Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4JzHXHWP_e4vtiD9ZUrpuc4-2ds.roa
File: 4JzHXHWP_e4vtiD9ZUrpuc4-2ds.roa (raw, json)
Hash identifier: HRHoS+9dSwl2LD3ZOHnrlEI3h5t5fPrRiI+CM9jqUvM=
Subject key identifier: E0:9C:C7:5C:75:8F:FD:EE:2F:B6:20:FD:65:4A:E9:B9:CE:3E:D9:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194732A69ACBD0AA1E8F6E82341FC9D7D5D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4JzHXHWP_e4vtiD9ZUrpuc4-2ds.roa
Signing time: Fri 17 Jan 2025 07:29:06 +0000
ROA not before: Fri 17 Jan 2025 07:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
147.78.102.0/24 maxlen: 24
185.225.74.0/23 maxlen: 24
193.35.18.0/24 maxlen: 24
193.149.28.0/22 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:2a:69:ac:bd:0a:a1:e8:f6:e8:23:41:fc:9d:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 07:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e09cc75c758ffdee2fb620fd654ae9b9ce3ed9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:76:2b:8d:58:ac:bd:dc:14:ce:5a:d7:f2:
16:d5:b0:26:f9:a9:e9:cf:38:18:c8:e9:88:20:84:
b3:b7:1c:23:14:a7:34:09:43:ef:94:8b:cc:cb:ad:
d5:cc:a2:ab:9e:92:d2:d5:cf:26:07:04:7c:5f:d3:
26:4c:f6:38:d0:ad:6d:13:ce:82:c3:66:1a:18:fb:
d6:19:bd:27:2f:5d:76:40:09:5f:1f:15:88:b6:53:
76:85:a1:23:18:0b:64:a8:8d:e3:10:e6:b5:2e:6f:
79:6c:6c:a8:37:54:1d:e1:c5:e7:a3:09:cf:45:14:
13:a9:7a:50:b9:05:75:72:12:c3:cd:83:52:2f:6f:
32:a4:56:1f:f6:27:9e:2d:1e:b6:63:c4:c6:76:d5:
4a:a5:b1:31:cc:a6:a7:75:c0:f1:7a:56:38:de:10:
79:37:11:7c:47:c9:23:90:15:f8:1f:b6:a7:95:f2:
d2:e7:31:87:e3:c9:d5:66:db:00:42:40:30:79:8e:
9e:6c:14:94:62:8a:c7:8a:bf:2b:93:b1:a5:77:56:
0c:7a:93:63:12:cc:39:39:99:ab:ff:0a:cb:5c:91:
a5:1d:e9:74:a2:e4:fd:5e:de:33:ee:db:f2:e9:ef:
d9:bb:96:74:e6:9f:00:f4:1e:0a:6c:6d:43:14:21:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9C:C7:5C:75:8F:FD:EE:2F:B6:20:FD:65:4A:E9:B9:CE:3E:D9:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4JzHXHWP_e4vtiD9ZUrpuc4-2ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.48.0/24
79.110.61.0/24
85.217.144.0/23
147.78.102.0/24
185.225.74.0/23
193.35.18.0/24
193.149.28.0/22
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
90:17:6e:76:5b:62:f9:7e:f8:d2:b7:b9:24:f3:32:dd:8b:6a:
d7:f1:d9:a9:68:0c:00:46:bb:35:16:2a:ee:b2:21:80:2a:54:
7d:7b:85:64:f7:78:64:5f:1f:cb:a8:05:d9:bd:5e:71:6e:7b:
af:a8:15:07:8a:00:b9:fb:44:5f:71:11:8c:b6:c7:bd:23:e2:
8a:eb:65:43:c5:dd:01:1f:fd:95:5b:76:da:2c:0f:ac:d4:f7:
73:ef:d4:fd:33:04:94:80:5a:31:b4:34:51:74:9c:61:66:f2:
6c:a8:c9:d6:c4:d6:0e:a3:cf:19:77:38:16:9e:9d:d8:41:67:
c5:35:9a:60:48:33:a6:80:0c:a9:2c:7e:ab:21:5d:db:aa:25:
c4:18:cc:42:55:02:41:7d:56:c2:4f:fd:c3:01:65:98:de:cb:
12:c4:de:a4:e0:11:53:2a:e8:16:1d:be:67:a7:da:8a:c4:87:
55:a2:d4:fa:2f:f1:c5:d5:06:84:ca:3b:5c:11:73:60:38:ba:
79:79:9a:fb:e6:c3:23:22:43:6a:b1:00:5a:44:4c:81:ec:c2:
17:40:34:2c:d9:ee:6a:f2:e7:2b:2e:ca:7c:58:5b:0c:44:6b:
59:c4:57:7a:64:49:48:72:14:8a:9f:e2:91:74:1d:15:8d:21:
41:48:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:12 2025 by rpki-client