Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dwuIhHkI1bgD7NHE5xwF9K1rXX8.roa
File: dwuIhHkI1bgD7NHE5xwF9K1rXX8.roa (raw, json)
Hash identifier: 2VEAYWznsZ9b05Ce8IgfknIHqliQ2lDCW4Yto0zT0Jw=
Subject key identifier: 77:0B:88:84:79:08:D5:B8:03:EC:D1:C4:E7:1C:05:F4:AD:6B:5D:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245F3867A4DF62159492C095E91B9E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dwuIhHkI1bgD7NHE5xwF9K1rXX8.roa
Signing time: Thu 02 Jan 2025 17:50:59 +0000
ROA not before: Thu 02 Jan 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
147.78.102.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.225.74.0/23 maxlen: 24
193.35.18.0/24 maxlen: 24
193.149.28.0/22 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5f:38:67:a4:df:62:15:94:92:c0:95:e9:1b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=770b88847908d5b803ecd1c4e71c05f4ad6b5d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:b4:1b:f9:0c:f1:ad:07:44:be:5e:c1:89:
0c:13:6d:de:2c:35:0d:71:07:0c:ef:c6:72:8f:ea:
dc:49:3f:42:cd:11:ba:91:27:35:7a:9d:d2:ca:45:
89:49:60:4d:7f:1a:bf:ea:e3:90:13:18:f2:87:0d:
d6:9a:2f:9f:67:02:cd:2a:ae:f1:c0:f8:86:90:d3:
ac:e7:c4:b7:7a:73:ae:b0:e6:06:67:99:92:49:e3:
02:cf:f6:aa:0f:60:e8:50:61:55:69:6c:14:cf:61:
7f:85:a0:9e:20:94:4e:a3:ff:86:6f:3f:ed:b1:0e:
a1:b1:62:53:9b:b2:be:01:da:b0:35:6b:a7:63:e4:
74:73:c3:e1:af:b2:17:ee:61:dd:a1:74:17:00:72:
70:75:01:3c:86:85:57:ca:e5:69:9d:5a:cd:37:72:
97:83:cd:13:1b:95:af:ca:43:af:dd:70:d5:0b:b0:
4d:6e:3e:d3:0b:92:8e:84:09:e9:66:e0:33:d3:6e:
bd:30:21:66:ae:36:99:85:af:72:94:4f:d6:80:ab:
d6:b0:3e:35:b2:bf:27:b2:28:c9:f7:32:f4:fc:8f:
59:2b:4e:b0:a5:3e:eb:d1:25:19:75:b4:9b:80:f7:
c0:6b:8e:46:de:2f:8c:09:92:bc:09:cd:c9:cc:41:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:88:84:79:08:D5:B8:03:EC:D1:C4:E7:1C:05:F4:AD:6B:5D:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dwuIhHkI1bgD7NHE5xwF9K1rXX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.48.0/24
79.110.61.0/24
85.217.144.0/23
147.78.102.0/24
178.215.227.0/24
185.225.74.0/23
193.35.18.0/24
193.149.28.0/22
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
65:77:61:2d:ce:31:cb:24:13:a4:85:2e:4c:e1:3b:05:9a:bd:
be:90:83:6d:3a:3a:13:a6:84:03:b7:2e:74:b7:a1:61:99:68:
ae:fa:0c:7e:03:e4:76:cd:41:fe:4f:4b:e8:33:bb:3a:5d:4a:
a4:e3:8e:08:02:20:ae:46:b4:fd:26:ed:04:f9:92:0d:34:51:
f7:d9:95:6e:2e:f5:ea:f5:6f:25:56:ef:88:23:bd:3e:fe:3c:
a6:50:4c:51:fd:35:16:76:a0:dd:4b:04:a6:4f:9d:2c:b1:c0:
58:da:04:1c:12:cb:89:79:a6:56:37:d6:d1:66:08:3a:61:55:
bc:46:e4:8a:68:a3:81:c3:50:5b:17:d3:70:ad:bc:f8:27:94:
ac:76:95:9c:79:8a:8e:bb:dd:69:d1:78:8d:e4:1b:78:a6:bf:
5d:eb:ed:b9:75:6b:99:d5:1a:5a:d5:15:ca:24:c9:94:03:2a:
fc:c7:10:3a:eb:15:fc:e1:e4:21:a4:d1:40:6d:9e:ca:d7:20:
ef:75:ef:cb:69:21:8b:9b:79:5f:9f:02:94:72:4e:b5:a8:d5:
a1:90:6e:d5:35:8f:80:98:29:e9:b7:f2:26:6c:89:3e:b1:bb:
09:96:6c:be:7c:9b:7f:f3:a4:d5:48:b7:17:cb:97:b6:f4:8e:
c0:52:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:43:28 2025 by rpki-client