Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/45nmpyU4oNueVdgMw3Yv9g184mE.roa
File: 45nmpyU4oNueVdgMw3Yv9g184mE.roa (raw, json)
Hash identifier: h27vdpf/EyGauvYsti7ezt0hSLI3rsPgfn5tobsbyHg=
Subject key identifier: E3:99:E6:A7:25:38:A0:DB:9E:55:D8:0C:C3:76:2F:F6:0D:7C:E2:61
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018DEB6876631F656EAF27573BBF226CDD3B
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/45nmpyU4oNueVdgMw3Yv9g184mE.roa
Signing time: Tue 27 Feb 2024 16:31:48 +0000
ROA not before: Tue 27 Feb 2024 16:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 5.182.184.0/24 maxlen: 24
45.67.146.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
78.31.207.0/24 maxlen: 24
79.98.182.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
162.218.91.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
162.218.94.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.52.137.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.171.126.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.201.40.0/24 maxlen: 24
185.205.206.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
212.60.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:68:76:63:1f:65:6e:af:27:57:3b:bf:22:6c:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 27 16:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e399e6a72538a0db9e55d80cc3762ff60d7ce261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:d1:29:bd:dc:37:80:dd:dc:95:32:82:e1:
f0:83:f9:73:8d:5b:97:d5:9a:ab:fc:b3:b5:79:4e:
9f:14:d6:44:1d:d4:b4:83:0a:83:74:f0:0b:48:80:
e3:04:4f:54:16:34:38:7f:f2:f3:18:99:ad:c8:82:
b5:47:2d:7d:8d:6b:69:b2:10:ac:36:4d:0e:06:6b:
cb:14:85:87:ac:7b:0a:82:4a:cd:09:23:14:39:6e:
a0:c1:70:f2:57:fa:70:80:1b:dc:4e:fa:3c:77:a2:
05:b0:12:32:17:33:51:63:37:57:22:5a:32:20:5a:
a0:ef:e7:7a:53:99:de:1e:26:3a:af:4b:40:5e:ff:
0f:30:8a:ab:f5:18:ef:e3:59:cf:e9:c0:48:ab:f1:
71:cf:ec:d0:af:6e:00:fd:88:cd:64:6c:0e:32:b6:
95:f9:51:6e:ae:93:f2:47:ad:a6:a5:7b:1a:38:cc:
e9:67:1b:39:13:1e:2e:d9:cc:58:9e:55:9a:85:8c:
8f:4a:22:2e:84:fa:2a:cf:44:42:3b:a4:06:15:eb:
79:b7:77:85:31:dd:e5:b0:4a:c3:43:4d:87:39:f6:
4d:47:0b:a0:a0:60:1d:39:4e:af:d5:c5:99:b9:77:
9d:6e:d7:7e:b2:ad:12:87:8b:b3:4c:3b:1c:29:7e:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:E6:A7:25:38:A0:DB:9E:55:D8:0C:C3:76:2F:F6:0D:7C:E2:61
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/45nmpyU4oNueVdgMw3Yv9g184mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
45.67.146.0/24
78.31.206.0/23
79.98.182.0/24
162.218.88.0/23
162.218.91.0-162.218.94.255
185.52.136.0/23
185.52.139.0/24
185.161.191.0/24
185.171.126.0/24
185.187.213.0-185.187.215.255
185.201.40.0/24
185.205.206.0/24
185.208.152.0-185.208.154.255
185.230.121.0/24
185.230.123.0/24
212.60.14.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cb:56:56:8d:42:bf:38:bd:a0:5d:b4:a5:d5:47:f2:f4:7b:
e1:6a:c9:93:9e:ca:f2:b7:b6:3d:d2:b7:75:86:ca:10:aa:a2:
4f:f3:15:32:d1:72:b0:fc:c1:10:2a:2a:09:83:cf:c7:2a:27:
65:bf:e4:7a:70:b0:80:b9:ee:81:a5:82:5e:cc:ba:d0:67:09:
56:3d:4b:fe:87:1e:7b:73:c1:59:f2:72:15:43:19:6a:29:90:
69:fc:19:dc:ba:35:f8:9c:eb:7f:c0:b3:da:8e:be:25:01:48:
34:34:b5:d3:a2:c4:07:b2:47:1e:d3:7d:fb:57:a6:6b:7c:04:
ea:21:f4:d8:7e:03:cb:c5:a4:b1:5e:0a:4f:24:80:a0:a3:96:
b2:be:d7:24:26:1e:75:16:a9:0b:52:c5:a0:f1:5e:c2:6e:fb:
2a:8e:95:50:48:61:74:7d:93:14:ce:1d:f0:44:47:cd:be:28:
b3:c7:a1:99:6c:57:1a:36:94:c3:b8:e3:44:03:cc:46:23:82:
72:29:99:77:a5:00:36:3e:13:47:31:f4:9d:1f:b2:4b:40:8d:
87:43:d6:b5:ac:80:c0:80:8b:31:1b:99:0b:bf:3a:ba:57:e7:
63:d5:aa:9f:bd:1b:30:31:61:93:f0:fd:4a:ef:e3:aa:44:48:
c7:e8:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:57:16 2025 by rpki-client