Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i1RqDnKK1CRU6B5mLpoHBJvm-20.roa
File: i1RqDnKK1CRU6B5mLpoHBJvm-20.roa (raw, json)
Hash identifier: 7aBISGtkt7ihjVpSxerdZPVryqVdrPRCbTimhtXdmyg=
Subject key identifier: 8B:54:6A:0E:72:8A:D4:24:54:E8:1E:66:2E:9A:07:04:9B:E6:FB:6D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282455F3F681F732D26F9480BC4B5442
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i1RqDnKK1CRU6B5mLpoHBJvm-20.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.253.64.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:55:f3:f6:81:f7:32:d2:6f:94:80:bc:4b:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b546a0e728ad42454e81e662e9a07049be6fb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ce:29:18:5b:3c:97:a1:fe:98:cb:44:e2:47:
24:b1:8f:09:b6:ea:e2:ad:73:54:ce:77:43:d7:85:
e8:03:8d:29:31:64:f5:e3:63:fc:3c:0f:5d:db:55:
f0:61:35:0c:f0:30:6c:8b:3f:8f:b0:7f:bc:10:34:
ac:a5:fd:ad:4b:ea:1d:22:06:9b:cd:69:d3:63:c3:
c6:55:0b:2b:ad:89:da:6d:ad:d4:31:71:8f:b8:78:
7d:58:08:64:11:27:8d:ee:2b:59:57:17:a9:8a:5f:
e7:22:02:95:8d:4b:a9:85:3d:e3:0d:88:8c:d9:34:
0d:a4:d8:3c:1c:20:16:b9:f2:13:4c:e1:89:39:b8:
c2:f6:e9:d7:77:50:96:07:18:a7:e5:3e:02:54:7a:
f0:3c:e8:cb:f0:e6:d5:f7:29:bb:d9:b7:a1:05:93:
4a:2e:b5:d5:c3:8c:ed:a2:93:87:7d:13:fa:c6:61:
25:07:c6:8d:5a:97:ab:81:d9:d7:a0:2f:c9:85:b5:
d4:eb:fa:1f:e7:b9:54:95:34:8c:47:8e:22:75:fd:
3e:63:f6:4d:55:aa:e0:da:e6:3e:95:7b:82:95:9e:
d5:ec:b9:38:1d:e0:9d:aa:f2:29:96:42:2f:a0:da:
7e:82:e4:85:20:da:92:a2:d2:11:da:e7:8a:24:e5:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:54:6A:0E:72:8A:D4:24:54:E8:1E:66:2E:9A:07:04:9B:E6:FB:6D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i1RqDnKK1CRU6B5mLpoHBJvm-20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
83.219.98.0/24
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:c9:da:35:ca:d3:06:7b:f4:be:65:d9:33:f9:ec:df:5b:d6:
bb:68:c5:06:a2:9a:f8:09:d7:b9:f4:72:e6:bf:0f:29:aa:90:
37:96:e4:ab:c1:2c:b7:a4:c3:43:5f:4b:45:1b:7c:f9:a1:c8:
c5:ab:ca:94:af:2f:2e:2d:bf:33:70:44:39:38:5a:4b:f9:7d:
a1:2f:a6:e3:49:6f:a3:34:43:c1:19:03:2e:fd:b9:9f:b9:c5:
7f:07:f7:67:07:1c:5d:20:a9:07:13:f8:21:74:ae:b2:64:ac:
05:bc:3f:cf:44:58:0f:ea:df:f7:6a:33:d4:51:ea:df:26:69:
56:74:2c:79:1a:c2:f0:0f:60:09:ae:2b:7c:76:52:d4:ab:fa:
a4:c0:8d:a8:55:08:9e:f0:0a:ac:46:2f:e3:c0:d7:6f:73:ea:
ad:53:fa:c2:c4:96:91:ac:c2:93:07:51:30:9b:00:fb:85:97:
be:fb:bd:67:fc:b4:d7:a4:fe:9c:72:04:6b:65:46:bb:88:11:
c9:94:df:67:97:81:f4:32:f0:dc:57:9d:ed:ee:ee:3f:c7:5f:
80:d9:6a:c4:1d:9c:a2:5c:44:e5:37:9d:51:b2:36:b5:89:48:
45:5e:8c:1a:2f:89:ca:ba:da:28:38:e5:ac:80:78:46:ba:a8:
11:6e:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:38 2025 by rpki-client