Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2ZkHXIKsirqPrxTvXV45vCfBcq0.roa
File: 2ZkHXIKsirqPrxTvXV45vCfBcq0.roa (raw, json)
Hash identifier: H2+dKNKM1i1sD6AU7jZpYlphclvhgDLJLSRUs87uMpo=
Subject key identifier: D9:99:07:5C:82:AC:8A:BA:8F:AF:14:EF:5D:5E:39:BC:27:C1:72:AD
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB4BAF4213DA6695449F881D287F7
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2ZkHXIKsirqPrxTvXV45vCfBcq0.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 91.206.168.0/24 maxlen: 24
45.149.3.0/24 maxlen: 24
45.95.242.0/24 maxlen: 24
93.185.162.0/24 maxlen: 24
45.130.139.0/24 maxlen: 24
45.130.137.0/24 maxlen: 24
45.139.253.0/24 maxlen: 24
45.139.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b4:ba:f4:21:3d:a6:69:54:49:f8:81:d2:87:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d999075c82ac8aba8faf14ef5d5e39bc27c172ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:df:34:04:3c:e8:f1:4f:76:ea:ef:6f:9a:
08:43:ed:4c:a7:49:b2:a0:c6:aa:63:b5:cc:ee:2f:
9f:56:3c:06:f9:61:78:e8:97:fd:4a:a8:29:90:e7:
16:8e:c8:04:19:80:f0:5d:28:62:18:88:ed:90:b5:
89:38:54:0e:f3:e0:26:10:2a:e9:4b:0a:d4:dc:77:
b1:c0:bd:8a:c1:86:b0:fa:4a:4b:e8:9a:20:e5:4d:
2c:29:26:7d:4b:29:d9:54:c0:f9:c3:ce:94:6b:17:
e7:60:79:d8:92:ef:17:13:57:ec:c5:72:8c:a6:74:
02:1d:78:2d:c5:57:be:05:a1:1d:af:cd:45:52:19:
11:fc:77:55:38:a9:0b:e4:d9:d1:52:25:ab:63:8a:
6b:78:4f:f9:4a:bb:c3:60:32:0f:c1:1e:f8:ea:0e:
55:77:9b:71:a3:3a:70:20:f1:71:d2:36:9f:7c:92:
57:18:e7:53:02:1c:8a:af:da:85:12:ff:5e:22:fc:
b6:8f:3b:50:69:a3:3a:f2:53:0b:47:78:ef:73:13:
4a:83:17:fe:e4:d3:d6:10:51:77:cd:c6:12:c5:1d:
5d:00:94:58:9f:f0:cc:b4:2a:ac:ea:1c:62:9c:04:
81:f9:a9:78:49:d4:c5:57:a7:7a:92:ab:37:68:5f:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:07:5C:82:AC:8A:BA:8F:AF:14:EF:5D:5E:39:BC:27:C1:72:AD
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2ZkHXIKsirqPrxTvXV45vCfBcq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.242.0/24
45.130.137.0/24
45.130.139.0/24
45.139.252.0/23
45.149.3.0/24
91.206.168.0/24
93.185.162.0/24
Signature Algorithm: sha256WithRSAEncryption
81:86:b5:e6:26:f3:de:f7:c3:8d:f3:a7:a2:99:7c:f7:44:bc:
fb:ea:b6:5a:cb:13:7f:ac:c8:18:5c:c1:2f:d6:50:ba:65:f4:
fd:6f:e4:e4:53:30:26:26:6a:8e:80:ca:82:ea:4e:c5:35:29:
e8:95:33:3f:a4:14:d1:73:a0:42:bf:b2:33:e0:f3:f9:be:2a:
02:a5:4a:5c:a8:aa:39:ef:c6:23:4d:14:2b:c1:a1:36:4a:ce:
1e:7d:6d:c6:7d:32:92:44:1d:97:f9:d8:05:19:85:fd:d4:af:
5b:62:96:5b:93:a5:92:7f:c8:aa:78:ea:55:86:8d:d9:fa:11:
66:74:71:fc:08:65:41:40:64:0f:ce:fa:06:c4:69:e0:dd:35:
f7:c1:e9:0d:2f:9a:8d:fb:65:cc:c2:eb:e8:89:9b:8c:ee:da:
83:46:06:99:a3:2e:7f:6b:69:30:de:e1:d2:92:38:52:f4:84:
4a:a1:a0:9f:39:54:7a:49:05:00:f2:ea:a0:a1:bc:3f:e4:8c:
04:71:31:51:65:2d:22:90:a6:74:16:7d:f9:df:a1:6f:09:76:
f3:69:29:a1:e1:7b:7a:dc:12:78:72:cd:30:b4:d4:b0:c4:dc:
94:64:1a:f9:df:d6:91:ae:20:90:7c:af:bf:fa:37:2f:ca:40:
3e:07:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:59 2025 by rpki-client