Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1pjwo6DSJ_d1odC-LmgY3rMmeXk.roa
File: 1pjwo6DSJ_d1odC-LmgY3rMmeXk.roa (raw, json)
Hash identifier: DgZdUHKWkjcO5Sn5G0zCVotHCu4TFcPee1WI+5aFMdo=
Subject key identifier: D6:98:F0:A3:A0:D2:27:F7:75:A1:D0:BE:2E:68:18:DE:B3:26:79:79
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CCA1E44073319270E8B7B7CB62D3
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1pjwo6DSJ_d1odC-LmgY3rMmeXk.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207810
IP address blocks: 5.134.84.0/23 maxlen: 24
45.159.73.0/24 maxlen: 24
45.159.74.0/23 maxlen: 24
217.113.12.0/22 maxlen: 22
217.113.18.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 06:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cc:a1:e4:40:73:31:92:70:e8:b7:b7:cb:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d698f0a3a0d227f775a1d0be2e6818deb3267979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:35:54:0b:58:2b:86:80:d2:0d:04:99:a4:
9b:1a:06:3f:60:63:97:77:e4:de:24:80:1f:3b:35:
ad:7f:e8:ae:e8:b3:fe:bb:67:42:59:69:a2:48:3a:
89:01:62:04:29:9d:12:41:e4:4a:f0:61:1a:33:20:
f8:d4:c9:ed:78:e1:2e:7d:aa:a9:71:70:61:a9:29:
f7:16:15:fe:67:03:8a:a5:e4:6d:9f:f1:2b:7b:45:
16:76:cd:47:aa:04:de:b6:98:d9:46:a3:4e:73:ec:
7c:99:3c:3b:e2:df:de:b6:9b:15:6b:2e:39:ef:82:
2a:83:90:20:ac:2b:00:b8:2f:7c:25:b5:02:65:cd:
ac:10:19:01:3c:0b:5e:ee:75:b3:8f:5a:e1:a8:21:
fb:3e:93:6e:db:e8:81:93:7c:7d:a6:47:66:b4:3e:
6d:e0:94:b4:69:77:1a:02:e0:7c:05:29:3f:5c:3f:
6a:68:80:4a:df:46:4f:5f:84:f0:e1:1d:79:ba:74:
3f:9f:8e:65:c1:c2:4b:fa:02:3f:fc:5f:0b:2e:d4:
a0:1f:89:c7:96:13:f1:c9:8e:71:d8:7c:26:95:fe:
13:c7:60:2e:c1:ba:c6:e7:49:91:09:bf:b4:fa:00:
93:23:1d:dd:c3:60:e8:df:06:3c:14:6a:16:51:6e:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:F0:A3:A0:D2:27:F7:75:A1:D0:BE:2E:68:18:DE:B3:26:79:79
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1pjwo6DSJ_d1odC-LmgY3rMmeXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/23
45.159.73.0-45.159.75.255
217.113.12.0/22
217.113.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b5:9f:67:08:21:1c:6c:b9:27:1f:d9:fd:32:49:cf:2d:7c:
2a:63:4f:4f:cc:4c:75:17:89:27:7d:5a:7c:f6:3f:ae:38:f3:
a0:7c:31:81:45:38:79:02:13:d6:43:ce:ed:15:83:d6:89:95:
75:b5:42:23:87:b7:5e:c6:9d:89:f4:e4:40:91:98:b9:e2:90:
47:dc:37:fc:9d:87:f8:23:75:99:13:fd:dc:d2:de:fe:70:81:
ff:42:54:5e:bc:5a:9f:af:12:8e:f1:83:9a:e5:18:ec:46:58:
15:95:06:6b:70:c2:ec:cb:4d:80:f7:51:5b:0c:ad:59:7d:13:
1b:9a:ee:38:29:fa:66:a1:d8:01:8a:10:1f:b7:69:ca:5e:58:
e4:af:a7:32:52:ac:b2:f3:88:e9:2e:63:0f:bd:00:11:0d:47:
a4:0d:4c:a9:32:a6:b4:62:e7:5f:9d:37:5c:77:6d:2f:c5:28:
25:4a:15:fc:f6:e8:32:6d:0a:4a:e7:2d:bc:e2:ae:78:d5:51:
7a:24:e5:20:89:d0:b0:01:87:1f:4d:50:b1:f5:3e:c4:ae:d4:
ee:33:b4:48:7f:18:ec:ff:d2:2f:8a:d8:c1:0d:3b:56:3b:14:
2d:5d:5e:e5:dc:80:1a:13:3c:2e:20:dc:f4:65:d4:a0:e1:32:
87:2f:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:21:31 2025 by rpki-client