Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fAeZEbO7JgaL8dUb6AxkReCILNo.roa
File: fAeZEbO7JgaL8dUb6AxkReCILNo.roa (raw, json)
Hash identifier: yZWvX041EnnmNackLWr9Av6lfOKAPW2YIeBuwdLmDcY=
Subject key identifier: 7C:07:99:11:B3:BB:26:06:8B:F1:D5:1B:E8:0C:64:45:E0:88:2C:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193A65BE02F605525E3416B30753C7D8703
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fAeZEbO7JgaL8dUb6AxkReCILNo.roa
Signing time: Sun 08 Dec 2024 13:00:59 +0000
ROA not before: Sun 08 Dec 2024 13:00:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.113.37.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 11:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:5b:e0:2f:60:55:25:e3:41:6b:30:75:3c:7d:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 8 13:00:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c079911b3bb26068bf1d51be80c6445e0882cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:7f:e5:40:45:75:d7:b3:55:ae:ed:9c:91:
9d:b9:80:e1:f2:20:7e:32:e8:78:0d:52:95:93:c6:
cd:ed:42:f8:f4:db:40:25:f3:87:2d:11:7c:d4:74:
d7:ba:6d:52:08:53:71:4a:6c:cf:60:0c:17:28:45:
0e:56:51:90:6d:4b:b9:1a:12:3f:96:ae:2c:f5:47:
cb:69:d8:af:25:d2:fd:72:a5:7c:5b:7e:06:6f:3b:
9c:05:36:8e:0d:98:3e:5c:de:74:2f:38:e2:68:35:
95:22:4c:b7:b1:75:d8:2b:06:5c:ba:5f:01:5e:8b:
37:f8:16:14:1d:81:d0:c4:06:65:3f:5c:96:1f:c4:
59:8b:1a:d9:e0:8b:8d:6d:1a:52:a3:a2:55:8e:79:
06:44:a6:fc:01:95:4b:cd:e8:53:12:e0:e3:0e:1e:
6b:e9:20:e2:e0:05:cf:c3:46:47:24:e2:40:d8:a5:
69:90:9d:ff:8e:0f:6e:73:5e:e2:be:61:a3:ae:9d:
6d:89:64:fc:4f:b3:2c:8f:d1:cb:e7:2f:aa:c3:71:
df:e4:20:d2:6d:d9:e7:25:8f:57:bf:3e:d1:75:80:
13:cd:70:b6:ef:93:64:81:92:02:a8:8b:42:cd:37:
8b:4e:ed:bd:05:b6:79:e1:d7:2d:7d:c6:0f:d6:df:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:99:11:B3:BB:26:06:8B:F1:D5:1B:E8:0C:64:45:E0:88:2C:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fAeZEbO7JgaL8dUb6AxkReCILNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
109.206.236.0/24
185.218.137.0/24
194.113.37.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:76:5a:5b:7e:44:91:d0:8c:7b:19:e1:6d:c0:75:65:c8:e0:
bf:26:db:3f:00:d2:ca:56:d0:f4:70:bb:f9:ca:1e:16:05:3f:
d1:d0:d9:01:e1:d9:d1:7f:57:e7:5e:6b:b9:b9:a8:10:41:eb:
2f:6d:96:11:7a:65:98:04:37:5a:51:b0:e6:4f:08:5a:13:dc:
47:cd:d8:68:71:b3:0d:ea:2d:7f:45:1f:bb:ba:b3:e1:5e:2d:
45:f9:5f:eb:27:0a:fb:39:aa:cd:08:d3:db:ea:1a:5c:f9:73:
b3:18:1d:c6:2b:f0:5e:c8:c0:8a:d5:32:12:e2:16:c2:1f:fe:
1e:3e:a9:1d:30:32:1e:92:3a:61:7d:df:e4:42:b4:a3:59:ed:
b1:44:47:24:03:de:8a:4b:71:85:e3:7a:03:92:b1:2d:68:cc:
6b:f6:9e:63:7f:7d:9f:6b:57:49:01:22:0f:96:d5:fd:d1:d7:
80:9c:d7:e5:4d:39:2f:34:2a:cb:72:00:be:a8:ea:91:ce:d2:
75:c6:53:64:26:00:62:c3:2c:5f:d5:fc:2d:26:3b:07:6c:82:
f4:19:b4:14:78:93:34:03:db:e0:8b:fd:01:0e:bb:91:82:83:
f9:3b:d7:2d:31:53:5d:59:f2:45:6a:bb:a3:41:ee:f8:fa:83:
c2:11:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:29:10 2025 by rpki-client