Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VXI0N45ybrImVgJf9UGr4tk2pK8.roa
File: VXI0N45ybrImVgJf9UGr4tk2pK8.roa (raw, json)
Hash identifier: tuCJUMCPIP8lR9Hc4HGokhwt6Vm1R83omxFD08ggO5I=
Subject key identifier: 55:72:34:37:8E:72:6E:B2:26:56:02:5F:F5:41:AB:E2:D9:36:A4:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193D451AD5C7136D3F5FFE8D38194B22C6D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VXI0N45ybrImVgJf9UGr4tk2pK8.roa
Signing time: Tue 17 Dec 2024 11:12:22 +0000
ROA not before: Tue 17 Dec 2024 11:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43548
IP address blocks: 85.217.176.0/22 maxlen: 24
87.120.99.0/24 maxlen: 24
87.121.108.0/23 maxlen: 23
91.92.168.0/22 maxlen: 22
93.123.65.0/24 maxlen: 24
94.156.4.0/23 maxlen: 23
94.156.80.0/21 maxlen: 21
94.156.97.0/24 maxlen: 24
2a00:1728:2d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:51:ad:5c:71:36:d3:f5:ff:e8:d3:81:94:b2:2c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 17 11:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=557234378e726eb22656025ff541abe2d936a4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:0a:62:4e:8d:42:9f:db:5e:05:36:ea:11:
3b:31:48:2a:f6:48:35:c1:6e:3c:41:75:11:76:5c:
22:f5:a9:95:bd:9e:3d:b3:b8:fc:37:89:54:f9:3c:
4a:50:27:63:bf:73:22:a4:d2:5c:0d:51:2f:46:df:
3c:4a:f4:54:32:45:82:cc:4c:31:e4:90:b6:f0:10:
e8:19:84:83:f5:7f:80:68:88:dc:26:6d:57:a7:a7:
e8:ce:24:d4:b7:85:f2:56:16:76:95:ee:4b:e3:25:
61:2e:f9:ef:a8:da:ca:ee:10:e8:e5:3d:9e:ba:18:
04:70:83:c8:08:0f:55:ca:f8:b2:1a:91:5b:79:72:
66:87:aa:32:a2:82:c7:b3:0c:0e:61:7b:25:be:04:
46:c6:b2:c5:09:8e:16:28:fb:34:cd:45:3b:2a:4b:
bc:3a:9b:49:3d:4f:ad:a7:6b:66:9d:84:c1:96:e3:
1c:ca:5f:dd:e1:b3:31:d5:bf:be:97:7e:6e:5d:de:
f2:78:c6:c7:8a:65:25:3d:c9:c5:82:d4:e8:b6:f3:
ed:d2:2b:a1:18:bc:fe:e0:8b:fc:21:d1:79:c8:cf:
7e:bb:d0:bc:9b:71:f4:3f:a9:f2:e3:b3:5d:c4:ef:
88:b8:bd:26:39:1a:6e:01:ba:8a:0b:8c:8a:f9:d7:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:34:37:8E:72:6E:B2:26:56:02:5F:F5:41:AB:E2:D9:36:A4:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VXI0N45ybrImVgJf9UGr4tk2pK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.176.0/22
87.120.99.0/24
87.121.108.0/23
91.92.168.0/22
93.123.65.0/24
94.156.4.0/23
94.156.80.0/21
94.156.97.0/24
IPv6:
2a00:1728:2d::/48
Signature Algorithm: sha256WithRSAEncryption
52:94:65:3e:74:b8:ab:79:bf:04:84:16:df:e6:de:ae:ee:46:
d5:14:83:72:de:7a:cd:f0:e6:a5:35:af:df:15:5b:b4:23:bd:
4b:37:b0:2c:c7:f0:c2:b2:2c:3b:54:fa:81:6f:f4:7e:12:f0:
9d:59:cd:50:0b:4d:29:1b:47:f6:99:1d:e3:e2:c5:ad:c4:9d:
0d:95:0b:76:03:3a:6e:b3:3f:6f:13:29:f4:80:b6:6d:67:e2:
25:3c:96:eb:63:13:f1:18:76:d3:c0:19:dc:c7:eb:13:a5:1a:
73:24:64:2f:5b:5e:02:77:ab:08:e6:dc:89:2c:ff:9a:f9:da:
67:48:8f:c2:66:71:bd:85:d9:fb:a4:78:1e:7f:71:5f:81:b5:
6b:83:8a:c7:61:58:4a:0c:89:b2:be:b0:ba:59:88:03:45:91:
91:77:be:09:62:e6:87:f4:96:7e:13:b3:4f:8d:82:3c:e4:59:
1b:b3:22:4d:bc:50:e7:aa:d1:6c:ac:dc:ce:cb:b1:ce:ac:2d:
6f:1d:97:73:d7:16:60:6b:d9:16:e0:76:2d:1e:d5:78:70:b2:
aa:a7:97:a3:7d:a6:fd:ad:7c:9f:b1:cc:c3:c3:02:2d:e8:8f:
3f:5c:36:09:f9:e4:b0:45:ef:65:b8:01:ac:a1:02:e2:19:3b:
56:dd:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:58:27 2025 by rpki-client