Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_SLGmgLJnYj4U4Og_mLv77HdVEQ.roa
File: _SLGmgLJnYj4U4Og_mLv77HdVEQ.roa (raw, json)
Hash identifier: ME5MXW9oWVX8VEboqizZfhWsOPMIXh2ayUNOvUv9Tz0=
Subject key identifier: FD:22:C6:9A:02:C9:9D:88:F8:53:83:A0:FE:62:EF:EF:B1:DD:54:44
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194FF5DC652551F3035A5211DFF8F1F70E2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_SLGmgLJnYj4U4Og_mLv77HdVEQ.roa
Signing time: Thu 13 Feb 2025 12:52:03 +0000
ROA not before: Thu 13 Feb 2025 12:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 08:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:5d:c6:52:55:1f:30:35:a5:21:1d:ff:8f:1f:70:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 13 12:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd22c69a02c99d88f85383a0fe62efefb1dd5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:fa:f6:f1:19:5f:77:d7:33:9c:97:e6:ae:
de:ae:dc:cb:22:46:b2:77:1d:16:99:66:ab:ed:dc:
32:5d:cc:33:78:c7:1c:0b:f0:12:c2:0b:7a:dc:df:
50:9d:d6:77:ed:1f:f4:ba:ff:8e:b5:7b:3d:ae:a5:
43:b4:40:42:82:cd:96:66:25:91:18:e5:e4:5f:3f:
72:bd:00:b2:bf:40:63:37:9b:86:d1:d4:23:21:54:
63:e3:3c:6a:14:d5:be:95:bd:9f:64:bf:c0:ec:56:
da:b9:7c:7d:8e:b5:f2:f9:2c:6b:9c:8e:1c:f9:fa:
42:13:ae:84:8c:77:f1:be:07:63:ea:ec:7b:bd:de:
0c:fc:6a:2e:5d:f4:ce:f9:45:06:bf:e4:01:60:3b:
a8:2d:e7:ec:89:7c:f2:62:2a:c9:9c:7d:c7:d0:4e:
57:85:30:af:06:97:4f:8b:07:3d:47:29:88:ca:12:
a4:23:3b:31:66:f2:56:ac:b8:44:4e:bc:79:b7:18:
d7:bc:1f:42:3e:20:01:d6:3c:91:b5:44:f8:b2:d2:
12:0e:37:a5:52:ee:c0:dc:aa:fa:7f:ee:8a:9e:7c:
87:a1:4d:53:87:89:5d:85:48:49:a0:35:2d:95:93:
34:74:f3:fa:eb:69:f7:bf:d7:65:7c:cb:f5:18:e6:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:22:C6:9A:02:C9:9D:88:F8:53:83:A0:FE:62:EF:EF:B1:DD:54:44
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_SLGmgLJnYj4U4Og_mLv77HdVEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
91.92.67.0/24
94.156.152.0/24
193.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0f:a0:4f:1d:d8:c4:b2:9b:e7:36:e6:ac:a6:e7:2b:6f:94:
27:8a:75:6f:7e:7e:2c:be:42:c0:16:92:47:bf:66:6f:5e:85:
e1:02:5f:2f:fd:d7:54:a4:3b:a8:3e:7d:aa:2a:30:30:20:08:
bc:65:fd:43:53:67:03:08:1b:11:5b:a7:bb:05:20:f3:29:49:
27:7e:b2:d8:d5:42:b1:30:a5:72:45:88:ed:b2:e1:14:01:72:
b4:07:c3:22:eb:fb:44:1a:74:1c:97:f5:f7:14:d3:b9:32:8b:
33:85:10:b1:bb:b9:64:b6:3c:1e:6a:d3:4e:35:30:54:59:36:
b9:61:66:72:0b:4b:6e:d5:19:19:a0:e4:94:2a:69:b5:06:73:
db:26:5a:89:18:29:79:5f:3e:dc:1b:0a:78:b6:29:d2:b2:58:
eb:b7:6d:7e:b5:7b:53:69:02:9b:29:2a:c5:c8:68:e0:3f:0a:
0e:2c:ee:59:00:87:c9:d4:3c:59:53:41:3e:52:d2:9d:c1:09:
73:32:83:a8:78:b2:51:f6:3d:a7:f2:0d:3f:18:fe:c8:fb:3d:
66:7b:6d:7f:d1:ac:9d:70:9b:d6:a8:4a:b4:e1:34:be:32:1f:
43:96:ed:b8:c9:be:aa:80:c7:2f:73:e1:98:86:a2:60:8f:d2:
49:ab:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:56:01 2025 by rpki-client