Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/f3r_IdTC77il_5nErMW6CsH2ZdM.roa
File: f3r_IdTC77il_5nErMW6CsH2ZdM.roa (raw, json)
Hash identifier: We88Vl0c50RB1cSeYaSuIHlTH5vLVTgpMFkrvwe4c9A=
Subject key identifier: 7F:7A:FF:21:D4:C2:EF:B8:A5:FF:99:C4:AC:C5:BA:0A:C1:F6:65:D3
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0194DACABA1033A770A8E65DF3517B9A0843
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/f3r_IdTC77il_5nErMW6CsH2ZdM.roa
Signing time: Thu 06 Feb 2025 10:25:06 +0000
ROA not before: Thu 06 Feb 2025 10:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203936
IP address blocks: 45.148.72.0/24 maxlen: 24
45.148.73.0/24 maxlen: 24
45.148.74.0/23 maxlen: 24
45.148.74.0/24 maxlen: 24
45.148.75.0/24 maxlen: 24
109.205.136.0/22 maxlen: 22
185.118.188.0/22 maxlen: 24
185.128.60.0/22 maxlen: 22
185.237.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 18:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:ca:ba:10:33:a7:70:a8:e6:5d:f3:51:7b:9a:08:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Feb 6 10:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7aff21d4c2efb8a5ff99c4acc5ba0ac1f665d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:94:f8:5b:ae:84:a0:9c:66:ac:8d:29:1c:
6b:ef:44:f7:21:bd:4d:96:82:3c:90:19:9c:b3:f7:
a0:05:ac:8d:9a:e2:8f:dd:30:52:e7:a7:c6:f0:55:
de:bb:e6:65:3a:eb:97:d1:8b:d1:7f:74:b8:ec:38:
fb:65:f0:e6:61:12:b3:37:1f:b4:69:ae:50:f7:f7:
30:55:4f:59:2b:36:d6:4e:9c:1e:2c:33:a9:a3:89:
ad:25:ff:67:e1:0a:c6:1c:3f:ef:4d:24:1c:65:f9:
05:a2:19:29:3c:82:47:e9:4c:53:4c:af:13:9b:92:
46:59:67:c2:28:f0:9e:47:ee:ae:70:d7:51:0b:db:
14:6e:bf:82:9e:8e:44:bd:df:be:1f:8f:eb:3b:08:
7c:1f:f8:f9:18:80:ce:4b:a9:14:b3:a4:9d:d1:fa:
3a:d6:a4:53:7b:f9:63:10:33:ac:8b:28:38:09:cb:
2e:49:ad:3e:78:30:0f:10:26:46:4a:b1:0c:c4:0e:
55:0f:fa:92:70:ee:b4:e2:fd:26:93:43:68:c8:df:
1f:f3:9c:4f:3d:91:3e:38:16:d3:56:13:62:78:53:
c4:a8:3d:7d:71:24:ff:7f:c0:ac:5d:7c:a9:30:99:
78:56:40:03:ab:bb:f1:85:bc:88:0f:0f:28:23:5c:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:FF:21:D4:C2:EF:B8:A5:FF:99:C4:AC:C5:BA:0A:C1:F6:65:D3
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/f3r_IdTC77il_5nErMW6CsH2ZdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.72.0/22
109.205.136.0/22
185.118.188.0/22
185.128.60.0/22
185.237.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ed:8e:06:9a:7c:b0:a2:58:fb:96:2c:2e:bf:ff:2e:db:3a:
d5:0f:8e:c8:00:91:14:0f:41:2e:ac:cd:48:8c:e4:bc:4b:9f:
9f:d2:21:c4:8a:08:7d:0c:21:17:7f:db:44:44:80:99:ae:a7:
d6:a2:2d:7c:8a:7b:4b:97:23:50:a5:90:24:f1:ac:9c:a9:13:
b4:3d:fb:83:8a:7a:b1:35:b0:29:44:44:1e:be:f3:6a:34:c4:
30:59:67:d1:50:1b:bb:89:d5:5b:ba:ee:97:cb:09:5f:eb:51:
6b:fe:b6:48:ad:bc:f9:b9:9c:d6:4e:54:51:6e:68:3a:e1:91:
3e:30:67:d6:6a:6c:18:f9:cc:b4:f1:1b:a1:8f:9c:db:11:92:
c7:92:fc:32:91:d3:20:09:73:df:86:d2:47:8e:06:5e:4b:99:
be:c7:a7:a6:bf:fe:2e:b5:54:3e:4b:ee:f1:04:e6:6d:62:7d:
05:3d:e0:42:54:02:57:31:63:56:91:1f:0b:44:79:84:05:3e:
a5:e0:2f:5b:04:49:33:ad:f0:de:7d:fb:39:8a:3c:3f:fd:22:
4f:14:bb:a0:d1:fa:f3:97:5d:12:5a:37:52:71:27:dd:8a:13:
9c:56:c8:21:a4:e1:e7:58:12:aa:6e:76:c0:ec:88:1c:a2:a3:
32:30:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:56 2025 by rpki-client