109.0/24 maxlen: 24
198.105.110.0/24 maxlen: 24
198.105.111.0/24 maxlen: 24
198.105.119.0/24 maxlen: 24
198.105.121.0/24 maxlen: 24
198.105.122.0/24 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
2a05:9f46::/32 maxlen: 48
2a05:9f47::/32 maxlen: 48
2a07:9946::/32 maxlen: 48
2a07:9947::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Feb 2025 17:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:a1:e0:ea:15:09:12:2b:a1:a6:2a:05:2b:6c:a0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 6 14:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4e31f0e9db4e2f503363ea9ad671a0b09b13d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:b7:7b:d8:73:17:0a:12:03:ee:a1:6b:b5:
f6:38:e2:d1:ab:dc:c2:39:01:6a:45:b8:63:64:1a:
4a:f7:8f:3a:ef:3c:e8:55:64:f3:ef:48:11:b1:ba:
c5:68:f7:f5:81:08:ea:0e:80:b0:8d:09:ec:9b:18:
15:7d:4b:47:92:1e:23:4c:38:ca:1a:af:92:b6:fc:
fa:ce:c5:a9:b7:ad:a1:ce:98:b3:d1:fb:ed:48:30:
73:cd:ac:a7:52:e0:af:ff:41:5c:f3:04:4a:be:51:
12:26:c3:c3:59:5c:30:b0:c1:29:e5:09:fd:a5:c1:
48:83:f7:4c:c6:15:c8:7a:37:a4:6f:ad:44:37:a6:
36:10:80:c0:6d:d3:e2:3d:42:08:21:54:e9:0a:76:
3f:06:87:7b:6a:43:e4:54:d1:6a:b6:a2:7b:fe:3c:
6a:78:af:67:aa:19:4a:af:a7:2b:bf:56:f6:19:11:
17:b7:e7:aa:f5:d7:b8:f5:62:71:83:e6:a4:54:3f:
59:c3:10:e4:e7:b4:56:ed:2f:31:a8:3a:63:1c:a1:
6e:6e:8f:bf:3a:85:db:69:1d:d7:cf:fe:00:a2:9e:
23:7f:48:64:e9:09:94:c4:64:8b:54:d0:6d:02:19:
7b:11:df:1f:35:69:a5:75:f8:b9:41:39:1d:a9:ed:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:1F:0E:9D:B4:E2:F5:03:36:3E:A9:AD:67:1A:0B:09:B1:3D:89
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9OMfDp204vUDNj6prWcaCwmxPYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.67.0-45.43.71.255
45.43.80.0/21
45.43.93.0-45.43.95.255
87.239.253.0/24
89.33.6.0/23
94.177.5.0/24
107.181.128.0-107.181.133.255
107.181.140.0/22
107.181.148.0-107.181.150.255
107.181.152.0-107.181.154.255
113.20.157.0-113.20.158.255
155.254.32.0-155.254.34.255
155.254.36.0/22
155.254.48.0/23
155.254.61.0/24
162.220.246.0/23
198.105.100.0/22
198.105.108.0/22
198.105.119.0/24
198.105.121.0-198.105.122.255
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
2a05:9f46::/31
2a07:9946::/31
Signature Algorithm: sha256WithRSAEncryption
98:df:6a:62:91:12:b8:b4:c2:0d:af:40:43:98:0e:25:71:37:
70:3b:21:96:58:14:2e:85:13:26:66:27:3d:90:b5:d0:85:86:
5b:ad:40:ca:05:6c:56:2d:94:e4:18:7f:ee:f4:c2:a5:59:a0:
0f:f7:6f:4f:19:d0:69:12:54:f8:25:75:d6:04:fa:28:ae:60:
84:88:0c:a1:88:80:a1:36:1d:98:e8:f6:17:42:07:ad:20:9b:
7b:4c:28:8b:f0:40:c6:e6:f9:1d:81:03:07:92:72:49:46:69:
8e:ad:17:50:af:7f:ae:1f:c3:72:36:13:96:a4:84:17:7a:23:
ce:b7:a1:04:30:9d:25:b2:ce:27:84:39:ae:79:73:c9:5d:8b:
59:8a:44:e5:17:74:65:9c:a7:00:79:bd:3d:ce:5e:03:51:02:
ae:c0:96:0d:1f:b1:4c:11:cd:b6:3c:23:38:42:25:34:c9:b6:
b5:3c:ae:dd:ab:45:18:12:8c:eb:c9:3e:d0:17:f7:27:89:9c:
38:74:cc:18:3d:7e:13:e2:85:8d:39:a7:92:b5:69:92:1f:ce:
bd:1d:54:44:f7:86:0b:0c:ef:e9:dd:1b:df:82:74:0d:2a:6b:
78:64:76:5b:de:0f:64:42:1d:1c:cc:df:8f:ca:1a:88:aa:08:
11:4a:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:50:35 2025 by rpki-client