Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_pfvSSWvxf9JB4HU-bOgr_Mlih8.roa
File: _pfvSSWvxf9JB4HU-bOgr_Mlih8.roa (raw, json)
Hash identifier: NzXCv7Ia1+4m7zp+sw5XlOlw7aQ+0EDlMwk/bTOs+Xo=
Subject key identifier: FE:97:EF:49:25:AF:C5:FF:49:07:81:D4:F9:B3:A0:AF:F3:25:8A:1F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01954171F8CE468C39B1583136A410A3BD3E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_pfvSSWvxf9JB4HU-bOgr_Mlih8.roa
Signing time: Wed 26 Feb 2025 08:49:03 +0000
ROA not before: Wed 26 Feb 2025 08:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.90.88.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 08:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:71:f8:ce:46:8c:39:b1:58:31:36:a4:10:a3:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 26 08:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe97ef4925afc5ff490781d4f9b3a0aff3258a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:e2:46:8c:98:60:1a:a8:ca:b9:46:ba:43:
46:e3:26:42:ac:78:17:7f:61:58:59:27:55:19:71:
9b:d2:13:a8:a1:11:4d:8a:5f:88:db:e5:54:f1:db:
71:0f:8a:fd:ba:4b:f2:cf:bd:8b:70:7e:67:1e:f5:
4a:3b:a4:50:30:d4:02:8a:cf:f4:fd:49:d0:29:ab:
7a:ec:cf:3a:be:30:30:4c:3b:9d:3d:9b:93:52:d4:
97:d0:79:34:6a:70:de:bd:49:aa:d7:02:d4:2b:ba:
68:49:c0:d6:9e:4f:7c:28:d6:21:17:f0:0e:ff:22:
c5:1b:81:09:6a:86:00:23:a4:5a:09:3a:33:84:fb:
9e:19:39:98:d0:41:00:5b:db:91:22:19:74:8c:1c:
50:a0:e7:0d:d8:e3:b4:00:29:e4:82:f3:9a:9e:dd:
95:38:f1:52:9d:5f:a4:c0:e9:e5:fb:a4:ad:ab:0b:
f1:94:fd:fc:4e:ea:8a:a8:b8:39:6e:19:24:54:48:
52:f3:ae:6f:85:1c:62:86:a9:52:15:c7:7f:7c:07:
e5:fe:a4:bd:85:b1:d1:1c:92:7e:62:9c:a7:a5:7f:
43:09:d3:1e:c4:ee:5f:c1:2c:cf:21:85:5c:e7:4a:
1e:6c:ae:c6:cf:4e:18:2f:22:f3:75:9a:dc:01:c4:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:97:EF:49:25:AF:C5:FF:49:07:81:D4:F9:B3:A0:AF:F3:25:8A:1F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_pfvSSWvxf9JB4HU-bOgr_Mlih8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/24
45.149.242.0/24
87.121.103.0-87.121.104.255
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c8:9d:42:bc:e6:bc:45:b4:89:89:5a:80:23:84:3c:26:88:
bc:8b:bd:bc:9f:0e:95:c3:4e:c8:df:5f:38:7f:7d:39:20:ba:
ca:4d:f4:1b:a1:7c:3d:a3:f5:8d:ca:21:c9:bb:01:f6:10:41:
98:4c:9a:34:ae:32:94:02:49:4c:4c:38:d3:96:56:35:d1:2d:
3c:34:4c:e4:e0:f6:fd:b6:a9:0b:5d:d1:c1:a3:ee:73:e0:19:
ac:27:e7:01:ed:13:59:ec:ef:e7:f1:de:ad:99:c6:25:bd:36:
5b:b6:cb:59:3b:4a:ca:e1:22:09:71:b1:6a:82:76:ac:a6:ca:
01:1b:1f:81:32:11:6a:ba:20:c6:db:db:4e:04:14:5f:52:89:
38:5e:61:ac:ff:cf:de:23:4b:e2:5b:de:dd:ba:1b:38:a5:26:
2c:4e:32:ba:44:9b:38:6a:a9:d5:4f:a5:09:46:4e:4d:ec:00:
8b:cc:8b:c3:35:9e:56:a3:d9:f2:4c:d4:9c:32:66:b4:f6:c7:
ca:ff:b8:1b:fa:77:47:be:55:a4:b5:86:96:95:fb:f9:7c:07:
d2:70:2b:5d:d1:43:7c:28:2a:40:ee:e2:72:81:b0:46:90:1b:
cb:ef:85:3b:81:47:d6:ad:25:90:30:2f:80:06:2b:19:99:23:
22:69:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:32:58 2025 by rpki-client