Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lNELTiwGA52ZSo7Ap0SP06rTYV8.roa
File: lNELTiwGA52ZSo7Ap0SP06rTYV8.roa (raw, json)
Hash identifier: Fk5zUvqsfikMIRJe4mrcjnX2MAUWPcW5fgevMa66sIc=
Subject key identifier: 94:D1:0B:4E:2C:06:03:9D:99:4A:8E:C0:A7:44:8F:D3:AA:D3:61:5F
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0196E87651FF2DEE901A31FBB32B76F325FF
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lNELTiwGA52ZSo7Ap0SP06rTYV8.roa
Signing time: Mon 19 May 2025 12:13:10 +0000
ROA not before: Mon 19 May 2025 12:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42724
IP address blocks: 45.155.127.0/24 maxlen: 24
91.213.182.0/24 maxlen: 24
193.3.167.0/24 maxlen: 24
194.36.84.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
194.62.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 15:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:76:51:ff:2d:ee:90:1a:31:fb:b3:2b:76:f3:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: May 19 12:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94d10b4e2c06039d994a8ec0a7448fd3aad3615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:b1:1d:82:97:f6:c5:01:cf:50:8f:62:b4:
c9:20:94:f3:f9:59:b9:e4:70:e7:14:d6:51:0f:a7:
98:e8:48:f8:bb:ae:29:13:f3:fe:01:4e:25:5e:7e:
bd:ab:c1:a5:d9:06:6c:fb:9b:24:01:77:74:41:91:
ca:b0:40:09:89:3d:81:02:58:35:55:92:a1:dd:31:
c6:5e:62:27:94:b7:79:93:2a:8c:6d:bf:c1:d9:58:
99:99:94:cf:e5:8c:d7:c1:8a:7d:fb:fb:91:75:33:
06:4d:ad:9d:c3:6f:f1:c0:3f:53:3d:51:e2:08:c3:
a6:93:03:dc:ae:44:99:76:8b:96:c9:ea:6e:eb:7a:
01:97:7e:c2:25:85:46:79:a1:3a:72:3a:a4:af:8a:
03:95:12:d0:4d:84:14:be:6f:67:d4:25:52:f7:89:
71:dc:a6:5d:19:ef:5a:83:30:e0:67:78:d4:9b:72:
b4:b5:90:5b:f6:34:e4:35:ad:9e:e0:31:a4:4e:16:
23:99:46:72:e0:72:ee:57:b0:f8:c6:23:8f:52:a1:
8f:62:b3:4a:ea:3b:a0:1e:ad:73:ff:b7:27:9d:5e:
4b:88:f4:89:44:4d:33:56:bb:57:66:7a:c2:f3:c3:
88:99:ea:3e:0e:d1:d1:d8:92:72:8e:13:79:80:bb:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:0B:4E:2C:06:03:9D:99:4A:8E:C0:A7:44:8F:D3:AA:D3:61:5F
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lNELTiwGA52ZSo7Ap0SP06rTYV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.127.0/24
91.213.182.0/24
193.3.167.0/24
194.36.84.0/24
194.36.86.0/23
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f3:db:35:1e:b2:da:db:46:96:27:20:29:27:0c:3a:b4:0e:
6f:8a:69:20:d0:e1:60:56:91:c5:5c:d1:86:55:36:30:91:10:
31:c3:dc:bc:0e:d3:c7:db:3c:68:c1:b6:48:47:11:9b:8d:da:
1e:f1:59:84:10:aa:ab:78:f8:2d:3e:30:a7:6f:0a:93:62:4a:
ca:4e:52:19:4a:5b:1a:82:6a:60:68:9d:c0:fd:06:60:e0:4f:
23:54:d2:2d:c9:88:63:93:88:d5:03:73:7b:a6:39:06:9a:58:
b4:3d:c0:90:b8:f7:e5:0b:cb:b4:b0:34:75:4d:4e:de:59:00:
d0:de:64:4c:b0:e0:30:c7:fe:5e:54:32:47:23:13:b7:18:ec:
52:86:47:a6:bd:ab:88:74:8d:ae:c0:15:a2:b5:a8:1a:e9:63:
81:51:65:89:06:59:a2:ff:39:9f:ae:8e:b9:48:97:3b:83:42:
c1:3c:86:4d:d5:84:9b:57:30:89:dd:fe:dc:25:f0:31:98:0b:
3e:7d:51:24:cc:73:da:e4:ce:81:8b:7b:20:0b:67:b8:f5:4b:
4e:64:a6:52:b5:d0:bd:36:e3:50:5d:e0:52:81:e1:df:80:b1:
9f:8d:57:b6:38:5c:00:68:aa:61:c6:a3:63:81:2d:85:6e:86:
31:7a:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:21:12 2025 by rpki-client