Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PF-SQgMY6bZR3vYUGZf_UrnH19Y.roa
File: PF-SQgMY6bZR3vYUGZf_UrnH19Y.roa (raw, json)
Hash identifier: eQqhcGUl04acAqzH9uIijUQ/aWsi0poRigYGPfraIaE=
Subject key identifier: 3C:5F:92:42:03:18:E9:B6:51:DE:F6:14:19:97:FF:52:B9:C7:D7:D6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196B02F95777BCBFC5FDB19D48764063B49
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PF-SQgMY6bZR3vYUGZf_UrnH19Y.roa
Signing time: Thu 08 May 2025 13:57:10 +0000
ROA not before: Thu 08 May 2025 13:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 14:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:2f:95:77:7b:cb:fc:5f:db:19:d4:87:64:06:3b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 8 13:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5f92420318e9b651def6141997ff52b9c7d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:f0:fc:d5:06:b0:4d:33:54:34:1d:69:b4:
c4:c1:44:37:98:16:4b:16:74:ff:be:00:d6:d1:d0:
87:f5:4e:05:c6:79:52:0e:3f:ad:1a:cb:79:d4:20:
68:b1:31:eb:7e:f4:a1:56:d2:75:12:9a:66:68:98:
cd:73:0a:29:cc:b4:5d:b6:b2:41:98:01:6c:ef:96:
f4:e6:c7:1e:d0:fe:33:bf:63:77:9a:1a:1c:6e:8b:
64:7e:97:7b:10:a6:10:94:de:6e:ce:ee:c9:e6:81:
2f:00:1d:48:b1:14:2f:43:ff:06:41:35:f3:bd:01:
24:49:3e:1c:f4:17:4c:6f:44:34:05:de:13:65:02:
0f:fb:b8:d6:00:c3:ff:3f:2a:f1:49:b3:9d:f3:ad:
e4:96:81:b6:65:1d:68:3a:f8:9f:c2:76:1c:00:66:
ae:9e:95:28:b3:5f:5d:4d:c6:aa:b2:95:04:ba:eb:
cf:95:49:6f:65:fb:54:33:c8:78:8b:2e:2c:dc:7c:
51:64:86:a1:3c:06:c3:47:79:b1:8a:52:dd:14:81:
6d:01:39:68:82:c2:a2:37:87:2d:49:ce:d9:d7:dd:
4b:29:a5:d1:55:f6:58:dc:e2:94:e6:d9:00:b7:0e:
0b:fa:d6:26:dc:25:7c:c1:c2:6a:31:af:67:44:f1:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:92:42:03:18:E9:B6:51:DE:F6:14:19:97:FF:52:B9:C7:D7:D6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PF-SQgMY6bZR3vYUGZf_UrnH19Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
46.102.237.0/24
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
93.115.203.0/24
94.177.106.0/24
194.85.251.0/24
202.71.15.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:26:4d:57:6f:2f:0e:60:35:71:22:42:84:e4:52:e1:29:4b:
0f:c1:a2:fc:a6:f1:1b:e2:97:37:44:e2:c1:be:a0:e7:55:18:
c4:8d:fa:d1:c1:05:80:84:50:cb:00:d9:33:d0:9d:47:7b:23:
9d:d2:80:1b:b4:d1:1b:75:17:c8:03:73:6c:2e:17:97:ed:79:
31:5c:2d:6a:5b:c1:a4:92:4c:6c:5a:0c:d3:4a:05:49:c3:9e:
8b:5f:91:8f:90:0d:18:0a:d4:a3:a5:1d:48:ae:2e:96:8d:d4:
a1:86:67:7c:21:18:1e:ba:20:48:36:de:3e:ff:ac:28:f6:10:
0e:93:23:e7:27:c3:41:3f:ce:54:a6:b2:a7:75:59:f1:e9:e1:
24:9d:a4:05:d4:e4:74:94:9d:6b:f6:83:58:80:93:5e:d6:4f:
b8:84:77:04:65:52:3a:62:d8:23:8d:49:ca:1e:06:96:51:7f:
99:5e:5b:6e:9a:16:9a:98:1a:fc:b8:d9:88:fd:6e:e5:19:4f:
b0:69:8d:ad:5f:1e:17:2b:09:10:67:94:50:a8:2d:d0:5d:29:
97:5a:b2:f7:c1:fb:8e:05:42:25:a7:a5:9e:a1:b9:ef:f7:e7:
32:6f:f1:cb:4b:41:36:69:f6:58:e4:ec:13:6c:ce:bb:de:78:
80:7b:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:32:21 2025 by rpki-client