Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/mKfCtdG59LghL0OxmEgm75XH2_A.roa
File: mKfCtdG59LghL0OxmEgm75XH2_A.roa (raw, json)
Hash identifier: lpRr7Y2BnABGemMJAl8ybXK82UgUmGO3Pun7dawk5WI=
Subject key identifier: 98:A7:C2:B5:D1:B9:F4:B8:21:2F:43:B1:98:48:26:EF:95:C7:DB:F0
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 01950641124D9B1D3313673E755C58BF2AA5
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/mKfCtdG59LghL0OxmEgm75XH2_A.roa
Signing time: Fri 14 Feb 2025 20:58:02 +0000
ROA not before: Fri 14 Feb 2025 20:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
91.246.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 14:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:06:41:12:4d:9b:1d:33:13:67:3e:75:5c:58:bf:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Feb 14 20:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98a7c2b5d1b9f4b8212f43b1984826ef95c7dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:40:06:8a:56:19:8a:97:f7:3f:1f:eb:18:
14:24:03:37:d7:3a:c6:d4:1a:09:75:ba:f3:5c:13:
8c:a1:9e:67:98:c6:fd:35:7a:44:88:7d:b8:e3:4e:
38:63:59:fa:50:1c:6a:45:3b:76:cb:16:8b:c7:89:
a0:ec:d3:63:d5:08:e0:54:64:d1:4b:a3:f2:00:ee:
17:62:12:be:b3:9a:95:ff:f0:c7:05:69:fc:ae:c4:
fc:f4:7a:11:45:37:0e:72:e8:a9:b1:69:b8:62:75:
21:86:86:7b:94:8b:8c:42:05:0a:14:72:3d:77:d8:
be:3f:59:56:d6:ba:b1:a5:56:98:dc:a5:b0:29:a7:
15:95:eb:8c:0b:9f:88:15:ed:7a:a1:54:93:c4:ea:
0d:be:3b:a0:40:48:5a:a8:37:5a:75:db:a9:6f:59:
d3:a5:bb:83:21:75:11:09:5b:2d:9d:a4:a7:49:8e:
c6:fc:d7:3d:71:47:24:db:98:17:4c:10:d8:8d:62:
62:e5:f2:0f:53:f5:1c:b8:02:9f:31:f7:1d:d7:30:
f1:0f:f0:e0:b4:03:a1:a1:1e:ef:ab:62:d4:94:24:
51:a5:2d:3a:23:b4:88:a6:19:9d:b1:12:27:ba:81:
dd:09:9b:b5:89:52:81:d5:ec:c0:17:aa:d0:3e:16:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:C2:B5:D1:B9:F4:B8:21:2F:43:B1:98:48:26:EF:95:C7:DB:F0
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/mKfCtdG59LghL0OxmEgm75XH2_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
45.159.15.0/24
91.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:b2:70:55:34:f5:b7:ea:34:9f:0c:c4:ca:2d:da:95:67:
31:41:e5:2d:78:8a:86:bd:fa:22:af:33:c7:9c:d7:6f:87:90:
24:68:db:9b:0f:92:ff:dd:0f:03:9b:fc:0d:6c:72:f3:cc:7f:
f8:d7:a1:79:a0:64:08:60:38:a7:2c:d4:7a:ec:b4:73:48:fc:
b8:f9:94:29:9e:a4:37:7b:4e:3f:69:93:df:a7:b6:c8:7e:10:
77:99:48:f0:09:4f:cc:90:0e:b4:be:b2:2f:38:4e:4a:48:fe:
5d:68:34:b1:2d:86:df:ac:91:94:4a:ac:9e:24:ba:f6:9d:f3:
86:33:d2:b2:9a:a4:cf:50:ae:2d:1b:06:bb:50:bb:d5:5b:86:
db:52:cc:89:31:80:5f:2e:50:33:5d:7e:bc:05:ac:1f:d9:ad:
fe:ad:78:7f:06:fe:42:1f:04:df:d7:70:70:d7:f9:36:f6:10:
7c:ab:9e:8d:23:45:5b:17:a3:52:23:f5:68:51:f6:b4:57:71:
fc:b9:18:51:82:02:9d:4a:05:5d:15:c5:7c:ee:e8:b1:92:6b:
93:ae:34:10:fd:84:99:46:12:61:64:53:3c:0d:4c:1b:07:ef:
a0:b3:37:02:93:50:e9:27:d8:8f:ba:e8:9c:8f:7f:a5:22:ec:
de:5f:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:18 2025 by rpki-client