Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-nMuMlZBFSWhI4KUlJjK7CUVUjI.roa
File: 1-nMuMlZBFSWhI4KUlJjK7CUVUjI.roa (raw, json)
Hash identifier: 0GyBOBf5fOS6m4AtvGhXCDr5i5tzGGmQ2Ll2x7azM+A=
Subject key identifier: FA:73:2E:32:56:41:15:25:A1:23:82:94:94:98:CA:EC:25:15:52:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193CF4E1C9840807486DB1B1B1626089482
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-nMuMlZBFSWhI4KUlJjK7CUVUjI.roa
Signing time: Mon 16 Dec 2024 11:50:23 +0000
ROA not before: Mon 16 Dec 2024 11:50:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 45.95.3.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:4e:1c:98:40:80:74:86:db:1b:1b:16:26:08:94:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 16 11:50:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa732e3256411525a12382949498caec25155232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:0a:58:72:46:2f:d4:d2:c2:f2:bc:3e:94:
41:b0:ef:c8:9c:10:8d:d4:2a:20:7c:7f:1a:32:a1:
16:9b:e0:a8:67:8d:f3:d5:6b:36:ed:79:cf:a8:7a:
e6:e2:e0:e8:2b:51:f5:26:1c:c9:6d:40:94:c8:97:
d4:74:19:5e:8f:20:e4:a0:1d:43:33:b3:4b:76:39:
06:ff:cb:b8:91:d6:e4:42:d5:69:13:9c:f7:43:8e:
5c:40:11:ad:b1:38:cd:38:77:8b:7d:09:b8:af:51:
7c:f3:69:c8:c0:8d:06:ca:1c:05:a9:b9:bf:53:04:
b0:49:27:75:15:2c:53:b2:cd:b6:42:7e:ce:f1:84:
1b:69:7c:e2:8b:c4:f5:d5:47:f1:28:36:70:0a:7d:
c4:f7:41:31:5e:fe:d4:76:4f:05:3f:35:dc:a7:c8:
f0:e9:7c:31:53:44:93:42:4f:0c:62:0b:9f:7e:51:
82:32:fc:00:b7:d4:af:96:40:fd:d2:92:1f:53:d8:
89:20:21:bd:3d:8b:36:16:9b:e2:98:a4:b2:81:8a:
81:18:dd:af:b5:4e:ef:7f:94:66:37:f5:a3:3e:5a:
b5:7c:1b:c4:3b:63:00:c3:d0:ba:66:c2:78:8a:2d:
af:3d:7d:e6:0a:06:fb:3d:25:1e:bb:ae:b7:36:fe:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:73:2E:32:56:41:15:25:A1:23:82:94:94:98:CA:EC:25:15:52:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-nMuMlZBFSWhI4KUlJjK7CUVUjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
83.143.113.0/24
87.121.98.0/24
87.121.218.0/24
185.246.222.0/24
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
73:64:26:6e:90:52:9e:1c:12:2e:13:55:11:df:64:9b:ff:87:
4f:09:3c:f0:4f:7d:3b:10:96:e2:78:49:fa:36:6a:e4:0f:97:
e1:f7:3b:50:84:8f:f8:8e:e5:0d:5c:7f:23:64:60:7d:a6:09:
57:df:d9:53:7a:0b:10:23:1e:0e:c4:0b:e2:cc:f5:0c:d0:73:
d5:b0:e9:01:97:7e:a1:6d:f0:3e:f3:80:12:48:ef:55:ac:57:
88:f8:65:66:54:07:fa:ec:9c:54:88:0e:6a:d8:e5:f1:94:3c:
b6:70:15:7a:7a:97:a4:87:66:d9:10:84:cc:40:97:c5:6e:64:
c7:1a:b9:c0:27:08:99:41:f3:76:2c:54:50:1e:71:71:e2:03:
b0:88:b1:40:b8:2a:c2:33:70:22:eb:6f:63:44:03:40:f0:f4:
cc:8a:11:de:a7:55:99:ee:24:a1:de:91:e6:27:06:69:56:52:
01:3f:d3:c1:32:fa:3f:41:07:e1:21:ba:40:fa:1f:22:64:b6:
af:43:b7:01:a0:0c:22:0b:cf:4a:08:b2:84:53:40:79:68:c4:
c4:ca:6f:75:ec:af:31:c9:8b:74:d9:e6:9e:21:0e:db:c6:5a:
47:c5:2a:e8:e8:b6:3a:7d:ae:c2:5f:38:f9:ad:ae:1f:38:4f:
66:94:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:13:38 2025 by rpki-client