Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1Xz_SCnOixbbgQI6Cs8ipdaBtP4.roa
File: 1Xz_SCnOixbbgQI6Cs8ipdaBtP4.roa (raw, json)
Hash identifier: Xw2/4l+RWCSnEz9YaqTKMZIAZGm2M42/gT/hasjya2g=
Subject key identifier: D5:7C:FF:48:29:CE:8B:16:DB:81:02:3A:0A:CF:22:A5:D6:81:B4:FE
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019633205761B55727A9A91F6341F105C7BD
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1Xz_SCnOixbbgQI6Cs8ipdaBtP4.roa
Signing time: Mon 14 Apr 2025 07:07:59 +0000
ROA not before: Mon 14 Apr 2025 07:07:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 08:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:20:57:61:b5:57:27:a9:a9:1f:63:41:f1:05:c7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 14 07:07:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d57cff4829ce8b16db81023a0acf22a5d681b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:28:fc:62:02:03:06:c4:52:59:07:e9:a3:
7c:d4:e1:7e:bf:fe:30:6c:d4:14:7b:88:b0:27:da:
7e:f9:93:22:ec:f8:6e:6c:26:a9:5f:7a:5b:e5:68:
b6:c1:6a:16:20:e7:5d:41:9c:27:ce:8c:f2:47:09:
96:af:0e:2d:8a:19:93:b7:a6:c4:8c:9b:4b:0b:a7:
88:c3:52:13:e0:6a:d5:51:37:39:44:55:d0:16:47:
e7:d2:ca:39:1a:46:fe:2d:d0:ff:5d:c8:db:62:71:
c6:36:07:5b:3e:1c:8b:91:38:69:d6:9a:b0:eb:14:
7a:5a:7d:84:8e:83:4c:2a:a4:e2:65:bc:a2:85:ac:
fb:1b:8e:35:65:cd:29:36:88:a1:bc:d8:8f:0c:01:
ec:26:6f:de:07:0e:48:7b:9e:df:b5:84:cf:ab:35:
74:bc:5a:bd:0e:5f:b1:e5:4d:2e:d4:0c:05:78:74:
90:52:0d:2f:69:4c:3f:51:e6:ec:dc:99:85:11:b5:
ee:b1:c2:5d:c1:58:8e:2e:55:5b:09:41:35:7a:9f:
2a:3f:3b:94:d3:20:2a:bd:53:29:b9:92:4f:37:6a:
fa:65:2d:64:27:78:ba:69:30:14:b4:b8:01:ba:08:
8c:42:d7:b9:d5:29:f6:bb:59:b5:d6:ad:1d:9f:9e:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:FF:48:29:CE:8B:16:DB:81:02:3A:0A:CF:22:A5:D6:81:B4:FE
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1Xz_SCnOixbbgQI6Cs8ipdaBtP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0-194.143.207.255
194.143.217.0/24
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0/24
213.220.5.0/24
Signature Algorithm: sha256WithRSAEncryption
58:64:20:62:e5:c5:ba:2d:f1:34:27:2e:0d:4d:e4:7b:03:52:
44:6a:a4:ec:c5:a6:a7:bc:85:da:99:4a:3a:d3:94:bc:e9:c9:
3f:9f:f4:c4:31:83:2d:4a:06:6a:db:ff:5a:9a:89:d7:19:48:
bb:2e:b9:bd:2b:0e:c4:d7:e8:68:63:d4:f0:c9:17:5a:ef:3b:
78:96:db:34:c8:6b:dd:21:77:42:3e:af:74:a1:1d:22:0e:2d:
b1:89:82:cb:00:1e:a5:5f:2d:38:76:cd:04:11:a3:1f:ee:b5:
9c:4c:61:b9:c0:7c:25:57:0c:d8:2b:f8:88:00:4b:c5:f9:a9:
47:97:6d:1f:d7:7c:4b:30:ce:cf:81:de:31:20:ad:b0:7c:81:
21:dd:c2:fb:2a:df:51:7a:ef:07:ca:81:7f:30:ec:cb:32:00:
53:1f:22:54:70:1c:ff:61:4b:68:76:93:45:01:a0:f1:63:ad:
41:45:81:02:62:a5:48:4f:69:22:83:2f:a9:d1:73:e5:31:64:
29:be:ac:b1:33:11:fc:7d:1e:6b:da:0f:d6:de:30:8c:d5:46:
97:f9:91:db:35:df:cb:d0:6b:bc:05:53:a1:a4:93:47:5e:df:
5c:cc:07:c7:0f:69:59:10:63:91:a6:2c:dc:ef:6b:a9:79:73:
cb:94:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:51:02 2025 by rpki-client