Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9MfdFOXJIqVGkhO0-7N7ZrZfr2k.roa
File: 9MfdFOXJIqVGkhO0-7N7ZrZfr2k.roa (raw, json)
Hash identifier: CjqSBmiI7rWTOO9LUJ1+XTzoDfcLDS/fjevtc5YpR9Y=
Subject key identifier: F4:C7:DD:14:E5:C9:22:A5:46:92:13:B4:FB:B3:7B:66:B6:5F:AF:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01938B21388950D495FF7FE3C4E2294DF23C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9MfdFOXJIqVGkhO0-7N7ZrZfr2k.roa
Signing time: Tue 03 Dec 2024 06:07:10 +0000
ROA not before: Tue 03 Dec 2024 06:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 45.95.3.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 11:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:21:38:89:50:d4:95:ff:7f:e3:c4:e2:29:4d:f2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 3 06:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c7dd14e5c922a5469213b4fbb37b66b65faf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:db:fa:6e:c4:68:6a:e4:1c:1a:5c:c8:54:
b8:2b:db:c7:fb:72:e3:03:20:d4:98:d6:f3:8a:2f:
97:2d:5c:8d:71:c6:5f:70:42:24:b1:b6:26:16:7d:
ac:b6:76:3f:40:24:52:2d:e5:35:e8:ea:83:f7:5a:
25:ae:65:d8:03:61:f8:5f:f9:28:fd:6f:0c:30:3e:
71:a8:a6:e9:cf:43:f1:25:06:1a:52:c6:1b:f6:5f:
ab:73:80:ad:18:4f:8e:cc:69:82:ba:7f:c8:d2:e2:
de:81:bb:2a:75:89:b7:cc:48:86:2a:37:c1:60:3a:
f4:f2:13:ed:a5:6e:7e:85:4b:60:2f:eb:63:9f:1a:
dc:c7:f5:04:7c:c9:43:b7:ad:bc:4c:13:ba:9f:ba:
38:f2:e0:93:9c:12:01:28:f8:b1:35:1d:0d:18:31:
b6:9c:29:fa:73:0a:d1:a8:23:63:f3:58:64:a1:85:
05:73:e8:d0:5e:4c:84:73:41:0b:bd:55:a3:85:3d:
eb:af:06:d2:5e:e6:62:9c:d7:74:a2:78:ae:b3:43:
41:2d:11:cc:82:11:25:d6:da:d5:e4:09:97:e5:7a:
19:ec:91:de:8d:0b:0a:bc:ff:4c:1a:e1:52:05:e2:
7b:f6:76:e5:a8:42:e9:6f:2c:c9:27:dc:2e:28:b9:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:DD:14:E5:C9:22:A5:46:92:13:B4:FB:B3:7B:66:B6:5F:AF:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9MfdFOXJIqVGkhO0-7N7ZrZfr2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
87.121.98.0/24
87.121.218.0/24
185.246.222.0/24
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:ed:2a:d5:9b:e8:7e:1d:9a:f1:80:68:14:6c:82:57:01:09:
a8:37:0f:5d:9f:54:84:f7:0f:48:ac:71:60:6e:3d:33:e7:10:
f0:4c:95:5a:59:49:3d:e2:57:71:f1:8f:76:1e:3d:96:ed:e1:
60:67:f5:6f:8c:c1:49:92:8c:b9:a3:d9:60:89:83:de:75:3a:
62:57:56:1d:03:1c:1e:6a:66:89:f7:cf:92:bd:2b:84:eb:e6:
e0:6e:bb:3a:5c:25:a3:fe:35:a8:da:2b:65:c2:fc:7d:b2:f3:
92:59:1f:b8:db:c1:57:91:4f:d0:33:b8:81:89:8e:c3:14:63:
68:d1:71:2a:68:4c:85:bf:d0:04:13:91:d6:d3:6a:e8:87:4b:
06:16:a4:94:bf:ac:0c:6f:24:af:ad:76:45:1d:ae:fa:88:ac:
79:03:73:aa:6f:32:83:d3:04:a6:b2:5e:26:3e:e7:ad:0e:b0:
6e:70:eb:d3:0a:3e:74:5e:17:fa:43:db:96:74:0c:64:12:85:
88:50:59:da:91:c6:3d:5b:a8:29:63:4b:5a:4d:33:ef:61:0f:
01:0b:ed:e6:35:44:b5:59:de:a3:aa:d9:68:73:7d:f7:83:23:
d6:8c:0b:eb:43:10:e2:fb:86:5d:d7:0c:0e:61:87:65:b5:bb:
64:e6:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:21:55 2025 by rpki-client