Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KsHerj6kLhKkRC0Y-0g3CxxOwQE.roa
File: KsHerj6kLhKkRC0Y-0g3CxxOwQE.roa (raw, json)
Hash identifier: co3PkoAK0r/0xfdDIlZQZI56lmtiUx3YaFg0PSCVdOU=
Subject key identifier: 2A:C1:DE:AE:3E:A4:2E:12:A4:44:2D:18:FB:48:37:0B:1C:4E:C1:01
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193CF4E1C2E5CF741CF4E3CFB3B4B99B83E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KsHerj6kLhKkRC0Y-0g3CxxOwQE.roa
Signing time: Mon 16 Dec 2024 11:50:22 +0000
ROA not before: Mon 16 Dec 2024 11:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:4e:1c:2e:5c:f7:41:cf:4e:3c:fb:3b:4b:99:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 16 11:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ac1deae3ea42e12a4442d18fb48370b1c4ec101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:8c:75:a4:f7:a4:44:0e:93:31:f6:fc:12:
6a:a7:ea:63:54:17:34:5b:00:57:ca:3c:ab:91:82:
74:cd:8b:66:f6:a8:58:9c:f3:af:5f:87:e7:c7:ea:
c1:2c:ad:9a:a7:4f:ea:50:4e:c1:1f:81:44:b2:0c:
04:92:19:d6:0f:90:41:da:de:99:03:d1:be:7c:5b:
6a:e8:07:fd:ec:ca:c1:2d:45:9b:b7:21:93:db:94:
e0:ee:75:44:ed:b3:f1:9e:7b:07:1f:76:76:fc:55:
8e:f8:00:81:09:c2:1a:7d:57:ab:7d:32:94:2c:32:
46:47:f5:7d:dc:25:82:49:f9:e6:44:79:5e:87:11:
9a:4f:1b:d8:6d:4e:8f:42:00:3b:51:89:f8:a6:4d:
29:ec:2c:ff:d9:61:69:a4:2d:f9:61:f4:97:be:bf:
50:4a:02:9b:76:25:f6:a5:1d:7b:f7:fe:32:f0:d5:
31:f6:ef:2a:77:bf:25:3e:2b:5c:b8:b4:71:c2:eb:
9a:fb:79:07:82:1f:d2:82:3b:7d:63:48:2c:5a:de:
f8:ae:5e:32:20:85:a1:c8:6c:73:b5:90:91:3a:b3:
6d:c0:de:58:b3:16:8b:22:92:5a:78:69:0c:44:b8:
d0:ef:f5:c1:99:50:af:f4:cd:42:42:a2:ba:c0:39:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:DE:AE:3E:A4:2E:12:A4:44:2D:18:FB:48:37:0B:1C:4E:C1:01
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KsHerj6kLhKkRC0Y-0g3CxxOwQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.149.235.0/24
87.120.88.0/24
109.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
94:75:0b:75:6a:fe:d9:90:55:3c:a9:8e:37:f2:bf:4c:21:ae:
0d:4b:5f:bd:cf:9b:4f:ab:dc:e7:b4:e0:b9:c0:ae:d4:a9:58:
ba:ef:ff:f7:44:ba:22:79:63:6c:ec:8f:1a:da:e2:09:b2:3f:
fc:cc:7e:5a:73:2c:67:d3:e1:8c:c4:ac:d1:04:27:63:06:b6:
5e:f6:db:82:d1:79:30:21:5d:e3:c8:00:c6:9e:67:5c:2a:60:
26:06:f6:58:bb:64:42:a4:77:1b:cd:a6:b1:24:6d:d3:11:fc:
10:d3:bd:4b:80:65:95:15:bf:94:bf:a8:0c:55:03:1d:74:79:
9d:a0:d7:af:e9:77:eb:7a:36:a2:34:37:5b:6a:d2:78:73:62:
a0:0e:07:81:62:47:68:d1:df:14:74:85:df:7c:6a:6b:3e:fa:
75:88:e7:23:b3:f8:5e:31:28:3c:47:1a:70:b7:fd:09:d1:14:
fd:d0:d7:78:c5:4f:5c:90:e6:ef:81:c2:44:5a:92:a1:f3:ac:
da:20:b6:d8:47:27:41:2f:a6:b5:66:3b:d3:b2:6d:40:5c:2f:
6a:79:ab:7a:a3:81:ec:f6:21:dd:57:d6:42:20:c4:96:66:81:
00:d1:88:aa:d2:95:5d:e1:d1:f5:33:f2:a3:79:fc:b7:36:53:
cd:a9:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:57:53 2025 by rpki-client