Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lMdFIbPGPNG2mkqPbyKXvRI8Ink.roa
File: lMdFIbPGPNG2mkqPbyKXvRI8Ink.roa (raw, json)
Hash identifier: 2bQe65O4/2/hwBlis4xSvJjQG08Yyxo2EB3DcNxmAvw=
Subject key identifier: 94:C7:45:21:B3:C6:3C:D1:B6:9A:4A:8F:6F:22:97:BD:12:3C:22:79
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBBB4094D1156F1D4934A1BC29EEBB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lMdFIbPGPNG2mkqPbyKXvRI8Ink.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203511
IP address blocks: 45.9.30.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 20:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bb:40:94:d1:15:6f:1d:49:34:a1:bc:29:ee:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94c74521b3c63cd1b69a4a8f6f2297bd123c2279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:03:de:ca:d6:c8:3e:4d:8f:0c:b6:48:de:
b9:7f:b0:02:fb:2f:68:f9:c4:fd:d7:af:73:25:bc:
55:e6:0d:5e:ac:91:9d:8e:f3:ad:5d:28:29:36:90:
eb:fa:c0:57:68:dd:47:84:3b:4c:56:13:05:a5:a5:
ca:cd:4c:49:41:5c:0c:64:5a:d7:3e:1d:a9:22:de:
16:43:27:62:06:d1:10:f9:a5:3e:2f:ae:a9:f3:b2:
1b:8c:7f:bb:13:6a:c2:a9:69:86:53:8a:17:e8:95:
21:c7:4d:b5:d2:3c:fb:50:78:47:ba:88:c5:56:81:
9c:58:70:11:1b:c0:86:70:95:5a:e0:16:64:88:2f:
83:bf:a1:cf:08:2e:f1:f5:78:42:20:ca:d1:a7:c1:
85:bd:a5:2a:51:ed:6a:7f:4f:5e:1d:b2:a7:35:e9:
3c:c4:3d:5d:d8:aa:39:33:d9:fe:87:da:1a:ad:59:
81:20:59:9e:23:46:2a:a0:27:e5:aa:e4:ae:34:9d:
bb:7e:1a:55:81:84:dc:40:f6:4e:53:66:1c:ad:52:
81:b8:b7:87:96:85:e0:23:4c:ab:6e:28:c2:95:23:
a8:5c:41:bc:95:e1:b6:1b:6a:0e:54:b9:16:8e:79:
60:d3:9c:2c:31:fa:06:2c:de:68:d5:d1:34:9b:a8:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:45:21:B3:C6:3C:D1:B6:9A:4A:8F:6F:22:97:BD:12:3C:22:79
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lMdFIbPGPNG2mkqPbyKXvRI8Ink.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.139.0/24
45.94.171.0/24
45.151.2.0/24
77.83.37.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:69:c4:58:48:7f:07:af:b0:8f:bc:8a:e7:da:63:f4:ad:af:
4c:97:57:6b:de:7c:1b:d3:9e:b1:58:79:f9:4f:3c:55:33:09:
4a:41:6e:35:ba:f9:41:85:16:f6:ae:d6:c4:91:e8:c0:e4:c6:
72:29:a6:43:ba:56:13:1f:7a:15:39:36:44:0b:22:4b:9f:0d:
64:7b:75:1c:a5:f3:20:8d:5a:92:25:49:69:dd:d4:fc:71:b5:
25:86:a6:2e:38:14:d3:75:5a:fa:6f:e2:de:7a:ad:6f:b5:0a:
65:37:1f:30:d2:5f:e5:e3:3e:72:f1:17:70:48:da:9e:6d:22:
3b:3d:45:7c:3f:10:7e:e3:02:25:3e:ce:65:4a:54:95:84:61:
d3:d1:d1:fb:a9:f9:76:cf:5a:f9:0c:38:a7:ea:89:ff:40:f5:
74:d4:59:fd:26:de:db:8f:db:5d:be:3c:41:b7:b8:34:2c:4f:
ee:5a:8a:02:60:0f:f0:34:6b:84:b4:94:ae:6d:ff:48:6a:dd:
0f:65:0a:64:06:06:66:49:44:f5:90:16:c0:e6:c0:4d:16:e3:
dd:ef:72:70:f6:88:2b:93:9f:07:77:a4:73:e9:a4:eb:bd:7e:
d9:ea:bb:bc:30:38:ba:7d:2e:18:d9:71:32:f6:4b:ac:17:21:
0f:59:a2:70
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQi+7tAlNEVbx1JNKG8Ke67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGM3NDUyMWIzYzYzY2QxYjY5YTRhOGY2ZjIyOTdiZDEyM2MyMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7sD3srWyD5Njwy2SN65f7AC+y9o
+cT9169zJbxV5g1erJGdjvOtXSgpNpDr+sBXaN1HhDtMVhMFpaXKzUxJQVwMZFrX
Ph2pIt4WQydiBtEQ+aU+L66p87IbjH+7E2rCqWmGU4oX6JUhx0210jz7UHhHuojF
VoGcWHARG8CGcJVa4BZkiC+Dv6HPCC7x9XhCIMrRp8GFvaUqUe1qf09eHbKnNek8
xD1d2Ko5M9n+h9oarVmBIFmeI0YqoCflquSuNJ27fhpVgYTcQPZOU2YcrVKBuLeH
loXgI0yrbijClSOoXEG8leG2G2oOVLkWjnlg05wsMfoGLN5o1dE0m6hiqQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJTHRSGzxjzRtppKj28il70SPCJ5MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbE1kRkliUEdQTkcybWtxUGJ5S1h2Ukk4SW5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQkeAwQA
LViLAwQALV6rAwQALZcCAwQATVMlAwQAwg80MA0GCSqGSIb3DQEBCwUAA4IBAQC9
acRYSH8Hr7CPvIrn2mP0ra9Ml1dr3nwb056xWHn5TzxVMwlKQW41uvlBhRb2rtbE
kejA5MZyKaZDulYTH3oVOTZECyJLnw1ke3UcpfMgjVqSJUlp3dT8cbUlhqYuOBTT
dVr6b+Leeq1vtQplNx8w0l/l4z5y8RdwSNqebSI7PUV8PxB+4wIlPs5lSlSVhGHT
0dH7qfl2z1r5DDin6on/QPV01Fn9Jt7bj9tdvjxBt7g0LE/uWooCYA/wNGuEtJSu
bf9Iat0PZQpkBgZmSUT1kBbA5sBNFuPd73Jw9ogrk58Hd6Rz6aTrvX7Z6ru8MDi6
fS4Y2XEy9kusFyEPWaJw
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:18:54 2025 by rpki-client