Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-RvNjyNVkwfBPHjK2LXMREhoJas.roa
File: 1-RvNjyNVkwfBPHjK2LXMREhoJas.roa (raw, json)
Hash identifier: TcMTsspzrASLIC/FmJEwj8jyG2m/DFj7nZ3V0GKVlV0=
Subject key identifier: F9:1B:CD:8F:23:55:93:07:C1:3C:78:CA:D8:B5:CC:44:48:68:25:AB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193A1755B21190AAC38D14F041E9B1FC5E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-RvNjyNVkwfBPHjK2LXMREhoJas.roa
Signing time: Sat 07 Dec 2024 14:10:43 +0000
ROA not before: Sat 07 Dec 2024 14:10:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:75:5b:21:19:0a:ac:38:d1:4f:04:1e:9b:1f:c5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 7 14:10:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f91bcd8f23559307c13c78cad8b5cc44486825ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:f5:2d:6d:3a:6a:3b:3e:15:8a:9b:e7:f4:
f4:9a:7c:7f:ae:95:3e:c5:86:10:76:8b:02:e2:e8:
30:8c:c6:3e:50:d7:d9:42:dd:f6:3c:81:1a:59:ae:
e4:33:e9:8e:17:5b:c6:57:a5:a3:e8:7d:b5:cf:36:
39:77:15:f8:5a:fc:45:7d:64:61:92:86:d7:82:f6:
4e:b0:ea:0f:5f:42:bb:1b:1a:76:81:49:9e:12:3f:
ab:14:bd:03:90:c3:79:ad:dd:d3:bd:0a:53:1c:71:
ef:37:94:be:04:3e:ea:26:03:5f:31:72:c4:55:b4:
28:b5:5b:28:6f:4c:97:f5:09:89:c2:54:dc:5d:12:
0c:ba:48:3b:eb:45:70:e4:ff:8f:be:9c:b4:a9:56:
24:2b:39:fd:ca:87:52:4f:b7:51:d0:8e:52:d6:69:
68:ce:7b:5e:83:d1:93:46:f9:52:0f:39:d4:80:5e:
4b:52:63:d1:3e:d0:20:72:bb:d7:29:56:ec:21:cb:
d2:67:57:aa:3d:1b:eb:e5:1d:a4:6d:f0:06:6e:19:
f9:bf:29:f5:24:3f:85:58:31:37:f4:ec:24:43:db:
59:69:2e:0d:58:1e:85:44:23:8b:ee:79:4b:cd:67:
bb:e8:bf:f1:b6:39:cb:35:26:10:c9:45:eb:72:2c:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:CD:8F:23:55:93:07:C1:3C:78:CA:D8:B5:CC:44:48:68:25:AB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-RvNjyNVkwfBPHjK2LXMREhoJas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
87.121.103.0/24
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:32:75:00:35:6c:b3:f8:4c:2a:71:0d:86:1d:09:95:6a:d1:
7b:18:7e:58:06:3f:84:86:f3:e6:b5:4e:63:90:83:a2:3a:d3:
08:a5:d8:f8:ad:6f:70:39:4a:71:68:6b:44:a0:39:97:35:69:
e1:9b:16:e2:bf:18:d5:7a:6c:4a:b4:4a:ab:e0:00:84:3a:c7:
4e:a5:bb:3e:34:b3:21:5f:aa:a9:3b:2a:51:ce:9f:09:51:1f:
fd:d9:e9:ef:da:72:93:ab:09:16:ec:ea:23:c4:93:91:1b:7f:
36:29:63:65:c4:70:52:71:ce:9b:33:4d:94:5f:3d:4e:fd:60:
bf:8e:ae:02:f7:2b:4e:62:f6:d2:88:35:20:ac:3c:f2:23:93:
d8:64:86:25:97:61:b0:f6:e2:35:50:2e:bc:f8:34:77:a4:dd:
0d:40:17:d1:7b:57:28:e4:79:09:b6:d7:d9:cb:b0:6e:b3:c3:
2c:65:2a:21:f0:d5:3e:10:84:a2:e9:53:ba:8a:98:64:89:ae:
ec:3f:b5:f9:77:ad:bb:93:8d:98:f8:e3:c3:58:c4:c1:ad:76:
a0:8a:82:10:fe:6a:f9:8e:87:fd:c8:a3:6d:7a:7c:b0:dc:f0:
56:ed:1c:de:2e:8b:f5:44:9c:e7:77:38:48:77:21:6e:2d:26:
03:9c:9d:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:11:12 2025 by rpki-client