Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Pzh63teRudv7VSFBIF23FOI1dUo.roa
File: Pzh63teRudv7VSFBIF23FOI1dUo.roa (raw, json)
Hash identifier: 4F5szmeruakX6+bzdDjuhPkI9cHaIjPXgoqKQ8LCxL4=
Subject key identifier: 3F:38:7A:DE:D7:91:B9:DB:FB:55:21:41:20:5D:B7:14:E2:35:75:4A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191D9D48383C2BB8C7BBB8DCBF3270D47A8
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Pzh63teRudv7VSFBIF23FOI1dUo.roa
Signing time: Tue 10 Sep 2024 02:47:48 +0000
ROA not before: Tue 10 Sep 2024 02:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142578
IP address blocks: 45.93.18.0/24 maxlen: 24
45.93.19.0/24 maxlen: 24
45.156.223.0/24 maxlen: 24
85.92.113.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
193.107.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 03:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d9:d4:83:83:c2:bb:8c:7b:bb:8d:cb:f3:27:0d:47:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 10 02:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f387aded791b9dbfb552141205db714e235754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:9c:21:05:71:14:53:83:f8:dd:d8:67:f5:
cf:2f:67:f9:2d:94:3d:a0:35:2c:e7:d6:87:b7:44:
9e:38:49:90:d4:d2:75:8f:0e:5a:ad:75:ea:f4:d8:
4c:f3:3f:54:b7:5a:5e:de:a2:41:02:a9:00:f5:6b:
8d:32:62:48:e5:5f:63:ab:c4:3c:0a:ce:98:52:a9:
bf:2a:fa:07:a5:d7:b6:30:1f:ef:bc:5e:d8:9e:f7:
35:27:c3:4e:a7:c1:1e:e4:2b:44:70:73:6c:1a:1b:
6a:e9:c0:20:18:78:c4:2b:79:15:1f:01:97:ab:c3:
88:7e:ac:d6:9a:fd:3b:a6:53:0a:2b:ad:97:b9:34:
43:a8:c1:75:2d:ca:e8:3b:06:50:c6:ff:ae:e7:9d:
38:95:a0:ed:21:80:af:6d:4d:f8:79:8b:c0:1d:99:
c8:f9:44:73:0c:1f:51:f2:cb:11:78:b6:50:f4:9f:
43:a2:af:34:2a:a7:70:81:fd:31:b2:e1:8f:b1:71:
8c:fb:86:59:70:86:44:9d:f5:f3:52:5e:42:cb:26:
34:25:37:0f:8d:42:33:75:7e:2e:ee:64:17:b5:3e:
39:a6:17:9e:ec:1c:a1:23:08:af:60:09:d6:e4:0e:
7a:c5:84:ce:8d:1b:84:ae:04:97:1a:9c:db:d8:e5:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:7A:DE:D7:91:B9:DB:FB:55:21:41:20:5D:B7:14:E2:35:75:4A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Pzh63teRudv7VSFBIF23FOI1dUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.18.0/23
45.156.223.0/24
85.92.113.0/24
193.107.217.0/24
193.107.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a2:90:fa:19:40:48:7f:eb:5c:4c:62:92:e7:36:10:30:79:
14:63:66:21:d7:0d:53:59:6a:7b:13:5f:84:a1:08:c7:da:b7:
ae:74:47:b3:36:5d:11:0c:2b:50:ea:f8:c0:3f:fa:44:73:21:
ea:69:42:34:e3:9e:0d:d3:96:ef:27:fa:94:81:5b:dc:fe:4e:
d8:f7:1e:26:ef:06:d7:aa:07:d4:5a:14:9d:9b:24:6d:07:44:
be:25:ee:fe:27:45:3b:dd:84:e4:c9:cb:fb:12:36:08:32:27:
57:34:8b:17:cd:0f:fc:df:d0:9b:4f:ba:0a:9d:ba:da:46:62:
ab:7b:2c:45:a4:46:4d:07:6c:ec:21:b4:d8:49:c2:1c:61:88:
38:f3:7a:1f:89:e3:b4:e6:1b:7e:01:c9:bf:db:20:c3:6c:8c:
91:eb:36:a6:4f:f6:ff:17:d5:5c:d8:59:e1:c3:2c:8f:f8:c9:
3c:9f:54:09:d0:a3:ff:9a:4b:82:8a:fb:14:c5:e3:e3:3d:fd:
62:df:b7:8a:b0:17:2b:56:62:2b:70:f6:20:1e:8e:1f:f2:cb:
59:03:a0:5f:c1:de:1f:5a:23:ee:14:6a:1c:bc:69:41:e7:4b:
ff:93:c9:e4:fa:df:72:67:86:5e:e8:44:9b:53:76:83:6c:e9:
5f:22:fa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:48:12 2025 by rpki-client