Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NeqOWnjPheVlP_ZLEOsTua2r1-Y.roa
File: NeqOWnjPheVlP_ZLEOsTua2r1-Y.roa (raw, json)
Hash identifier: MrFXpnR3PSs8SNmVMiDGUsEU2H9l18qY5+5sNoJuns4=
Subject key identifier: 35:EA:8E:5A:78:CF:85:E5:65:3F:F6:4B:10:EB:13:B9:AD:AB:D7:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019493DC2ADDAFF3BE73A59A8B84FB47C36E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NeqOWnjPheVlP_ZLEOsTua2r1-Y.roa
Signing time: Thu 23 Jan 2025 15:51:07 +0000
ROA not before: Thu 23 Jan 2025 15:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 12:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:dc:2a:dd:af:f3:be:73:a5:9a:8b:84:fb:47:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 23 15:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ea8e5a78cf85e5653ff64b10eb13b9adabd7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:f7:a5:63:bf:2f:c1:22:1c:51:fc:09:6e:
02:c9:f6:87:02:55:66:dd:ef:c9:74:e0:08:5b:07:
fc:6f:52:1f:05:27:a3:85:4a:0e:e6:03:f6:d0:a9:
40:0a:78:d5:b1:6f:fa:6d:10:6f:bb:5b:16:c9:b1:
69:98:59:50:01:86:1d:29:04:d3:d4:b0:50:14:51:
0e:80:fd:f8:c0:52:31:41:a1:b7:b3:18:3c:e6:6a:
75:4e:c7:95:7b:d4:4f:cf:8c:fa:ea:80:4d:6b:d0:
2b:ef:02:27:9e:78:2b:af:68:f6:1c:3d:1f:be:a5:
18:9a:a9:57:f7:08:f7:4a:13:4e:7e:b6:0e:76:ea:
52:fe:e5:c8:4e:28:29:84:27:9f:db:40:e0:8c:95:
c0:8b:a0:f5:b8:2a:ef:c9:6c:e5:5b:67:58:ba:60:
95:82:19:48:18:3c:a4:98:01:1e:5f:0e:d7:24:a9:
98:6d:b5:82:43:12:4b:f8:54:29:6d:f0:1f:cc:52:
56:4d:31:4c:e5:38:3e:0c:b9:f8:ec:b8:aa:5e:0b:
4c:9e:91:f2:cc:83:05:46:6f:bd:06:51:b0:c7:fc:
ad:56:f4:9f:ac:53:b5:1f:43:03:5c:cd:94:ae:c0:
48:e3:2f:7f:8a:6a:a6:d4:5c:ae:ab:72:38:01:77:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:8E:5A:78:CF:85:E5:65:3F:F6:4B:10:EB:13:B9:AD:AB:D7:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NeqOWnjPheVlP_ZLEOsTua2r1-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.128.96.0/24
87.120.33.0/24
87.121.38.0/24
87.121.58.0/24
94.103.127.0/24
94.156.2.0/24
94.156.79.0/24
94.156.113.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4a:35:ad:89:52:5f:0c:66:8a:63:de:09:e6:92:76:ba:fd:
0c:7e:05:a0:05:a1:cf:97:a8:e1:4b:54:5e:92:2e:16:8d:c1:
90:ee:5d:77:27:1a:a0:43:25:72:76:37:12:69:6d:4c:ae:e8:
b7:b1:a4:59:dd:7c:e2:fe:f2:21:84:15:e2:1c:b1:2b:70:98:
78:b0:7d:8f:71:ac:5e:18:db:e6:43:a5:b7:51:b8:26:ad:d0:
c2:f9:09:3a:dd:f6:16:67:b3:bd:73:55:f3:d0:7d:4a:96:b0:
bb:62:38:0d:78:1f:94:b3:05:8e:bf:b1:6c:a0:4a:fe:24:b2:
de:ea:16:a6:52:9f:a4:9b:c6:10:e6:6f:32:52:26:69:48:b5:
2e:b9:3f:d1:2c:84:59:f2:87:85:cb:71:ec:d8:d7:ec:ba:79:
73:b7:10:1c:b2:f2:4f:62:bb:a3:8d:c7:98:f4:14:bf:6e:42:
1f:1c:2a:15:b9:05:d2:17:5e:22:6f:19:8f:8c:43:cc:69:59:
43:7e:7a:29:6f:ef:37:29:2a:0e:54:83:8d:37:24:80:ba:3a:
29:ff:91:6e:40:68:55:d7:eb:0f:be:20:a5:e7:82:9f:bd:8d:
74:89:d3:77:92:44:89:2f:fd:94:f7:6e:ea:a9:4d:76:42:0e:
e7:4e:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:40:39 2025 by rpki-client