Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7qhVmDjXzt2FE7AekrOYEhkFYGw.roa
File: 7qhVmDjXzt2FE7AekrOYEhkFYGw.roa (raw, json)
Hash identifier: CpJi10d4WbwDaFaWnqbj9GyAeNt1kxsjWgsJsVAvhws=
Subject key identifier: EE:A8:55:98:38:D7:CE:DD:85:13:B0:1E:92:B3:98:12:19:05:60:6C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824DB767E941EFB01A12153C57AB68D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7qhVmDjXzt2FE7AekrOYEhkFYGw.roa
Signing time: Thu 02 Jan 2025 17:51:31 +0000
ROA not before: Thu 02 Jan 2025 17:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401120
IP address blocks: 45.88.88.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 15:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:db:76:7e:94:1e:fb:01:a1:21:53:c5:7a:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea8559838d7cedd8513b01e92b398121905606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:c2:a2:11:94:7f:46:e9:32:7e:28:63:82:
c6:a2:a1:12:6d:d6:22:e8:3d:1a:e0:18:3d:6b:1a:
76:68:f6:22:b0:7f:54:2c:c5:f5:ae:6f:05:32:02:
6c:6b:43:aa:aa:9e:26:45:42:c7:ac:b0:23:c9:b6:
d1:78:8e:b0:c2:4c:0d:61:7d:f7:cf:b1:ec:64:ba:
f0:17:26:09:01:f5:83:bc:59:95:71:be:83:03:cf:
6a:43:04:bd:c4:54:fd:de:03:30:24:c7:ae:ca:c6:
98:b4:4e:07:cb:b0:93:1a:3c:91:d1:68:fc:5c:b9:
84:d0:9c:6d:22:ee:52:b7:26:65:ac:d9:ef:36:9e:
9d:e3:27:18:04:32:80:d3:10:82:cb:aa:a6:40:16:
d1:6e:d3:b2:aa:88:12:d0:25:da:20:b4:ca:35:00:
3f:b5:5d:bb:02:96:a5:29:a8:6b:da:b6:17:83:4a:
f0:5e:6b:03:e0:b9:6b:75:be:b1:ee:1d:8e:53:45:
19:91:38:28:eb:c7:47:3e:13:38:ad:a0:71:cc:a2:
8c:51:61:6a:d9:36:7b:1d:ef:65:ff:10:d5:60:0b:
b9:c6:1e:4e:9c:21:76:f9:83:49:21:36:b9:9f:b0:
ac:6e:51:eb:0d:3d:56:1c:2a:ee:68:6d:a5:8e:3c:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:55:98:38:D7:CE:DD:85:13:B0:1E:92:B3:98:12:19:05:60:6C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7qhVmDjXzt2FE7AekrOYEhkFYGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
93.123.39.0/24
94.156.104.0/23
94.156.166.0/23
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
43:64:d4:9c:1f:3e:60:02:5d:7c:09:76:8f:c0:de:ba:57:ec:
25:11:23:c0:c8:97:78:8d:99:b4:65:73:cb:0f:8a:31:df:6e:
7d:bc:09:70:01:69:05:db:3b:fd:86:52:fc:34:41:4b:c4:40:
36:11:e4:0b:3f:a8:35:0f:1e:1b:85:b4:8c:e6:02:3e:69:39:
56:a9:59:cd:1f:a2:3e:01:f6:b5:2e:2d:a7:e6:42:6b:54:67:
7d:86:21:48:39:69:a3:f0:0c:7a:2b:e5:3a:93:09:db:92:b2:
51:a0:44:47:fe:22:68:dc:4c:4a:5c:3c:d2:6c:7b:7c:50:15:
70:3a:87:f0:28:44:be:d6:39:fe:c8:10:ad:1b:ae:3c:0b:56:
75:83:fb:38:b4:8a:69:14:d2:05:c1:3a:30:9a:0e:03:f4:7d:
3f:51:6c:0b:1e:e6:d5:b1:d7:a8:2b:78:d6:c4:80:96:9c:dc:
c4:2c:6d:b7:76:b3:77:f0:c2:4f:cb:ce:c8:8b:cb:de:1b:00:
38:d0:e1:76:ff:02:83:e3:d8:d4:2b:d0:f7:d0:7d:8a:21:7a:
7c:cd:2a:f2:73:4c:d3:1f:37:9a:01:b3:dd:7f:e1:fa:f0:62:
27:a5:83:a4:cc:51:2b:d2:c5:38:ef:84:dc:87:9d:d2:b8:58:
4f:b5:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:12 2025 by rpki-client