Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/li4HgHgxgD_dCSbAu2sd2MQNeJ4.roa
File: li4HgHgxgD_dCSbAu2sd2MQNeJ4.roa (raw, json)
Hash identifier: /FPLNWl0OTrL/jXDRAr0Gvq3Mm9timSzpRFz37ror3E=
Subject key identifier: 96:2E:07:80:78:31:80:3F:DD:09:26:C0:BB:6B:1D:D8:C4:0D:78:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01963E69006489EE64AE009917651FE7B1C3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/li4HgHgxgD_dCSbAu2sd2MQNeJ4.roa
Signing time: Wed 16 Apr 2025 11:43:10 +0000
ROA not before: Wed 16 Apr 2025 11:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.14.167.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 14:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:69:00:64:89:ee:64:ae:00:99:17:65:1f:e7:b1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 16 11:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962e07807831803fdd0926c0bb6b1dd8c40d789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:86:e7:c4:85:9e:05:b7:f7:18:2c:06:98:
60:e6:1b:8b:8c:dd:86:b5:9b:b7:17:6b:e1:fa:f2:
20:2a:6e:d9:ad:40:af:6b:09:65:cc:38:4a:36:9f:
84:60:06:38:99:cf:64:e8:84:88:43:ef:e4:95:3f:
e9:1c:0e:c8:77:2f:3b:38:f4:a2:47:04:71:32:07:
6a:43:73:dd:d8:6c:6f:4a:dc:4e:b3:32:51:bd:2f:
57:f4:c7:c2:b7:3a:31:54:6c:01:5b:f1:ff:da:c1:
21:55:08:ba:49:41:68:5f:5c:be:77:23:fd:c5:0f:
39:86:cd:c6:33:aa:49:8b:86:aa:5e:f1:44:64:b8:
a3:ba:ee:c1:89:2c:9f:76:d7:bf:a1:b0:f0:72:ad:
e6:0c:02:10:ae:43:65:48:20:80:d6:bd:0e:50:b3:
12:72:2a:04:99:dd:91:f8:81:69:dd:37:b9:95:80:
b4:43:a7:9d:2d:8e:5c:1d:53:7c:83:11:e2:63:d4:
f6:85:59:68:ac:69:2d:6c:bb:3a:e6:02:d1:f7:78:
44:c3:1d:01:57:f0:8d:5c:77:bb:0e:d7:42:ba:48:
23:f0:6b:10:74:e4:af:cf:a2:77:24:d6:94:f3:11:
13:07:55:60:b8:c5:d5:ad:6d:98:f5:34:d9:dc:02:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:07:80:78:31:80:3F:DD:09:26:C0:BB:6B:1D:D8:C4:0D:78:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/li4HgHgxgD_dCSbAu2sd2MQNeJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
83.219.98.0/24
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:12:09:45:72:a1:ff:62:79:41:93:b3:45:8e:52:5e:4e:a7:
85:41:6a:dc:ef:a1:ff:d1:3f:53:50:bd:1a:4b:7e:15:1e:5c:
6f:06:5b:05:1c:e4:c3:ea:ab:2f:ed:a8:a7:c2:08:a6:5b:08:
7e:66:33:d4:96:25:2a:ba:85:d9:3e:d9:2e:6a:31:72:3d:26:
7a:f8:1d:62:1f:be:9a:0f:9b:04:59:a7:86:51:03:8a:21:60:
da:1e:38:85:e6:cf:60:c4:a5:33:85:29:fb:4b:6e:0c:ab:77:
f0:90:83:b6:d4:bc:57:9a:9c:87:ef:06:18:92:95:59:8d:15:
24:5d:d8:74:cb:ca:6f:ea:4a:00:68:de:91:91:7b:f1:23:ba:
0b:fb:06:05:7d:cb:a6:39:9e:47:74:58:1b:0f:58:49:07:4b:
24:3f:82:20:81:98:8b:21:43:5d:70:d9:7d:74:93:d3:1c:08:
1d:59:60:a7:ea:02:4b:c9:61:30:34:15:18:a1:00:d1:5f:08:
a9:c3:70:d4:af:fb:99:f3:ef:85:36:30:05:07:b1:ee:30:fe:
72:70:7a:90:8f:90:57:da:8a:29:da:57:b2:81:d3:c6:33:b4:
1b:5e:7e:de:7b:dd:e3:59:3a:c8:76:2e:93:97:a9:b3:97:be:
51:18:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:53 2025 by rpki-client