Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m_q-FvWPaeYopRoqgpKMHVoKOPk.roa
File: m_q-FvWPaeYopRoqgpKMHVoKOPk.roa (raw, json)
Hash identifier: CTdT6xsgcr+iCweGn1hJz1yQOHDYW+MeJhE79xT+HuA=
Subject key identifier: 9B:FA:BE:16:F5:8F:69:E6:28:A5:1A:2A:82:92:8C:1D:5A:0A:38:F9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195961FA11162B51B560D2E8FB46E3148F9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m_q-FvWPaeYopRoqgpKMHVoKOPk.roa
Signing time: Fri 14 Mar 2025 19:26:50 +0000
ROA not before: Fri 14 Mar 2025 19:26:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 2.59.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 06:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:1f:a1:11:62:b5:1b:56:0d:2e:8f:b4:6e:31:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 14 19:26:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bfabe16f58f69e628a51a2a82928c1d5a0a38f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:2a:61:23:ca:01:90:58:22:a0:36:c7:ef:
4b:c0:32:52:e5:9c:e3:a3:4c:00:4d:99:87:23:a2:
fd:1a:69:f3:67:1b:2f:92:a0:6d:d1:a2:b2:cd:46:
fc:71:bc:74:62:d2:79:ed:92:79:bf:7e:84:71:17:
58:b7:18:b0:7c:4a:19:1f:da:d4:06:26:5a:ae:e8:
92:df:57:46:e4:cd:de:f1:ea:2b:3e:c1:22:ac:b2:
c4:8b:b7:ee:94:de:9e:02:c1:a5:5e:ab:42:3d:29:
a8:74:a2:51:44:58:36:ba:cd:7a:82:df:0c:0a:fa:
02:8d:e2:8d:43:dc:07:7a:e8:9d:97:3c:14:65:41:
43:43:f0:9a:ae:00:b1:32:98:8f:b7:14:c7:ea:77:
17:c9:34:35:2c:4a:d2:e6:19:e7:97:2b:c2:b8:78:
c4:64:1e:7a:d4:2c:62:f3:18:a0:a2:06:ed:1d:63:
9b:5e:95:24:db:cd:f7:9a:35:68:e7:e4:5e:ef:d7:
b9:88:34:14:98:bf:e1:87:49:5c:65:a8:45:f6:d3:
f2:9e:b0:13:b5:a3:55:e4:4c:2f:1c:3a:82:da:1a:
aa:77:9c:78:07:98:4b:56:8f:b7:21:8f:30:a1:6e:
f4:74:fb:3f:5e:b8:72:b1:56:a9:06:e1:16:94:5f:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:BE:16:F5:8F:69:E6:28:A5:1A:2A:82:92:8C:1D:5A:0A:38:F9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m_q-FvWPaeYopRoqgpKMHVoKOPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.66.230.0/24
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
93.123.85.0/24
94.103.125.0/24
141.98.6.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1f:52:31:e6:6e:42:21:47:f9:2c:ff:26:5e:e0:0c:df:b2:
5f:4b:4f:87:0e:f4:78:19:9b:2c:28:58:1e:06:e8:72:63:88:
46:90:5d:2e:31:1e:04:a9:68:ef:4b:af:8f:4a:0a:fd:05:f9:
d7:6d:72:69:3b:82:11:31:da:f6:8d:27:ec:9e:c4:e4:61:8c:
ef:1b:fe:59:81:13:05:ef:3a:30:be:6b:58:7d:b5:81:a0:60:
0c:e5:a0:a6:95:b6:20:92:21:e4:61:a3:3a:90:fa:de:fa:c3:
fa:d6:66:3b:27:7d:59:f5:4c:3c:e8:dc:48:4f:d3:b3:23:18:
e0:0b:a9:20:bc:db:df:f1:32:53:25:ee:e1:d9:3e:a5:e4:4b:
d4:51:d3:c1:40:2c:69:6d:a6:b4:07:bb:7f:13:96:83:63:87:
e6:38:a9:e5:34:f9:72:bc:c7:91:0e:64:5a:48:25:2a:d8:e9:
66:a4:3b:ac:70:f7:66:a5:a7:f1:31:7e:1b:a9:e8:b1:db:7a:
cb:aa:a9:37:87:7e:2c:bb:aa:84:d9:65:d4:b1:63:a4:f0:cc:
07:f9:6f:e2:6f:f5:6d:b4:54:e1:57:f7:75:50:d1:c0:1e:2d:
47:25:e7:ad:2c:ba:41:5b:c1:e6:51:1a:23:58:43:be:85:cf:
e7:bf:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:36:00 2025 by rpki-client