Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IiqGVO-zJauZ0QhnsITeMxD--9U.roa
File: IiqGVO-zJauZ0QhnsITeMxD--9U.roa (raw, json)
Hash identifier: PczAta0tRlv7nedorafjE6tESpE1e4pPJmbN7/jT2Tg=
Subject key identifier: 22:2A:86:54:EF:B3:25:AB:99:D1:08:67:B0:84:DE:33:10:FE:FB:D5
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0196A9BFA3372DD8ABD0C57F2C05AE8A81E8
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IiqGVO-zJauZ0QhnsITeMxD--9U.roa
Signing time: Wed 07 May 2025 07:57:10 +0000
ROA not before: Wed 07 May 2025 07:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.9.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:bf:a3:37:2d:d8:ab:d0:c5:7f:2c:05:ae:8a:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 7 07:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222a8654efb325ab99d10867b084de3310fefbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fe:30:bb:db:c7:63:fe:15:65:4b:31:9a:c1:
e4:20:34:9d:57:28:d8:f3:f0:2f:2f:58:84:3c:c3:
ec:09:a2:32:cf:82:50:7e:d4:e8:9c:7c:5d:3b:90:
6e:7f:4c:5c:bc:44:3c:b1:a5:d4:37:84:fb:08:5d:
25:c1:4c:45:ca:68:16:af:e9:48:91:07:eb:d0:c4:
71:51:9c:e5:ba:35:31:14:6e:ec:36:7a:59:04:3b:
11:0d:06:1a:e3:1e:44:09:13:7b:34:8a:29:f6:59:
7e:91:54:e9:6a:e7:9f:cd:04:6c:98:fb:7d:ce:e7:
89:80:ea:ed:75:0f:f6:ff:aa:c8:6f:45:c3:e8:09:
0a:1b:f8:e6:65:7a:c8:81:d0:59:b8:18:c1:c1:4e:
5d:c5:83:68:d2:ac:23:59:a9:4e:42:60:a2:3a:dc:
af:6b:5c:48:a2:a5:a0:4a:bd:20:ac:a3:51:a7:ae:
40:5d:1a:86:11:95:4e:a4:4d:db:4c:76:fc:8a:01:
16:ab:ff:4a:bd:6d:48:6c:25:11:99:92:22:1a:f8:
76:b3:17:17:4f:f3:ed:8d:66:b7:46:15:3a:c0:fd:
6f:cb:ae:81:8f:76:9d:10:8f:3f:6c:3e:04:4a:19:
8c:b7:f6:05:e5:6f:af:b5:3b:83:73:bd:f0:b1:35:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:86:54:EF:B3:25:AB:99:D1:08:67:B0:84:DE:33:10:FE:FB:D5
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IiqGVO-zJauZ0QhnsITeMxD--9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0-194.143.207.255
194.143.217.0-194.143.218.255
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0/24
195.114.205.0/24
213.220.2.0/24
213.220.4.0/24
213.220.9.0/24
213.220.20.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8c:b8:91:60:dc:d1:99:56:d8:60:c8:2c:37:11:c4:7f:98:
05:56:98:01:13:33:dd:6c:bc:c0:8c:0d:b1:ca:1b:89:b6:81:
f5:f4:c0:67:35:11:55:97:fe:e3:9d:c4:dc:c5:6f:48:ce:28:
37:16:08:d7:87:78:8a:69:9d:10:39:7d:9a:90:79:2a:1b:2e:
c9:f3:fb:91:8c:88:b1:b7:2b:06:79:cd:05:a2:a3:ea:06:c3:
87:8b:cb:c6:13:13:2d:82:8d:d4:51:78:13:82:88:12:65:60:
5d:b7:e0:76:b2:7b:94:b7:65:d4:14:42:3c:ce:3d:e1:01:39:
21:39:ae:a0:d0:c6:80:92:ec:09:e5:26:c6:55:e7:0b:60:78:
47:ff:dc:6c:83:b3:08:16:c6:2e:25:8d:e2:96:be:f7:52:d1:
dc:37:f4:de:ee:1b:09:89:2a:94:5e:74:77:a8:f7:b1:6b:0f:
eb:f1:a1:1b:89:e0:79:e0:08:96:e4:5f:42:71:54:cc:70:28:
13:8a:08:f8:12:1f:b1:0d:50:6f:7e:0b:78:4e:21:4f:fa:29:
e8:be:1b:44:cd:90:78:a5:3a:c8:75:c1:e5:a5:63:a1:9b:54:
bc:59:60:1b:29:fa:b1:81:7e:8c:ec:ab:08:19:05:30:02:51:
6d:c4:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:11:15 2025 by rpki-client