Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zOHceiFzRWwVinWA0XtpOpPLwfc.roa
File: zOHceiFzRWwVinWA0XtpOpPLwfc.roa (raw, json)
Hash identifier: QpocXyqxSf8m24FniVAnenqoedjgBc/MHWDtHWuZHgA=
Subject key identifier: CC:E1:DC:7A:21:73:45:6C:15:8A:75:80:D1:7B:69:3A:93:CB:C1:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019380E4110C0B9A0CDBCCF299B20C391CBD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zOHceiFzRWwVinWA0XtpOpPLwfc.roa
Signing time: Sun 01 Dec 2024 06:24:10 +0000
ROA not before: Sun 01 Dec 2024 06:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.1.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:80:e4:11:0c:0b:9a:0c:db:cc:f2:99:b2:0c:39:1c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 1 06:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cce1dc7a2173456c158a7580d17b693a93cbc1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:7c:f6:61:75:c5:bd:ed:40:ba:e5:e0:76:
b0:1d:ac:3d:d6:45:fc:11:4e:4b:55:4a:ae:dc:2f:
e7:79:7c:53:cb:c5:b8:3b:f6:7d:8e:20:b9:85:46:
ba:e0:c5:b0:15:84:7f:46:94:c9:dd:fe:3d:2c:9c:
7e:cf:17:66:1c:8c:12:29:d6:07:38:34:18:85:28:
33:b9:ee:ba:a9:d7:ae:79:cf:10:ad:41:7e:04:b0:
03:da:d5:f0:dd:25:af:a0:f8:67:cc:35:64:75:53:
a3:b6:c4:4d:5e:43:ef:a2:5f:d1:37:79:74:96:b0:
3c:f6:70:c4:85:7f:b2:24:11:b8:00:01:06:11:28:
be:69:96:e7:8e:f9:57:3e:a2:f2:92:e9:81:22:00:
99:00:4c:92:4d:a8:87:6c:81:85:4f:f8:b4:58:91:
6e:13:a4:50:08:df:49:61:9f:72:06:52:00:55:45:
85:ff:19:0d:52:f9:f1:f8:e9:b1:4c:82:84:a2:d5:
bc:5f:7d:bb:84:77:b1:04:fa:a8:37:28:15:b9:70:
91:28:e8:55:7f:9b:39:1f:a0:33:e5:5f:41:ee:b2:
6b:2a:1b:e8:7c:76:76:e6:92:a0:4f:06:9f:c9:ed:
41:b0:f4:e0:98:74:e4:be:05:12:cd:02:57:8a:f4:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:DC:7A:21:73:45:6C:15:8A:75:80:D1:7B:69:3A:93:CB:C1:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zOHceiFzRWwVinWA0XtpOpPLwfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
95:10:5c:b0:5d:13:5a:13:dd:bf:25:ed:af:59:a4:1b:dc:aa:
75:e4:f1:0a:d5:0d:43:ad:4d:fd:1b:fb:49:2a:92:79:d1:0d:
9d:8d:f6:47:9b:53:68:65:a3:db:94:b2:bb:e3:78:df:18:e4:
55:d9:34:06:69:4b:9b:44:c4:e6:6e:d7:10:15:b6:91:56:72:
ab:93:92:37:0e:aa:03:1a:4d:71:49:b4:88:12:f4:71:ff:2f:
82:b1:a4:11:ef:97:0d:7b:d6:88:b7:b6:f3:49:90:10:c6:00:
d1:37:38:42:e6:d6:e8:86:20:c9:5b:14:c8:44:fd:19:c0:33:
1a:62:bb:92:f5:14:ee:a9:b3:24:be:c9:e1:df:a1:9b:63:75:
57:1b:e1:f2:91:a8:85:5f:e4:66:b1:62:ff:d8:f0:86:d5:5c:
d5:d1:47:91:ce:ca:e2:da:2b:37:a8:31:8f:36:f9:26:7a:07:
37:d7:e0:39:63:2a:12:74:a4:55:67:49:32:74:c6:66:5d:50:
13:d6:f3:e0:47:c4:e6:17:b3:b5:7d:43:8e:d8:4a:a7:57:12:
a4:fb:30:85:5a:03:5c:a9:da:e9:c8:4c:22:b7:ba:98:7c:d8:
46:fc:09:c3:51:ce:6e:09:4c:ee:51:f6:9e:7c:07:33:c9:30:
ca:f1:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:40:58 2025 by rpki-client