Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A4qfa9T7SZoGCeaek0GVdJl78tA.roa
File: A4qfa9T7SZoGCeaek0GVdJl78tA.roa (raw, json)
Hash identifier: iBEvQ3Y9eFOhjgHWSaCY4pLCet6N9+iGQJ+U+JpstQI=
Subject key identifier: 03:8A:9F:6B:D4:FB:49:9A:06:09:E6:9E:93:41:95:74:99:7B:F2:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01958973ED16B57D898E9F3321E6332EAAE2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A4qfa9T7SZoGCeaek0GVdJl78tA.roa
Signing time: Wed 12 Mar 2025 08:23:50 +0000
ROA not before: Wed 12 Mar 2025 08:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199959
IP address blocks: 45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 13:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:73:ed:16:b5:7d:89:8e:9f:33:21:e6:33:2e:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 12 08:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038a9f6bd4fb499a0609e69e93419574997bf2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:ed:c2:f4:43:47:5c:c3:21:88:b9:ab:ee:
be:19:67:62:47:56:19:dd:0f:ce:4d:16:96:8e:19:
e9:e5:17:35:b7:9b:c4:a6:ef:c6:b7:9f:73:3a:a9:
60:f1:a1:5c:fe:e8:bc:40:79:6d:d9:32:56:36:0c:
ca:45:a0:6d:09:05:af:f7:9e:14:f4:a4:4b:b1:dd:
0d:41:d2:43:e0:a2:b7:05:81:8a:35:7e:44:56:c3:
8b:f0:b5:27:58:92:44:f7:39:7c:57:c2:74:65:e5:
56:36:eb:bd:27:16:01:61:02:ef:5b:57:33:9e:b5:
dc:4b:26:d2:f7:dd:29:f7:9d:0b:bd:20:6a:dd:9a:
38:0f:6e:ad:b5:38:12:17:02:03:40:7e:b9:f1:4f:
36:1f:56:86:af:20:51:4e:5b:f1:a9:4d:6b:c8:20:
e7:28:52:0c:86:c9:2c:7f:fe:59:3d:b4:a6:67:27:
fc:ff:59:02:54:81:7e:f2:a3:33:90:9b:43:58:51:
f8:60:1b:6d:50:94:10:4e:48:b4:46:b9:87:ae:a3:
f8:a8:db:3e:5c:53:ab:d2:26:43:63:d5:34:1a:51:
f3:5e:aa:af:e5:bb:6e:b6:ae:81:fa:56:80:1b:bb:
03:60:62:40:79:39:67:f2:a4:98:8f:85:62:e8:e7:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:9F:6B:D4:FB:49:9A:06:09:E6:9E:93:41:95:74:99:7B:F2:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A4qfa9T7SZoGCeaek0GVdJl78tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
91.92.67.0/24
193.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:52:6a:0c:cd:45:ef:fe:be:3a:8b:ef:5d:73:a3:65:60:d3:
50:a0:0c:54:fc:e6:08:ed:d3:39:a1:7d:06:0f:46:fd:c6:7a:
51:e4:4d:08:58:8d:01:44:fc:b8:8c:cb:40:b4:5c:5a:b6:17:
fc:a8:82:77:c5:2b:eb:53:21:59:37:05:d7:90:08:dd:52:c9:
a7:17:b3:35:8c:91:87:e5:66:2f:03:a8:cd:4b:f3:5f:34:a2:
5e:6d:7c:b5:2f:1e:39:de:2d:c0:b3:df:9a:df:ce:03:0b:47:
3b:7c:ed:95:f7:e7:aa:70:c6:47:ec:ad:38:79:ba:c0:f6:04:
a7:38:2b:c2:23:2f:62:55:28:d1:26:07:c1:06:c7:0e:6a:d7:
9a:9a:63:2f:dd:3d:db:ca:a3:8f:83:b6:cb:bb:d3:63:fe:24:
3c:21:b0:35:ff:0b:d6:c1:52:0c:33:4a:f1:08:af:f1:0a:f0:
d6:4e:ef:a2:c3:20:00:36:97:18:99:73:87:a0:8e:e8:75:d5:
2a:a4:67:5f:ab:55:3d:9b:fd:6d:f4:62:db:4f:43:99:b2:d8:
8f:df:af:ae:66:54:40:4b:c7:e0:9d:2b:3b:7a:73:34:93:bf:
e3:2b:7a:2d:71:c3:75:71:07:bd:56:63:39:35:84:f3:e4:17:
80:dc:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:30:55 2025 by rpki-client