Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ag0L0GixCE5vN6s8Cc61kI10IpU.roa
File: ag0L0GixCE5vN6s8Cc61kI10IpU.roa (raw, json)
Hash identifier: 7SrTvrUoEysn3VL7qE2xq8H6stk+6oa+u5q3ex/zjCY=
Subject key identifier: 6A:0D:0B:D0:68:B1:08:4E:6F:37:AB:3C:09:CE:B5:90:8D:74:22:95
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0195CD3CD10E625ACB4DE5E77E8DF1A8E5CE
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ag0L0GixCE5vN6s8Cc61kI10IpU.roa
Signing time: Tue 25 Mar 2025 12:17:49 +0000
ROA not before: Tue 25 Mar 2025 12:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43357
IP address blocks: 45.82.76.0/24 maxlen: 24
45.82.77.0/24 maxlen: 24
45.130.20.0/22 maxlen: 32
45.131.155.0/24 maxlen: 24
45.147.50.0/24 maxlen: 32
45.147.51.0/24 maxlen: 32
80.66.198.0/24 maxlen: 32
88.218.193.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
176.113.68.0/24 maxlen: 32
176.113.69.0/24 maxlen: 32
185.184.220.0/24 maxlen: 32
185.184.222.0/24 maxlen: 32
185.194.52.0/22 maxlen: 24
185.248.85.0/24 maxlen: 24
185.254.75.0/24 maxlen: 32
194.36.25.0/24 maxlen: 24
2a03:d9c0:3000::/48 maxlen: 48
2a03:d9c0:3001::/48 maxlen: 128
2a07:fe00:1::/48 maxlen: 48
2a09:7:2007::/48 maxlen: 48
2a0b:89c1:3::/48 maxlen: 48
2a0c:59c0:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Mar 2025 19:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:3c:d1:0e:62:5a:cb:4d:e5:e7:7e:8d:f1:a8:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 25 12:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0d0bd068b1084e6f37ab3c09ceb5908d742295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:38:45:4e:03:0e:ff:66:88:1c:0f:dd:f5:
10:16:1a:a4:a6:15:c1:30:0c:30:a0:dd:90:22:96:
35:8e:77:46:3e:98:7a:c3:c7:76:3d:e9:9e:80:85:
ed:ea:b1:4d:4c:b8:18:b2:7c:7d:de:0d:43:50:d9:
19:57:8a:49:d3:dc:c1:8e:29:92:4d:a3:44:cc:ca:
19:a0:01:61:f1:a1:f9:36:8a:30:00:f5:37:fe:3f:
65:ed:9f:19:bb:9b:68:a3:56:47:7c:3f:0b:87:11:
e3:0a:56:e3:9a:85:b8:1a:9e:ed:d9:93:f9:b5:7a:
70:4a:13:5d:13:ba:5d:09:91:37:7d:e4:c8:67:2b:
86:0f:cb:49:88:4c:43:9f:3b:bb:48:35:72:11:18:
76:bd:be:e9:14:0f:5f:c3:6b:48:cf:13:1e:e9:1f:
ba:ed:c7:7e:dd:86:27:bf:04:77:de:d3:fd:3f:5c:
4e:31:28:a5:87:0b:59:42:33:8c:11:3d:4e:19:3d:
73:01:74:39:8e:bc:3d:4a:83:75:51:33:fc:f3:8b:
30:f3:f4:92:81:c7:d2:1a:ee:ea:b7:54:f4:d3:e2:
ac:e7:c9:d1:11:cb:30:15:46:44:38:c6:73:66:b8:
af:02:39:07:59:11:81:1a:30:86:98:ad:74:48:59:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:0B:D0:68:B1:08:4E:6F:37:AB:3C:09:CE:B5:90:8D:74:22:95
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ag0L0GixCE5vN6s8Cc61kI10IpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.76.0/23
45.130.20.0/22
45.131.155.0/24
45.147.50.0/23
80.66.198.0/24
88.218.193.0/24
92.60.40.0/24
176.113.68.0/23
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.248.85.0/24
185.254.75.0/24
194.36.25.0/24
IPv6:
2a03:d9c0:3000::/47
2a07:fe00:1::/48
2a09:7:2007::/48
2a0b:89c1:3::/48
2a0c:59c0:18::/48
Signature Algorithm: sha256WithRSAEncryption
4a:0b:8b:4d:37:69:6f:d6:f0:c4:ed:f8:d0:9f:a7:28:39:f0:
92:16:cd:de:de:de:87:fd:51:1f:b4:64:c7:07:c5:e4:23:dd:
18:c2:9c:a7:50:b8:02:95:7a:4f:40:a2:1e:20:d0:00:35:42:
d6:b6:fd:3a:da:76:a3:af:72:b7:af:64:ad:6e:21:d2:47:d6:
50:ca:63:82:70:6a:1b:dc:8b:35:f5:4a:10:dd:a5:b8:d6:c8:
5e:15:2d:82:9b:ad:62:b0:6d:95:2c:4d:8e:7a:a6:68:f3:15:
a3:7b:83:26:8d:8d:65:81:10:0d:fc:93:71:ec:6d:bb:f9:25:
7f:c6:b9:04:49:bf:4c:f1:43:e3:84:ec:7b:ad:15:7e:e9:fd:
85:23:dd:ad:57:c7:5e:f6:38:a1:33:79:85:72:fa:48:26:73:
b2:41:96:31:72:2c:73:4f:35:40:62:d3:86:b0:c0:e5:e4:4a:
b8:68:7b:f8:d9:41:2f:2b:59:d2:30:a2:10:ea:f1:24:c1:71:
a7:cf:4d:c9:b9:c8:76:73:54:99:b2:dc:f0:10:03:fb:7a:68:
05:85:fd:1e:e0:9d:fa:21:3e:08:f7:65:c2:6e:59:83:9a:06:
bd:0c:d8:cc:b0:e7:7b:08:6a:2c:c0:9b:e3:a6:76:7c:f1:f6:
3f:de:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:34:11 2025 by rpki-client