Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SEpzmts9ZJR4eSU8WtmgxA3D4k4.roa
File: SEpzmts9ZJR4eSU8WtmgxA3D4k4.roa (raw, json)
Hash identifier: VGD75DMfnLs0Q4srLzajbxNHRV2CFX35kb3SRhxoNnI=
Subject key identifier: 48:4A:73:9A:DB:3D:64:94:78:79:25:3C:5A:D9:A0:C4:0D:C3:E2:4E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01960BFC30F5B8ED6FBA7D8B28374DA27096
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SEpzmts9ZJR4eSU8WtmgxA3D4k4.roa
Signing time: Sun 06 Apr 2025 16:43:19 +0000
ROA not before: Sun 06 Apr 2025 16:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
109.111.42.0/23 maxlen: 24
109.111.44.0/22 maxlen: 24
109.111.56.0/22 maxlen: 22
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
185.65.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 14:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:fc:30:f5:b8:ed:6f:ba:7d:8b:28:37:4d:a2:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 6 16:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484a739adb3d64947879253c5ad9a0c40dc3e24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:d4:9d:5f:ec:e0:f6:a5:e0:d4:56:8b:47:
e1:2a:3d:da:e2:e8:47:01:11:50:59:54:5a:60:cf:
e5:23:75:b7:e7:11:53:4f:68:5a:dc:72:a4:08:c6:
f4:7c:cf:c6:c4:43:c7:07:b2:aa:f5:28:e5:5d:3f:
f5:d3:41:71:d3:29:5e:f5:d0:06:09:ba:96:9b:0d:
c2:62:f5:1c:01:73:6b:07:c5:96:8a:49:87:a6:81:
d7:4d:cb:15:01:58:0f:a4:b0:e3:b4:f6:83:81:16:
0c:ef:3c:17:9a:6d:10:92:01:c5:41:d5:2f:31:ef:
ee:d6:2a:4b:91:b5:5f:ff:8f:9b:0d:4b:80:35:75:
63:87:71:3d:99:d1:b4:2d:ad:9e:f3:20:00:f4:97:
2b:94:28:93:93:26:dd:df:1d:1d:ab:b2:e2:a2:b0:
1d:13:e9:cd:af:ec:de:cf:9a:a1:9c:40:1b:b6:9a:
0d:0a:ba:0e:9c:22:64:58:b6:c1:51:fb:f3:3f:bd:
3b:25:a7:dd:3b:d0:3d:4c:80:ab:de:2c:1b:88:0a:
87:76:9d:2f:db:0e:c5:a1:f7:ee:b2:54:75:3f:8c:
90:a4:d7:e7:47:21:e9:77:c5:3f:f5:36:e3:31:5e:
ba:cb:d7:b3:55:e0:00:f5:dd:6c:4d:04:c6:2e:4f:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:73:9A:DB:3D:64:94:78:79:25:3C:5A:D9:A0:C4:0D:C3:E2:4E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SEpzmts9ZJR4eSU8WtmgxA3D4k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/20
109.111.56.0/22
176.221.20.0-176.221.27.255
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5b:ba:47:9c:9d:1f:0c:d1:73:c3:9b:22:a5:a9:9e:ba:81:
4e:d3:b7:cd:42:19:db:bf:4e:c0:a1:d6:6d:00:ba:93:8f:22:
73:6c:64:a4:3a:bf:18:29:d6:64:d0:78:e2:8b:7f:a8:43:2c:
1c:01:9b:bc:ed:c3:f4:35:74:c2:e0:d0:99:a9:af:82:c8:6c:
b5:9d:fd:38:e4:3e:7d:c4:78:c1:f5:c2:52:8d:d7:e1:23:c9:
92:02:9f:c1:aa:79:fc:c1:11:f9:dd:02:ca:92:8f:76:a6:47:
28:13:83:da:1a:15:3c:63:21:f9:c3:e5:f4:7e:03:9c:01:4e:
51:32:76:46:46:79:96:80:5d:72:db:96:d1:6f:09:0d:d8:27:
3f:c1:63:4b:61:dd:6a:75:a6:fd:1e:8c:52:c7:6b:ca:c4:a9:
5f:5a:f1:71:d4:cf:18:03:4c:e9:81:d0:c5:f0:4a:42:d6:cf:
da:df:ba:4e:53:11:4a:aa:ab:fe:20:4e:48:eb:58:ff:11:fb:
0b:a3:10:fe:5c:f0:31:01:6c:48:29:df:5a:c0:4c:0a:69:49:
c1:44:2b:dd:5a:93:41:08:2b:57:13:a6:2b:df:94:59:4f:a1:
ae:1a:e0:82:fe:e7:06:23:61:6e:89:f3:fe:f7:1a:58:b5:e8:
93:15:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:07:38 2025 by rpki-client