Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/TZnRpvcOKtXCrcbojaVfnieGiFY.roa
File: TZnRpvcOKtXCrcbojaVfnieGiFY.roa (raw, json)
Hash identifier: cYF7bm9/SZRfJy8kPvp0CI5xlSQbJZ6b3HUzwm/fZ7M=
Subject key identifier: 4D:99:D1:A6:F7:0E:2A:D5:C2:AD:C6:E8:8D:A5:5F:9E:27:86:88:56
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0195F123CD0347025B28C00A28F5EFA2D967
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/TZnRpvcOKtXCrcbojaVfnieGiFY.roa
Signing time: Tue 01 Apr 2025 11:36:50 +0000
ROA not before: Tue 01 Apr 2025 11:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61060
IP address blocks: 37.44.8.0/21 maxlen: 21
45.66.112.0/22 maxlen: 22
185.144.4.0/22 maxlen: 22
185.144.5.0/24 maxlen: 24
185.172.160.0/22 maxlen: 22
2a10:40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 07 Apr 2025 12:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:23:cd:03:47:02:5b:28:c0:0a:28:f5:ef:a2:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Apr 1 11:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d99d1a6f70e2ad5c2adc6e88da55f9e27868856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:c0:0c:56:ff:97:16:b7:da:bc:15:5d:12:
69:54:2f:78:b9:e9:57:d2:1d:0f:62:c1:77:bd:59:
d5:05:57:89:9f:e7:38:29:28:09:e3:b7:34:cd:3e:
65:0a:e4:b0:71:ad:62:30:a3:bb:4a:df:31:5e:7d:
65:82:4c:85:f8:b7:05:48:2d:fc:22:4c:c2:dc:fb:
e3:d7:be:5e:29:8b:9f:eb:d5:6c:30:90:7b:3d:dd:
64:41:d0:80:87:8c:57:af:c4:ca:0c:14:b4:7d:08:
c4:38:32:f1:c5:fb:f6:b9:84:55:66:5f:f5:9c:7b:
55:07:2d:57:42:da:a4:cd:8f:7c:ce:57:a7:94:a7:
23:a4:a4:02:3b:da:44:74:b0:85:fc:4c:e8:dd:bf:
a6:b3:69:17:c3:a8:1b:f3:64:cf:3b:93:83:3e:9f:
6a:c8:f6:39:7e:b0:a9:f4:3e:d8:d8:5d:f2:ee:fd:
a7:71:a0:c0:ed:44:65:0d:49:80:1e:a8:b1:c6:b6:
2d:0f:57:40:25:ae:df:c7:01:d4:95:46:68:07:27:
0d:89:b8:f4:b7:fc:65:83:f2:de:e6:73:82:98:89:
36:87:4c:e9:e0:e5:26:b6:e9:ad:2d:6b:36:b3:05:
69:31:84:75:92:28:96:d4:6f:62:c9:65:ae:fd:bd:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:D1:A6:F7:0E:2A:D5:C2:AD:C6:E8:8D:A5:5F:9E:27:86:88:56
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/TZnRpvcOKtXCrcbojaVfnieGiFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.8.0/21
45.66.112.0/22
185.144.4.0/22
185.172.160.0/22
IPv6:
2a10:40::/32
Signature Algorithm: sha256WithRSAEncryption
e9:26:42:04:03:80:37:ad:b6:30:7e:94:7a:e5:fe:91:4b:16:
81:c6:19:f7:4a:c4:6d:9a:1c:24:f8:f8:d2:23:94:60:25:bd:
98:b1:d5:29:ca:1d:a7:54:51:c7:2a:39:66:ee:2e:c3:71:ff:
02:98:c9:4e:5c:fc:a1:a9:2b:33:35:c9:84:af:cf:ac:8d:04:
b1:10:c3:65:72:e2:9e:a4:61:6d:71:25:06:0f:d2:0e:6f:c2:
c2:b6:bc:7a:c3:34:e1:7c:88:53:0e:ad:eb:96:87:33:c1:58:
83:2d:3d:9e:b6:fc:a4:e7:e3:1a:23:06:0a:49:bf:c4:0a:da:
2b:e3:a2:d7:10:2f:d2:cb:a7:9f:95:be:1c:ea:b2:8f:ec:3d:
68:f6:30:15:29:84:d1:ce:9e:89:7f:21:4c:ad:4a:65:fb:b4:
b3:b2:49:54:d4:ca:1d:b4:be:e9:eb:cc:57:55:af:9a:15:0a:
2e:8e:81:70:80:f2:4b:c2:0f:29:e6:8e:6b:3f:bc:0e:21:7b:
f5:50:f5:98:c0:80:e8:23:4e:35:92:0a:c9:94:3f:e5:8e:33:
f9:ce:1b:6b:db:84:ea:bb:74:34:67:08:ac:83:9f:c0:13:d2:
ad:27:15:ef:4c:d8:2d:a2:61:69:47:cf:77:a4:b6:a9:c8:8f:
c5:c4:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:24:03 2025 by rpki-client