Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Mp8iHCDpImM10bAdglwp1RmnPyA.roa
File: Mp8iHCDpImM10bAdglwp1RmnPyA.roa (raw, json)
Hash identifier: IsknojnzJXcMDCIamJupj0E8nxL66qUg7rKnMKep7F4=
Subject key identifier: 32:9F:22:1C:20:E9:22:63:35:D1:B0:1D:82:5C:29:D5:19:A7:3F:20
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01962F113948D59FD17C7E130626B0B8E540
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Mp8iHCDpImM10bAdglwp1RmnPyA.roa
Signing time: Sun 13 Apr 2025 12:12:59 +0000
ROA not before: Sun 13 Apr 2025 12:12:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.88.88.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 07:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:11:39:48:d5:9f:d1:7c:7e:13:06:26:b0:b8:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 13 12:12:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329f221c20e9226335d1b01d825c29d519a73f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:15:7b:83:e7:f5:74:7a:d1:2a:ea:96:25:
b0:4c:3e:97:57:83:d5:c0:b3:08:b9:5d:90:90:26:
f8:7a:1d:19:ac:b5:95:63:78:aa:da:ad:1b:2e:93:
c8:87:fe:6b:76:cf:10:59:b6:0f:65:f6:60:65:11:
71:34:a5:06:99:af:9e:21:ea:ee:dd:19:65:8a:c7:
4e:e3:59:08:5d:46:85:91:c6:99:31:68:17:a3:66:
ee:c7:b9:c9:3a:90:72:dc:c4:a1:2b:d7:2c:20:c3:
ba:d0:c3:f4:73:93:fa:b4:78:c0:d5:b9:14:c7:25:
54:02:b2:c9:29:f4:9c:96:bb:7d:32:53:75:0d:2e:
24:1f:fa:be:39:a4:ac:8d:84:23:ff:6d:a3:8c:09:
aa:ec:bf:1f:7e:73:ec:d2:d3:a5:12:c7:8b:97:ba:
40:21:54:ac:8f:a9:f4:c4:8c:fc:2e:0e:e6:bd:4f:
44:cb:8e:b9:1f:9d:46:c1:a8:34:e1:42:71:bb:d6:
e2:28:d9:67:58:47:39:3d:af:35:08:72:1b:bf:5a:
f6:0d:6b:a3:56:a5:a4:78:c3:63:f2:09:c9:60:42:
78:3a:59:e9:fb:7d:04:db:b0:24:f0:5d:8e:fb:6a:
ca:1e:68:6c:ec:33:a8:43:a7:99:32:9c:d4:f1:6d:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:22:1C:20:E9:22:63:35:D1:B0:1D:82:5C:29:D5:19:A7:3F:20
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Mp8iHCDpImM10bAdglwp1RmnPyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
45.151.91.0/24
79.110.62.0/24
94.156.104.0/24
94.156.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:be:d7:b9:1a:fd:85:04:f0:7f:94:4b:f3:fa:7c:08:89:68:
1a:4c:64:f5:40:e7:a4:d1:88:ac:dc:f4:fe:e7:a3:3d:36:f0:
26:3a:fb:b8:60:d8:26:fc:b3:f1:a2:11:df:30:28:e8:5e:da:
b9:1a:f3:66:3c:c4:38:07:0b:9a:a6:94:86:5f:22:e5:67:c3:
61:56:27:6c:e0:ee:23:af:9e:00:99:5d:1b:d1:2f:b2:55:59:
f1:54:12:a9:1f:e3:8d:ae:b8:9d:05:9f:f0:4d:fb:56:08:d5:
76:6a:bd:6d:8b:1d:1e:51:2a:7f:0f:2f:80:e4:5d:d9:72:ae:
98:b4:b1:e5:6f:72:23:20:f8:64:b1:cd:dd:4c:b6:a6:9a:6d:
4b:e1:b5:18:92:39:69:22:01:0a:77:ef:09:59:9b:b7:23:52:
dd:92:68:12:e3:1e:99:23:48:da:8a:94:de:e5:bb:14:ea:ef:
ca:d0:14:85:2d:6b:c7:d5:fe:93:4b:c2:3d:c9:19:dc:98:ba:
0b:4f:18:a4:45:9c:21:8f:3c:d5:14:bc:68:ee:f7:28:93:d9:
33:7c:ae:b0:c1:fb:85:05:1d:12:c1:20:a1:5a:f6:04:22:15:
26:cc:d2:62:5c:d4:82:61:55:b1:82:fd:42:23:d5:7f:b4:c4:
6c:7b:6d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:17 2025 by rpki-client