Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hH5ER1yNdxIv5dgmLaw6meTMvXM.roa
File: hH5ER1yNdxIv5dgmLaw6meTMvXM.roa (raw, json)
Hash identifier: lCMdygt1/GSUOXfpIToX4IZldgT4TwEK7adTWXznsME=
Subject key identifier: 84:7E:44:47:5C:8D:77:12:2F:E5:D8:26:2D:AC:3A:99:E4:CC:BD:73
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195517DED18BEBA224EA50CF5A427ABF828
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hH5ER1yNdxIv5dgmLaw6meTMvXM.roa
Signing time: Sat 01 Mar 2025 11:36:01 +0000
ROA not before: Sat 01 Mar 2025 11:36:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
213.220.59.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 20:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:7d:ed:18:be:ba:22:4e:a5:0c:f5:a4:27:ab:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 1 11:36:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=847e44475c8d77122fe5d8262dac3a99e4ccbd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:35:81:4b:c7:4d:1b:8c:dc:e5:cd:3b:53:
c1:e2:70:b7:ff:fb:ca:4e:9d:8b:ea:8a:da:1d:06:
eb:c3:92:bc:3d:24:97:1d:59:e6:b0:3f:4b:5d:9b:
0a:bd:c5:6a:16:c6:f2:65:20:89:72:d9:35:c7:e6:
9a:b6:a0:98:0b:56:27:50:5c:3e:49:55:32:70:2b:
99:f9:ce:90:fc:eb:1d:dd:35:98:3c:e4:14:45:09:
bf:f0:43:05:97:34:f6:1e:e0:c4:1a:17:20:e9:d8:
b0:74:a1:a4:11:cd:fd:7f:80:3c:17:fd:5d:20:a0:
9d:1f:b7:27:c3:f1:b6:a6:b2:22:2e:6d:05:82:c7:
d6:3a:78:bf:b5:0f:af:6d:ba:ff:46:23:46:50:da:
ce:fb:01:65:6a:e0:da:14:64:06:e6:2a:b0:11:37:
ca:c3:ca:bd:4a:94:af:5a:5b:88:37:bd:1d:e3:ba:
a3:9a:18:33:43:4b:9f:18:90:81:f1:9e:f2:30:2d:
a1:f3:f5:de:5e:31:27:63:21:77:a0:db:fa:95:70:
39:2a:cc:07:2d:4e:fd:2d:d1:6d:5c:5d:93:f0:bf:
cc:f3:9d:07:73:51:cd:8b:df:f7:fd:0e:5d:78:03:
7b:0b:34:40:2f:1f:8a:3e:98:40:3f:ec:4b:d5:5a:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:44:47:5C:8D:77:12:2F:E5:D8:26:2D:AC:3A:99:E4:CC:BD:73
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hH5ER1yNdxIv5dgmLaw6meTMvXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0-194.143.207.255
194.143.209.0/24
194.143.217.0/24
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0-195.114.198.255
213.220.19.0/24
213.220.58.0-213.220.60.255
Signature Algorithm: sha256WithRSAEncryption
9d:45:45:ea:cb:c2:be:d2:4f:29:6b:39:37:38:b0:d6:b6:0e:
d5:1b:08:ab:09:b9:08:6e:73:0d:75:0a:a3:e0:a3:c6:1d:a7:
5a:39:98:36:8b:37:e4:f3:bb:7f:25:8f:89:30:8e:6d:d6:77:
fa:1d:45:43:d1:6e:be:43:36:66:c8:00:90:55:7e:54:ea:06:
49:76:b1:70:9b:9f:1b:27:c5:58:5f:9a:e0:61:02:94:6d:fc:
ae:f3:0b:c4:f4:14:fb:82:da:e2:3b:10:3d:cb:47:8c:ea:15:
f4:4f:90:4b:23:ad:85:6d:f9:1c:ea:fc:cc:9d:9c:9a:72:8c:
60:5a:74:36:b4:99:3c:92:1b:91:92:c8:34:ed:fe:37:17:23:
1c:3a:cf:f3:f7:6e:e8:c3:cc:25:11:2a:f3:1f:0f:51:2a:ba:
9b:29:3f:94:97:2c:3d:04:a6:71:2a:bf:99:45:d3:fb:57:e1:
02:aa:e8:50:bd:02:16:17:fa:b7:c4:70:50:58:37:bd:d7:75:
94:41:0a:68:3e:78:ad:c5:2d:8f:bb:29:42:b9:85:3d:70:2a:
eb:8e:66:8e:c3:01:a7:7a:8b:a8:06:95:4a:18:b2:8c:5a:b1:
4e:87:1c:f7:c5:94:32:5c:25:e3:28:c9:d1:9a:84:79:c8:1b:
30:98:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:48 2025 by rpki-client