Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irNbhoUIYnsxH9Ox_MYxkX470TI.roa
File: irNbhoUIYnsxH9Ox_MYxkX470TI.roa (raw, json)
Hash identifier: NpdFKjGTD2KeCos+X1daBXLKbOHGhLIPlBx/ioGP0aE=
Subject key identifier: 8A:B3:5B:86:85:08:62:7B:31:1F:D3:B1:FC:C6:31:91:7E:3B:D1:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194CB8E9568E27FDB999A79C67EC9D91BFB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irNbhoUIYnsxH9Ox_MYxkX470TI.roa
Signing time: Mon 03 Feb 2025 11:25:06 +0000
ROA not before: Mon 03 Feb 2025 11:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
185.225.74.0/23 maxlen: 24
193.149.28.0/22 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 13:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:8e:95:68:e2:7f:db:99:9a:79:c6:7e:c9:d9:1b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 3 11:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab35b868508627b311fd3b1fcc631917e3bd132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:02:ca:dd:c0:61:c7:a2:2c:c8:dc:03:a1:
f4:88:68:48:9a:6b:0f:2e:75:35:22:6c:d7:df:73:
c9:61:00:9b:ed:7d:e1:c7:07:95:51:be:28:a4:54:
17:79:7e:28:6f:67:02:89:54:cb:c7:49:b5:7e:e6:
5b:77:7a:48:af:da:29:15:13:ff:35:8a:8c:c9:78:
6c:e6:a6:4b:25:50:c6:22:b6:80:a0:4a:d8:51:67:
27:76:b8:d8:90:d2:eb:b3:a6:a2:51:23:87:a5:45:
4c:50:72:bc:9b:32:5a:c8:7e:41:b8:9a:88:25:3d:
28:ab:17:a6:b6:2b:bf:42:67:40:b9:be:b2:e9:40:
73:70:33:2d:b2:05:bc:d7:b1:cc:a4:2e:e9:41:15:
b2:bd:d6:41:f0:fc:68:eb:a6:f8:3b:d4:48:50:6b:
81:17:fe:69:4c:11:de:30:42:94:d1:1d:03:13:ca:
ec:e2:00:84:21:4e:2c:a6:75:3a:0d:cb:5e:8d:f2:
c8:f6:e4:02:a6:37:09:0c:d6:3d:93:81:47:9d:e6:
c0:46:59:38:e7:dc:f7:01:7c:3d:68:52:ce:95:3c:
29:92:3e:4f:70:16:65:fa:6e:da:62:5a:b5:d8:bb:
f0:5b:37:9f:92:5d:95:38:26:5e:54:7d:a0:b8:c5:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:5B:86:85:08:62:7B:31:1F:D3:B1:FC:C6:31:91:7E:3B:D1:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irNbhoUIYnsxH9Ox_MYxkX470TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.48.0/24
79.110.61.0/24
85.217.144.0/23
185.225.74.0/23
193.149.28.0/22
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1c:41:77:f8:10:ac:b8:25:11:48:96:41:b3:96:85:d8:fc:
81:f9:f4:d2:ba:a0:06:12:17:05:89:97:9d:57:c8:55:9e:54:
76:4a:c7:67:21:ac:1e:d7:ca:98:e7:f2:a3:c1:c4:c2:77:55:
b1:15:28:47:28:7c:0b:dc:42:0f:d2:e3:75:64:08:81:93:69:
ee:55:19:49:21:f8:6f:c6:71:f2:fe:79:0c:3f:21:6b:54:09:
1d:1c:fe:4e:38:f2:9d:49:ee:a9:6e:5d:17:74:d0:a2:aa:fa:
0f:b7:20:54:55:ef:26:22:5f:a6:4f:86:d4:31:be:d6:df:1d:
f4:41:54:0e:d9:fa:c0:e7:80:ea:3d:ff:9f:af:1e:67:13:f9:
51:e4:c4:61:77:9c:e1:ad:eb:67:f6:72:8b:fd:3f:16:d0:75:
ef:7b:46:1b:3d:70:bb:43:91:d9:ed:ee:b2:96:b6:57:3a:65:
aa:49:5c:6d:71:ca:8e:5e:42:29:f4:0d:62:f2:26:c9:ef:10:
6f:87:71:1c:9a:ed:fd:da:70:1f:2f:90:f0:be:65:7a:cd:44:
0b:7a:cd:d9:99:30:18:ff:22:d2:c3:3b:75:a0:84:d6:1d:99:
b9:f4:90:11:39:a8:98:04:89:4c:c7:31:28:fa:a6:e1:d7:84:
d6:70:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:26 2025 by rpki-client