Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-Wdrx2X-5VYynXIfAB_lfkA1G24.roa
File: 1-Wdrx2X-5VYynXIfAB_lfkA1G24.roa (raw, json)
Hash identifier: GgGEgcPYLIuakIjdiObD0/jZ+o+kaW+rhMKacegrI6E=
Subject key identifier: F9:67:6B:C7:65:FE:E5:56:32:9D:72:1F:00:1F:E5:7E:40:35:1B:6E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01953CA63F57990B4CF662FE9B65BC44ED94
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-Wdrx2X-5VYynXIfAB_lfkA1G24.roa
Signing time: Tue 25 Feb 2025 10:28:03 +0000
ROA not before: Tue 25 Feb 2025 10:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:a6:3f:57:99:0b:4c:f6:62:fe:9b:65:bc:44:ed:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 25 10:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9676bc765fee556329d721f001fe57e40351b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:c3:42:e9:b3:90:04:12:56:11:c3:39:78:
c4:9a:f5:88:3d:6c:e7:6e:de:52:bd:48:72:b2:6a:
0d:f8:a7:de:9e:e0:57:03:10:6b:a9:3f:df:e3:60:
c1:f5:62:63:e4:76:84:3a:97:0e:6c:0a:21:45:90:
fa:6d:58:cc:3f:2d:93:a2:88:cd:e8:b7:9c:d8:6c:
9a:a4:7d:e9:43:a7:91:67:cf:4f:66:9c:55:a9:ca:
a9:2d:68:45:08:f1:22:96:62:82:bd:7a:e0:bd:03:
b4:19:0d:03:d8:a4:0b:3a:cf:cf:07:e1:ab:37:e3:
6b:a7:c9:2e:7f:8b:c9:61:04:44:2c:8d:1f:5b:c2:
44:dc:9f:60:bd:93:c9:5d:8f:ae:4a:b9:05:2e:0b:
7c:5c:f8:42:df:58:9f:29:c3:5d:87:23:31:4e:33:
89:01:78:3e:be:d2:34:1b:4e:9c:37:84:ed:f3:67:
78:37:a7:47:ee:f2:93:f9:d2:70:78:f8:eb:2e:ef:
90:96:0b:0b:bf:17:dd:20:7c:47:ca:e1:58:06:f9:
27:f3:67:3b:61:44:28:e1:aa:c0:68:8b:9f:c2:02:
06:99:6c:be:7e:30:11:a6:fe:1a:cf:6c:a9:3f:6d:
d4:0e:af:9b:9e:1d:89:cf:11:29:b9:5e:0c:0f:6b:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:6B:C7:65:FE:E5:56:32:9D:72:1F:00:1F:E5:7E:40:35:1B:6E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-Wdrx2X-5VYynXIfAB_lfkA1G24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
87.121.103.0-87.121.104.255
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
35:69:a7:98:93:64:1c:c9:59:1b:ba:06:30:35:cb:b5:9d:e1:
90:55:04:3e:bd:e7:e3:3c:72:0c:76:12:1f:72:41:6c:3e:5b:
9d:b7:b2:04:69:d0:7a:fc:98:e5:38:87:98:b6:94:2c:4f:04:
63:58:a8:02:95:d7:9f:f5:f4:da:51:3b:da:bf:8d:b0:71:d2:
4b:09:27:05:88:80:3f:6b:c6:db:c8:ab:3e:f7:8c:07:dc:11:
98:93:26:b7:b3:97:2c:19:6e:6a:46:84:51:5a:a5:bf:63:90:
e6:51:af:d3:51:b7:c0:3a:4d:cf:5b:2a:c7:2b:2b:20:5f:c7:
85:43:97:56:fa:83:b4:59:b0:e3:d0:c0:8d:ca:fd:e6:f6:a3:
da:7f:06:9a:60:bf:bc:68:e0:9b:7f:50:94:88:35:b3:2f:c8:
72:fb:3c:fc:f3:dc:6c:09:d9:10:9c:95:f8:c5:5c:fe:cf:33:
27:1a:bd:f6:1c:26:0d:e5:ad:04:bb:85:62:d0:57:c2:3d:ad:
1a:ce:1a:f8:db:f7:8e:69:65:72:9b:e3:60:0d:38:9e:71:59:
c9:20:a7:2c:60:ef:f8:b8:b5:68:cc:17:e0:36:c3:c2:d0:64:
74:6b:98:09:14:66:07:40:9d:dc:78:01:4e:6f:fb:98:4d:3c:
5f:22:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:34:10 2025 by rpki-client