Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kKteuLNmhYxWYP_PZ7hKmOCqcMA.roa
File: kKteuLNmhYxWYP_PZ7hKmOCqcMA.roa (raw, json)
Hash identifier: giIW0rT+xITithJ/ybODOtitrNtzDpzrASMg8KBX4L4=
Subject key identifier: 90:AB:5E:B8:B3:66:85:8C:56:60:FF:CF:67:B8:4A:98:E0:AA:70:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245FFCE9A344D8E05D01870C8D35C4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kKteuLNmhYxWYP_PZ7hKmOCqcMA.roa
Signing time: Thu 02 Jan 2025 17:51:00 +0000
ROA not before: Thu 02 Jan 2025 17:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 12:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5f:fc:e9:a3:44:d8:e0:5d:01:87:0c:8d:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ab5eb8b366858c5660ffcf67b84a98e0aa70c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:46:93:03:31:26:fd:20:5d:aa:34:a6:2e:
cd:cc:a6:56:7f:2f:b6:12:40:bd:8b:2b:5f:2c:08:
51:ba:a0:09:91:d8:3c:ee:f3:31:6e:5a:17:e7:5b:
98:ce:ad:45:17:bb:2c:7c:a9:37:8c:83:b0:6d:bf:
47:0b:fc:d4:95:7c:71:92:89:09:50:72:9a:f1:89:
b4:e2:5d:34:fb:89:34:92:8c:69:ea:5d:bd:50:ea:
9e:f1:59:c3:42:d8:05:d0:2d:f4:1f:a9:da:e7:10:
98:69:bb:b7:89:e6:99:57:1f:b5:bf:45:3b:d5:0d:
ed:07:70:d4:54:63:3a:23:ab:d4:9c:14:41:75:2a:
ed:57:84:0f:ff:60:94:77:9c:52:a2:fa:a3:e2:f3:
49:e9:df:9e:3b:83:fd:4e:a1:5b:e6:4a:66:66:32:
67:18:20:f1:b8:da:7a:a5:94:38:b1:7e:7b:23:d9:
b4:49:c2:44:b8:22:2f:ef:bc:0e:f5:44:5e:6c:3a:
73:ee:4a:a1:2f:b5:5b:03:c1:c0:81:37:96:57:9e:
94:4f:66:ca:14:ae:4f:52:15:50:8f:6c:3b:da:65:
3c:35:e2:32:7a:ae:7f:06:b0:7f:4a:31:85:1c:2e:
be:90:0d:de:a3:79:ee:df:ef:78:83:22:7b:79:74:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:5E:B8:B3:66:85:8C:56:60:FF:CF:67:B8:4A:98:E0:AA:70:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kKteuLNmhYxWYP_PZ7hKmOCqcMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.149.235.0/24
87.120.88.0/24
109.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:88:ab:23:bf:ec:51:e4:9b:21:f6:01:23:0e:c6:b7:94:e3:
f8:96:84:6f:bf:78:00:1b:ec:8c:ba:c6:85:01:80:bb:23:35:
f4:77:4e:16:95:bb:07:81:9d:f0:40:6c:39:62:a4:77:f2:a7:
d6:14:02:54:92:61:b0:78:73:29:b1:9b:17:ff:e5:88:5e:48:
5b:4d:c4:7c:fd:e6:5a:7b:49:f3:92:41:01:20:08:b7:35:5d:
2e:ad:45:43:a9:ac:f1:ed:cf:5f:46:06:21:16:14:05:ba:48:
39:d8:82:37:43:28:6b:f3:de:bc:48:3d:e0:ef:79:06:6e:0b:
bf:8e:2e:c4:46:c0:c5:85:0e:e2:87:c9:85:d4:c1:70:0a:2a:
1e:56:f3:c0:78:02:54:e7:a6:a1:2a:eb:0b:ed:ae:89:da:00:
6b:f4:f3:7e:bd:6a:ba:c1:b0:d3:d0:3b:9b:93:b9:08:a8:89:
9d:40:67:4b:ed:ec:d5:a5:ca:c8:bc:f1:dd:1a:ea:96:1d:3b:
e5:9b:88:b9:0f:4a:27:21:0d:59:4b:27:9a:f8:be:3e:3b:e9:
6b:54:82:09:0e:91:95:97:f5:a5:90:72:d4:30:41:30:71:45:
49:d1:04:fa:3d:ca:99:db:9e:a0:95:99:70:b2:d1:bf:76:80:
05:48:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:33:29 2025 by rpki-client