Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/Oz4V3eQtKwsxUoM-PpERP3gC32I.roa
File: Oz4V3eQtKwsxUoM-PpERP3gC32I.roa (raw, json)
Hash identifier: n2HdA6KHzshLuKVRBgq+h/YH5cGLqQLgpzd+rzpa7qU=
Subject key identifier: 3B:3E:15:DD:E4:2D:2B:0B:31:52:83:3E:3E:91:11:3F:78:02:DF:62
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 01941FFA15E98B7D54B6EEBD11136545CE9F
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/Oz4V3eQtKwsxUoM-PpERP3gC32I.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207375
IP address blocks: 45.145.108.0/22 maxlen: 25
80.64.232.0/21 maxlen: 25
93.88.24.0/22 maxlen: 25
146.19.16.0/24 maxlen: 24
178.211.143.0/24 maxlen: 24
185.11.60.0/24 maxlen: 24
185.205.201.0/24 maxlen: 24
185.234.217.0/24 maxlen: 24
2a0e:fdc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 25 Mar 2025 07:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:15:e9:8b:7d:54:b6:ee:bd:11:13:65:45:ce:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3e15dde42d2b0b3152833e3e91113f7802df62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:8c:2a:8b:72:00:fe:8c:d2:9b:4e:11:a0:
cf:76:91:f6:27:24:05:93:1a:ca:ea:89:c2:57:90:
4a:8d:db:54:f5:33:74:d1:a0:1f:ac:2f:3e:15:fa:
2a:b1:11:92:1e:cb:07:6f:f5:0f:0a:b8:22:62:76:
8f:66:a0:b4:0f:bd:7a:d9:21:37:55:68:92:02:21:
91:93:55:a6:3a:f1:dc:a8:9b:60:4d:1f:d3:02:d5:
e4:d2:9e:f9:93:4b:88:c1:5a:f9:e9:28:a6:b1:52:
4a:36:70:a9:17:b5:d7:c2:ab:3b:39:8a:0d:65:4a:
42:d8:ea:2d:50:3c:3f:7a:50:3f:7b:a9:65:32:7d:
10:7d:fe:58:c3:3a:7d:46:aa:32:1f:73:46:f1:76:
3e:9b:d2:3a:8e:86:4f:d6:51:a4:17:be:1b:77:35:
bd:54:51:1c:b5:ce:e1:9c:76:41:ea:d9:37:1d:8e:
bc:7b:c7:b7:38:a1:b5:80:f5:0f:e7:9c:ea:ad:79:
15:63:fa:0b:df:af:e0:70:f6:77:3c:97:82:4f:82:
14:42:cf:8d:b3:43:89:36:84:a1:37:e3:f5:57:45:
c0:39:ad:61:b9:0b:8e:bc:9e:3a:9b:31:0d:b9:1f:
e4:f0:9f:8d:72:30:f9:3a:48:e9:9c:03:08:a7:ea:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:15:DD:E4:2D:2B:0B:31:52:83:3E:3E:91:11:3F:78:02:DF:62
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/Oz4V3eQtKwsxUoM-PpERP3gC32I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.108.0/22
80.64.232.0/21
93.88.24.0/22
146.19.16.0/24
178.211.143.0/24
185.11.60.0/24
185.205.201.0/24
185.234.217.0/24
IPv6:
2a0e:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:ee:61:6e:01:65:fa:f7:2d:02:f7:cf:ee:09:42:e8:7f:7a:
a0:58:e2:7d:55:ec:ec:bc:f0:f8:39:db:6d:5b:b6:c5:f7:53:
79:46:d3:67:f8:2e:b8:a0:6d:72:20:38:8b:11:f9:b6:27:6e:
69:e9:e3:62:45:65:32:b8:6a:40:c4:52:6b:58:ca:86:59:c7:
15:7e:30:82:ae:ef:bb:af:ad:0f:fb:f0:5a:1e:0d:cb:41:28:
8e:74:ee:91:7f:52:64:b4:9f:93:97:bf:db:02:a8:63:cc:00:
fe:e3:5c:24:1a:3a:59:f2:1b:f6:dc:a8:e5:1b:a3:39:19:58:
75:ce:d4:d9:a6:0b:06:fe:2d:6b:2f:f7:18:31:c3:c3:62:05:
5b:4f:ba:6c:00:dd:e5:14:18:79:08:71:46:01:dc:57:31:99:
af:c3:c4:01:df:b8:1d:56:81:63:93:4f:d4:04:cf:25:2d:e4:
b2:cb:7d:28:f5:b9:bf:79:52:08:0b:44:9e:1d:e0:9d:d4:57:
50:fe:c4:a5:79:05:da:6e:32:76:dd:7f:53:1c:27:06:31:5c:
e1:7d:bf:ae:be:ab:0d:1f:22:66:e8:23:61:fc:e6:41:ff:d6:
c8:13:fb:23:3a:2b:a8:7b:ec:55:2f:11:81:81:99:21:03:4b:
7a:9c:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:07:57 2025 by rpki-client