Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/vUO3Iz5XaRYoB9yjDuGOhRVfWzk.roa
File: vUO3Iz5XaRYoB9yjDuGOhRVfWzk.roa (raw, json)
Hash identifier: PKiA5LZhAok4W1AInBFtXxoH183jl6NC5RKdupeCBno=
Subject key identifier: BD:43:B7:23:3E:57:69:16:28:07:DC:A3:0E:E1:8E:85:15:5F:5B:39
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448E40D919F4F3D67CCFCC06D9F4E3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/vUO3Iz5XaRYoB9yjDuGOhRVfWzk.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43357
IP address blocks: 45.130.20.0/22 maxlen: 32
45.147.50.0/24 maxlen: 32
45.147.51.0/24 maxlen: 32
80.66.198.0/24 maxlen: 32
92.60.40.0/24 maxlen: 24
185.184.220.0/24 maxlen: 32
185.184.222.0/24 maxlen: 32
185.194.52.0/22 maxlen: 24
185.248.85.0/24 maxlen: 24
185.254.75.0/24 maxlen: 32
194.36.25.0/24 maxlen: 24
2a03:d9c0:3000::/48 maxlen: 48
2a07:fe00:1::/48 maxlen: 48
2a09:7:2007::/48 maxlen: 48
2a0b:89c1:3::/48 maxlen: 48
2a0c:59c0:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8e:40:d9:19:f4:f3:d6:7c:cf:cc:06:d9:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd43b7233e5769162807dca30ee18e85155f5b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c8:60:d3:7f:19:d7:71:b7:3a:0c:53:3e:6f:
fd:21:33:25:81:b5:59:29:17:b1:ca:5a:2d:58:4c:
30:1c:10:9c:56:d5:76:1d:37:3b:7f:fb:ff:37:d1:
49:c2:4d:f5:3c:ba:ce:ac:3b:a0:be:f9:cb:5a:a5:
48:91:ac:5e:f1:25:a3:e0:e8:d2:95:02:ef:84:7c:
8e:6e:4d:2f:3a:00:a1:b0:f2:23:ec:59:4f:bd:eb:
b1:3e:50:d1:e1:73:e2:03:34:f7:cc:65:16:2f:e2:
33:34:a9:8c:cf:9b:02:12:98:0e:4e:ad:28:6a:13:
9c:80:2f:56:d0:44:55:0a:97:27:eb:8f:1f:c0:7e:
90:e0:57:c0:15:0b:3f:f9:84:ea:15:67:f2:66:2c:
87:91:2e:8d:9a:e3:4f:ad:6a:89:53:67:8c:5e:fd:
a3:3e:f8:b3:eb:03:47:da:9b:ef:ab:82:fc:e5:95:
07:5a:00:5a:1b:5e:db:9d:2d:f8:4d:eb:e4:10:da:
8b:39:3a:cb:3a:4d:39:94:76:97:fd:c1:06:aa:b7:
16:e3:a5:55:4b:ee:4c:53:2e:a2:3b:2e:c7:05:b2:
eb:92:a2:d3:16:5c:5c:8c:6e:e5:73:cc:42:70:51:
42:58:f0:d9:6c:3e:c1:8d:2e:aa:8e:7a:f0:f5:a7:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:B7:23:3E:57:69:16:28:07:DC:A3:0E:E1:8E:85:15:5F:5B:39
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/vUO3Iz5XaRYoB9yjDuGOhRVfWzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.20.0/22
45.147.50.0/23
80.66.198.0/24
92.60.40.0/24
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.248.85.0/24
185.254.75.0/24
194.36.25.0/24
IPv6:
2a03:d9c0:3000::/48
2a07:fe00:1::/48
2a09:7:2007::/48
2a0b:89c1:3::/48
2a0c:59c0:18::/48
Signature Algorithm: sha256WithRSAEncryption
88:d3:df:1c:ed:c1:77:5e:76:ec:75:95:32:80:f2:b4:04:ed:
17:2f:69:be:1e:5a:a4:05:e6:ef:10:53:ee:f3:47:c4:8b:bc:
cb:45:35:0f:3f:bd:0d:1b:d1:78:28:f5:4d:8f:ef:98:bf:cd:
85:7f:df:89:23:87:52:32:65:99:30:f3:3f:87:95:77:7c:b9:
f6:fe:a8:d6:66:09:1e:40:7c:db:c5:a9:65:15:e1:82:3d:3f:
04:db:be:0f:21:03:70:ec:d9:6a:44:ae:89:79:c1:48:f1:0c:
f2:70:c7:a4:3b:33:54:f6:1f:2f:f7:74:bc:b9:86:ca:fa:3d:
36:f9:1e:4c:0f:f6:45:22:51:dd:db:98:19:c3:c2:c0:05:c1:
0e:0f:b0:b6:bc:2a:77:67:a6:08:dc:f9:a4:d3:6e:42:78:02:
cb:1f:34:72:08:db:f6:a9:ad:a6:64:d5:43:c2:ec:0b:14:87:
f9:d4:07:4c:d2:16:db:bc:db:07:d6:4d:7f:fa:d8:0c:45:ee:
bd:24:f6:21:b4:82:e8:2b:39:60:ec:9a:ed:bd:91:da:95:b6:
31:80:05:49:4d:a6:00:38:f1:de:c7:a4:0a:55:4d:1b:51:bb:
14:97:67:b4:89:3b:4c:0c:a7:9a:57:b7:1c:e2:23:f1:4d:cc:
46:75:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:19 2025 by rpki-client