Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t7aHUOkaxr8KK4eaAPQC8W2UEQY.roa
File: t7aHUOkaxr8KK4eaAPQC8W2UEQY.roa (raw, json)
Hash identifier: hHBT9FjrOaXWW9qtH4/uwNTAngWrKYtnxF/nqFrnSLI=
Subject key identifier: B7:B6:87:50:E9:1A:C6:BF:0A:2B:87:9A:00:F4:02:F1:6D:94:11:06
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01960F5FAD28F2EFAF9CBEA780809DC5359C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t7aHUOkaxr8KK4eaAPQC8W2UEQY.roa
Signing time: Mon 07 Apr 2025 08:30:50 +0000
ROA not before: Mon 07 Apr 2025 08:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.88.88.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 11:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:5f:ad:28:f2:ef:af:9c:be:a7:80:80:9d:c5:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 7 08:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b68750e91ac6bf0a2b879a00f402f16d941106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:8a:90:73:30:c3:d3:03:c1:03:6d:f5:1d:
78:15:b6:8c:4f:2f:e1:ab:4b:48:b0:04:2e:e1:7c:
91:c6:be:18:2b:a8:d3:83:00:e1:57:eb:de:eb:4b:
dd:09:02:33:c9:09:39:fe:76:45:2a:e7:aa:05:98:
b3:a5:d1:af:2c:99:5b:65:36:5a:76:9b:07:1d:e6:
35:22:03:a0:cf:c6:c3:df:8b:4a:8f:9f:df:24:0e:
ff:1d:2b:b5:bd:f8:a5:b3:59:47:d8:5c:b4:21:30:
46:36:09:f8:04:bb:66:b2:80:5c:3b:60:dd:a2:99:
e2:13:db:24:2a:de:0c:eb:cf:1c:38:fb:1e:8e:3d:
88:af:70:ee:ea:eb:41:34:a9:ef:85:42:c6:61:e1:
b5:73:1b:87:51:22:da:90:26:0e:2c:34:2e:67:1d:
35:81:2c:a8:da:f2:51:42:7e:ec:63:a7:f6:c1:e1:
a3:f2:5d:66:61:fd:00:f4:ed:e1:39:e4:a0:d8:64:
37:b1:6d:9e:14:8c:2c:49:1d:62:a9:97:5d:cd:eb:
45:d1:d6:0b:92:09:97:cf:dc:4a:42:cc:de:c4:e6:
4e:0f:27:19:9a:90:9f:73:7f:e6:c5:e9:da:fc:3c:
f4:ef:93:29:98:a6:d2:b7:5f:48:03:42:c9:c8:36:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:87:50:E9:1A:C6:BF:0A:2B:87:9A:00:F4:02:F1:6D:94:11:06
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t7aHUOkaxr8KK4eaAPQC8W2UEQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
79.110.62.0/24
87.121.86.0/24
94.156.104.0/24
94.156.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7c:74:a9:40:b6:5b:f9:44:ca:ce:ba:78:3b:c1:90:ec:3c:
75:60:d9:13:49:34:3a:b4:2b:37:ac:28:cf:6a:b7:64:94:2d:
f3:4c:cc:42:2c:83:1a:6b:04:46:e0:51:34:45:14:c9:82:56:
cf:d1:3d:1c:e2:f5:59:82:5f:e3:6c:cb:f9:30:85:86:40:e4:
8f:fd:66:65:3d:fb:25:e5:ea:bf:3a:cb:03:66:ff:9e:14:9b:
da:16:7e:c8:54:9f:63:cd:17:37:f9:58:6c:e3:79:0f:1f:5c:
e8:de:54:fd:a5:35:2f:db:04:43:31:3f:df:07:fe:75:59:bb:
3d:6e:f2:c7:72:45:65:6b:f3:8d:97:af:85:53:eb:0e:e7:65:
ac:24:89:a4:52:a5:26:6a:55:d7:17:69:3c:99:19:3c:95:9d:
b0:97:db:57:8a:c3:d1:c2:8e:94:dd:91:56:d0:61:d7:48:5d:
48:2e:9e:da:1b:66:f0:4f:43:77:05:5a:c4:f5:f5:4a:59:d4:
3f:62:1b:5a:2e:52:05:67:38:45:9c:6a:e7:b5:52:b4:33:2a:
c2:db:3f:d5:b4:80:d2:2c:ec:71:96:1e:57:58:59:5c:fa:b4:
61:60:0d:d3:7f:b8:bb:4a:68:50:27:b5:e1:2d:fe:62:93:2d:
b6:d4:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:43 2025 by rpki-client