Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZtPFtD3JMbYj_j_KfrxBtgiO9U.roa
File: eZtPFtD3JMbYj_j_KfrxBtgiO9U.roa (raw, json)
Hash identifier: cxh0VY0uEnUQFKM0tyBoOunVPzgcKHcFxqvvFcK1JM4=
Subject key identifier: 79:9B:4F:16:D0:F7:24:C6:D8:8F:F8:FF:29:FA:F1:06:D8:22:3B:D5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019739E329FAFAFB4B1474B4E712EF42A148
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZtPFtD3JMbYj_j_KfrxBtgiO9U.roa
Signing time: Wed 04 Jun 2025 07:41:18 +0000
ROA not before: Wed 04 Jun 2025 07:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 45.95.0.0/24 maxlen: 24
45.95.2.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 08:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:e3:29:fa:fa:fb:4b:14:74:b4:e7:12:ef:42:a1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 4 07:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=799b4f16d0f724c6d88ff8ff29faf106d8223bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:0d:1c:fb:c3:f0:44:3f:94:26:fd:49:7d:
a9:06:1b:b6:02:2d:b0:2b:09:2a:66:67:e9:c5:bf:
cc:64:58:ac:98:4f:69:c6:a5:67:b0:3a:af:99:0f:
28:7a:3c:3a:9c:ad:eb:dd:d4:a2:f1:29:d5:f7:0b:
4a:c3:22:2e:5d:51:db:af:75:51:0b:51:35:09:eb:
7a:7e:a2:21:b3:bc:c3:5a:9b:df:c8:e6:73:d0:aa:
f4:f7:ca:6d:25:f5:57:f6:15:bd:fc:78:1c:19:14:
d3:60:de:ab:de:59:25:51:92:57:ce:55:4d:d5:3d:
92:05:a3:4a:30:51:df:5f:21:ce:6e:58:07:7b:8f:
b0:b4:48:b9:fa:03:27:9e:c9:56:23:eb:18:15:c9:
8e:f9:b4:e3:1c:dd:2d:11:8a:ef:1c:6f:b8:5c:78:
e1:18:ca:a7:4b:2d:16:e4:ff:f0:6b:4f:0a:69:68:
5b:9d:6f:12:44:bf:c1:8c:2e:45:81:5c:ef:3a:b1:
58:a9:d9:a6:1e:46:37:00:c7:0a:48:af:ad:ec:ad:
0c:2b:49:af:8e:fa:c9:55:fd:25:de:92:66:83:bd:
e2:64:3a:86:3e:0f:56:8d:33:81:13:50:c2:76:c2:
1e:fe:d4:60:dd:21:5e:da:f2:2b:60:57:95:57:70:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9B:4F:16:D0:F7:24:C6:D8:8F:F8:FF:29:FA:F1:06:D8:22:3B:D5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZtPFtD3JMbYj_j_KfrxBtgiO9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/24
45.95.2.0/24
185.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d0:76:ff:e3:09:c9:eb:50:ea:89:c5:d1:85:91:ad:4e:94:
20:ba:cb:b1:4f:ba:34:79:33:f8:05:cb:fb:e7:2d:b9:6a:25:
09:a0:4f:06:f3:c1:1e:f2:64:e8:dd:9e:b1:64:6c:dc:a1:6b:
06:9a:a2:4f:ff:36:74:9c:36:43:a1:33:2f:ca:fc:26:a3:95:
e8:e3:12:74:e9:1b:b4:1d:41:9d:c1:f5:83:f6:df:05:59:65:
bd:0b:d2:ff:f3:69:17:b5:5b:65:45:74:2d:03:6d:35:40:39:
79:55:21:dc:cd:93:13:38:82:f6:18:d4:2a:23:4d:49:02:cb:
5c:b3:c1:9d:df:9f:88:09:fc:14:49:86:61:47:1a:80:c5:e0:
a0:58:45:42:01:eb:26:64:24:07:c9:c2:8d:31:19:bf:62:23:
6c:0d:ab:ca:b0:5c:4e:ef:11:39:32:1b:dd:59:06:95:a0:86:
08:38:ed:18:ad:49:a1:f6:c5:de:d7:81:bf:e9:2b:5a:f4:65:
f9:a7:55:bd:62:da:1c:b8:b1:5e:c7:a2:45:fd:73:ba:86:77:
7f:93:b1:9b:e2:69:cc:e2:d2:99:78:79:0a:fe:1b:bb:7f:85:
a0:ce:92:63:7d:31:3b:5c:5d:76:09:c8:d0:d1:6b:be:a9:4a:
ac:8a:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:27 2025 by rpki-client