Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moDvc0OlydZg7pmYZ7Fc-0lqLMg.roa
File: moDvc0OlydZg7pmYZ7Fc-0lqLMg.roa (raw, json)
Hash identifier: 4I4E6AeOY07bG456by4hPIcwHnplu5vRX8rU+8Rboco=
Subject key identifier: 9A:80:EF:73:43:A5:C9:D6:60:EE:99:98:67:B1:5C:FB:49:6A:2C:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A941B3D604DFF25A4B9180A87A094084
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moDvc0OlydZg7pmYZ7Fc-0lqLMg.roa
Signing time: Tue 18 Mar 2025 12:36:50 +0000
ROA not before: Tue 18 Mar 2025 12:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 12:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:41:b3:d6:04:df:f2:5a:4b:91:80:a8:7a:09:40:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 12:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a80ef7343a5c9d660ee999867b15cfb496a2cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:16:3c:38:c2:9f:1b:1e:0e:9b:d9:75:9b:
f2:e7:e9:f2:d1:0e:c7:3f:c2:54:50:1a:46:39:33:
dd:f1:72:b0:3b:71:f9:ae:cf:d7:20:25:92:a4:7b:
35:a5:9f:4d:95:bb:80:8e:2e:c3:34:b7:ce:1e:d1:
de:e2:87:9d:08:8f:40:ab:6c:67:38:ca:31:59:be:
ed:0d:c0:8d:94:2e:5e:1b:36:91:a6:00:30:29:0a:
a7:9a:97:64:63:9a:ee:b9:21:67:9e:3d:d9:fc:8b:
e5:63:5c:ac:56:d3:91:76:8f:73:ce:78:a2:27:48:
fe:e2:3c:f3:d6:ad:df:84:94:97:c2:00:3d:48:d1:
c5:d4:65:7a:b7:30:4a:1e:28:da:a7:1b:86:3f:48:
2a:bf:d1:37:af:46:c3:b4:f7:e8:14:a1:57:6c:7c:
df:e1:d0:0f:2d:b0:b9:f7:48:d6:55:8f:29:09:f4:
d6:28:45:a7:3f:94:79:a7:1e:84:28:5e:a7:1c:2d:
a5:50:64:b4:60:66:2f:25:a0:1e:f8:cf:2e:be:36:
59:10:5a:38:11:84:af:47:80:6d:a0:90:bc:c6:eb:
39:c9:27:c1:de:c7:84:d7:4c:0d:a6:ee:7b:57:32:
f5:c6:92:2a:bc:31:18:83:a2:32:04:b6:19:54:b2:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:EF:73:43:A5:C9:D6:60:EE:99:98:67:B1:5C:FB:49:6A:2C:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moDvc0OlydZg7pmYZ7Fc-0lqLMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.128.96.0/24
87.120.33.0/24
87.121.38.0/24
87.121.58.0/24
94.103.127.0/24
94.156.2.0/24
94.156.79.0/24
94.156.113.0/24
94.156.253.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b7:b6:b8:ef:68:49:25:29:b5:8e:56:e7:c0:bb:b1:68:94:
0a:81:e4:92:0a:04:c1:5a:d3:f9:ec:ba:b7:5b:c3:25:f9:fc:
2e:6d:1d:a6:0b:fd:10:ad:b8:79:8e:10:6d:ce:c9:42:ad:56:
bc:fb:a6:bf:8b:f0:32:68:77:6f:e6:9c:a7:6b:61:7d:a3:38:
5a:90:d2:7d:34:4f:0d:5c:70:f2:3e:d2:c4:fb:1b:4d:83:c1:
08:93:60:e8:bf:49:d1:12:04:e8:9c:05:c8:8a:9d:e6:bb:6e:
dc:f0:32:97:16:1a:85:10:ba:48:24:43:4b:c0:d6:83:d2:c3:
6f:b4:71:d3:2d:1f:56:89:5e:83:43:22:d9:48:5b:ae:08:23:
7a:02:c0:cb:ca:63:e8:c2:f5:1c:68:c9:d6:9e:6f:ef:0f:2d:
76:d2:66:d7:42:2a:4a:d5:b1:ff:51:f9:75:bf:a1:97:9d:bd:
75:ba:e0:66:d1:e2:8a:70:fd:29:4c:cb:49:06:df:3c:e1:f1:
ff:74:94:a7:ef:6c:df:74:a8:f6:bf:ab:6b:e8:cb:a7:e1:01:
1b:b7:88:5c:52:2b:a7:51:18:8b:55:64:fc:8a:ca:77:c6:32:
3d:dc:35:ff:d1:c7:e4:6f:2a:79:b5:d8:71:ce:5c:b0:8e:d1:
1d:b2:a3:b9
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZWpQbPWBN/yWkuRgKh6CUCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzE4MTIzNjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTgwZWY3MzQzYTVjOWQ2NjBlZTk5OTg2N2IxNWNmYjQ5NmEyY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tkWPDjCnxseDpvZdZvy5+ny0Q7H
P8JUUBpGOTPd8XKwO3H5rs/XICWSpHs1pZ9NlbuAji7DNLfOHtHe4oedCI9Aq2xn
OMoxWb7tDcCNlC5eGzaRpgAwKQqnmpdkY5ruuSFnnj3Z/IvlY1ysVtORdo9zznii
J0j+4jzz1q3fhJSXwgA9SNHF1GV6tzBKHijapxuGP0gqv9E3r0bDtPfoFKFXbHzf
4dAPLbC590jWVY8pCfTWKEWnP5R5px6EKF6nHC2lUGS0YGYvJaAe+M8uvjZZEFo4
EYSvR4BtoJC8xus5ySfB3seE10wNpu57VzL1xpIqvDEYg6IyBLYZVLJqhQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFJqA73NDpcnWYO6ZmGexXPtJaizIMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbW9EdmMwT2x5ZFpnN3BtWVo3RmMtMGxxTE1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALQz/AwQA
LYBgAwQAV3ghAwQAV3kmAwQAV3k6AwQAXmd/AwQAXpwCAwQAXpxPAwQAXpxxAwQA
Xpz9AwQAjWIEMA0GCSqGSIb3DQEBCwUAA4IBAQCmt7a472hJJSm1jlbnwLuxaJQK
geSSCgTBWtP57Lq3W8Ml+fwubR2mC/0Qrbh5jhBtzslCrVa8+6a/i/AyaHdv5pyn
a2F9ozhakNJ9NE8NXHDyPtLE+xtNg8EIk2Dov0nREgTonAXIip3mu27c8DKXFhqF
ELpIJENLwNaD0sNvtHHTLR9WiV6DQyLZSFuuCCN6AsDLymPowvUcaMnWnm/vDy12
0mbXQipK1bH/Ufl1v6GXnb11uuBm0eKKcP0pTMtJBt884fH/dJSn72zfdKj2v6tr
6Mun4QEbt4hcUiunURiLVWT8isp3xjI93DX/0cfkbyp5tdhxzlywjtEdsqO5
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:30 2025 by rpki-client