Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QOFQXZ1UTaEoJHM1su7K09u-bAM.roa
File: QOFQXZ1UTaEoJHM1su7K09u-bAM.roa (raw, json)
Hash identifier: Ni1ILaB1YZ/8XtSEyCUkf1HC4s+fR4mBow1x1WS9RXs=
Subject key identifier: 40:E1:50:5D:9D:54:4D:A1:28:24:73:35:B2:EE:CA:D3:DB:BE:6C:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01948933E4BA537C281FFBD3E75167125AE3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QOFQXZ1UTaEoJHM1su7K09u-bAM.roa
Signing time: Tue 21 Jan 2025 14:11:06 +0000
ROA not before: Tue 21 Jan 2025 14:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.128.96.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 15:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:33:e4:ba:53:7c:28:1f:fb:d3:e7:51:67:12:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 21 14:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40e1505d9d544da128247335b2eecad3dbbe6c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:eb:3d:62:98:66:55:4e:2b:5e:75:f2:ea:
4f:78:dc:ce:1e:3e:6b:5f:91:07:54:3d:53:ff:9f:
86:d7:2f:40:35:1f:d1:1b:16:ee:6d:54:da:04:fa:
0d:1e:f0:e6:86:8a:2e:16:89:61:97:f8:10:52:35:
b0:6b:78:dc:fb:1c:65:6c:b7:72:fc:6e:cc:3f:ae:
06:a6:75:10:b2:db:38:e1:d0:49:c6:ad:5e:ac:a7:
a3:9d:25:a3:7b:0b:31:88:e9:a6:26:c2:c2:61:87:
00:1b:de:65:cd:ad:8f:9c:09:9d:48:0f:d6:60:a8:
1d:d4:a8:4e:f9:42:35:67:22:7c:c5:53:a1:b8:c0:
24:af:07:3e:b6:61:21:21:52:35:25:e9:55:61:94:
80:84:0e:e6:0f:d4:85:37:f2:19:56:7d:32:ae:1a:
2a:2e:1b:4b:3b:d8:e1:9d:04:a6:2b:de:fa:08:31:
56:e6:90:a1:ad:15:c3:04:a2:5f:7b:16:37:3c:6d:
55:53:8a:ae:d8:ff:64:83:ae:da:c7:e5:fe:8c:5e:
23:1b:03:f8:9d:44:11:8f:ef:49:e9:27:b2:7d:a4:
ae:4f:5b:9d:43:89:b8:2c:72:d2:a7:90:32:d1:c8:
19:d1:5f:8d:d8:2a:85:79:cf:87:1a:94:b0:d8:02:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E1:50:5D:9D:54:4D:A1:28:24:73:35:B2:EE:CA:D3:DB:BE:6C:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QOFQXZ1UTaEoJHM1su7K09u-bAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/24
87.120.33.0/24
87.121.38.0/24
87.121.58.0/24
94.103.127.0/24
94.156.2.0/24
94.156.79.0/24
94.156.113.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9c:97:f3:f7:78:09:71:ed:76:20:1f:91:ab:95:93:38:1a:
24:70:d6:b8:0b:af:8e:bc:15:ba:11:7d:6f:04:84:e8:ed:eb:
1f:a2:04:00:f7:c7:90:b2:e0:1f:e7:88:f4:35:5b:f7:69:6b:
26:22:94:59:1e:1b:6f:64:91:75:b9:f8:b8:5e:9d:c7:b4:c3:
05:bc:6f:58:2b:a9:4d:12:9f:b7:0b:3f:5d:f2:4d:85:0c:6b:
aa:86:cb:5b:6e:05:f4:5b:c0:f3:7f:20:bc:c3:59:f7:6a:70:
76:2e:a8:df:9e:98:b5:12:82:27:a3:2d:3f:bc:80:39:b5:92:
2e:3c:79:07:fa:57:6f:95:8c:30:1d:32:f3:5d:6e:da:a4:ff:
e0:fa:07:20:b2:e9:4e:5c:59:9e:ed:af:60:41:5e:1e:78:b1:
1b:29:e7:21:89:cf:1b:3b:cf:e4:f6:96:48:41:38:0f:1f:22:
4a:72:2a:22:5a:5b:c7:57:8a:8f:15:55:67:18:05:4e:c3:f9:
ab:6d:fe:54:70:da:dd:bd:9e:4f:c6:67:21:14:51:33:bc:76:
f4:ea:1e:de:3a:d4:58:ee:24:02:a1:d9:75:19:96:3a:ad:97:
22:7e:04:b1:4f:13:63:3b:53:45:3f:6b:13:48:53:a1:7b:fb:
9d:f9:d2:19
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZSJM+S6U3woH/vT51FnElrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTIxMTQxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGUxNTA1ZDlkNTQ0ZGExMjgyNDczMzViMmVlY2FkM2RiYmU2YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWjrPWKYZlVOK1518upPeNzOHj5r
X5EHVD1T/5+G1y9ANR/RGxbubVTaBPoNHvDmhoouFolhl/gQUjWwa3jc+xxlbLdy
/G7MP64GpnUQsts44dBJxq1erKejnSWjewsxiOmmJsLCYYcAG95lza2PnAmdSA/W
YKgd1KhO+UI1ZyJ8xVOhuMAkrwc+tmEhIVI1JelVYZSAhA7mD9SFN/IZVn0yrhoq
LhtLO9jhnQSmK976CDFW5pChrRXDBKJfexY3PG1VU4qu2P9kg67ax+X+jF4jGwP4
nUQRj+9J6SeyfaSuT1udQ4m4LHLSp5Ay0cgZ0V+N2CqFec+HGpSw2AJp+wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFEDhUF2dVE2hKCRzNbLuytPbvmwDMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUU9GUVhaMVVUYUVvSkhNMXN1N0swOXUtYkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALYBgAwQA
V3ghAwQAV3kmAwQAV3k6AwQAXmd/AwQAXpwCAwQAXpxPAwQAXpxxAwQAjWIEMA0G
CSqGSIb3DQEBCwUAA4IBAQBonJfz93gJce12IB+Rq5WTOBokcNa4C6+OvBW6EX1v
BITo7esfogQA98eQsuAf54j0NVv3aWsmIpRZHhtvZJF1ufi4Xp3HtMMFvG9YK6lN
Ep+3Cz9d8k2FDGuqhstbbgX0W8DzfyC8w1n3anB2Lqjfnpi1EoInoy0/vIA5tZIu
PHkH+ldvlYwwHTLzXW7apP/g+gcgsulOXFme7a9gQV4eeLEbKechic8bO8/k9pZI
QTgPHyJKcioiWlvHV4qPFVVnGAVOw/mrbf5UcNrdvZ5PxmchFFEzvHb06h7eOtRY
7iQCodl1GZY6rZcifgSxTxNjO1NFP2sTSFOhe/ud+dIZ
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:30 2025 by rpki-client