Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mzLPI6VDg6TSo0ScRMoQvJLG7Sg.roa
File: mzLPI6VDg6TSo0ScRMoQvJLG7Sg.roa (raw, json)
Hash identifier: Odg6hjaY1eIe0W6hJFiKCGrms6Y/Xw6ESujVsqTz3BM=
Subject key identifier: 9B:32:CF:23:A5:43:83:A4:D2:A3:44:9C:44:CA:10:BC:92:C6:ED:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282476C6FDFC1C91473E70987743774D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mzLPI6VDg6TSo0ScRMoQvJLG7Sg.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 06:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:76:c6:fd:fc:1c:91:47:3e:70:98:77:43:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b32cf23a54383a4d2a3449c44ca10bc92c6ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:da:86:90:70:b4:47:f4:cd:4b:13:28:ef:
cf:37:6d:7a:59:36:75:bb:88:47:cd:84:04:d7:36:
be:64:82:88:01:4d:59:7d:13:05:b4:87:6f:63:a9:
32:11:fa:a4:e3:95:3c:e3:9e:8a:b6:e2:2e:19:76:
c8:5a:16:e6:06:75:f1:8f:bc:65:7f:b3:35:e6:fa:
a9:08:06:ef:18:84:5a:18:b2:75:67:c3:7e:d4:55:
be:34:cd:70:35:10:c5:04:62:c1:66:d7:7f:b5:72:
57:69:88:df:20:3b:87:21:af:cb:26:1a:10:8b:99:
2e:2c:e2:d2:a0:db:7f:28:dd:f3:a9:98:6d:38:4e:
d5:9f:c1:b5:8e:15:39:79:c4:60:09:cc:f0:27:0e:
bd:69:68:2b:54:32:11:e7:ce:8f:76:48:97:c2:6c:
ab:e8:68:7c:af:24:c4:2a:1a:b0:44:93:f6:04:39:
8d:95:8c:86:01:c1:50:c5:a1:72:92:88:f6:74:4a:
1e:6d:0f:a6:27:6d:b8:71:f3:28:7b:fc:73:54:bf:
04:76:76:c4:66:3a:84:6e:5a:51:59:e5:63:48:14:
65:a9:43:1d:0c:5b:16:21:8b:2b:55:5d:fa:a2:10:
bd:11:37:8c:8b:0c:79:72:85:e2:5d:ba:98:23:ff:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:CF:23:A5:43:83:A4:D2:A3:44:9C:44:CA:10:BC:92:C6:ED:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mzLPI6VDg6TSo0ScRMoQvJLG7Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
93.123.30.0/24
94.125.100.0/23
109.206.241.0/24
212.87.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:42:e3:39:01:ef:f1:7e:fe:f2:df:e2:9e:49:0a:26:a0:34:
5e:5b:f1:ea:3c:42:f9:a2:3f:5b:77:c8:d6:6a:cf:8e:88:b5:
73:17:12:23:10:db:a6:fb:70:a9:7a:2d:09:65:c2:c6:f9:97:
fa:52:cc:fb:7c:7d:0e:76:f1:77:91:56:1f:32:4a:1b:0b:fd:
5e:20:49:77:9d:2c:f5:ee:8f:69:d9:c4:8c:f9:d3:b9:b0:c0:
f6:17:a6:b4:9f:92:93:b9:be:51:54:fa:ed:27:7c:17:9c:ae:
6b:b4:4a:7b:84:4b:d9:9f:00:b9:fb:bc:09:83:1f:e5:5f:5b:
80:92:9f:aa:32:c4:3c:ac:7c:71:37:3b:5c:70:e5:44:6a:32:
af:05:a5:85:4a:f4:f2:f0:93:c2:f1:d7:13:cd:26:9c:f3:9c:
be:5e:f7:c8:a9:38:4a:2f:dc:ea:f7:a6:62:38:40:34:71:77:
b2:11:2f:94:25:08:ef:00:53:e4:e8:29:ed:1f:d4:d3:97:1d:
cd:ef:24:f5:ea:7d:1d:d8:a9:30:3e:da:c5:b8:44:90:a1:18:
a8:bb:3c:a6:25:fc:62:f1:59:3e:47:0a:44:7d:3b:c5:86:e4:
ad:53:f8:10:f7:ad:36:d7:6c:50:eb:6b:f8:95:0d:0f:e1:ab:
db:8a:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:17 2025 by rpki-client