Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8oXNgf6vVE5NaaK1wdfcHZW_tO4.roa
File: 8oXNgf6vVE5NaaK1wdfcHZW_tO4.roa (raw, json)
Hash identifier: 4Lywh3ZUEwv2Z806JXfiDPpoxJkVITfMuwqUxqkXKrc=
Subject key identifier: F2:85:CD:81:FE:AF:54:4E:4D:69:A2:B5:C1:D7:DC:1D:95:BF:B4:EE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0190DA2691C42E9DEB635E8A04FE55959A5A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8oXNgf6vVE5NaaK1wdfcHZW_tO4.roa
Signing time: Mon 22 Jul 2024 11:14:39 +0000
ROA not before: Mon 22 Jul 2024 11:14:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.87.20.0/24 maxlen: 24
45.140.214.0/24 maxlen: 24
45.142.204.0/24 maxlen: 24
45.142.206.0/24 maxlen: 24
45.144.156.0/24 maxlen: 24
45.144.158.0/24 maxlen: 24
45.145.249.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
136.144.25.0/24 maxlen: 24
2a07:e343::/32 maxlen: 32
2a0f:e381::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:26:91:c4:2e:9d:eb:63:5e:8a:04:fe:55:95:9a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 11:14:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f285cd81feaf544e4d69a2b5c1d7dc1d95bfb4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:92:ae:f3:22:26:0e:39:19:82:bb:ad:b2:
1f:24:f4:d4:4b:2f:57:1f:a4:9f:6f:8c:89:a2:b5:
eb:1a:15:d9:46:68:9f:a1:34:ee:a7:c7:da:7b:01:
d4:12:1e:09:2d:79:c6:5d:d5:44:44:a6:10:60:c5:
b1:72:a0:7e:ba:b7:fa:bf:50:a1:5a:be:80:d1:c5:
9d:c3:dd:fa:81:c9:4a:99:63:57:42:31:91:14:cf:
b6:dd:43:60:33:0b:0f:a4:de:7e:52:13:08:50:f5:
57:84:08:43:1d:3e:ad:4a:0e:8a:d2:b1:d9:54:d0:
b1:47:c8:d6:30:92:ab:0a:c2:31:92:c5:32:d9:b6:
e1:f2:55:82:17:62:bd:6f:29:94:24:4e:4f:d2:99:
b5:b7:6e:43:e0:30:3a:b5:10:aa:17:eb:d7:f0:2b:
cd:08:2e:c6:97:26:c0:25:11:4b:ef:4c:ea:79:e6:
a9:12:87:83:d7:bc:82:b0:a2:94:c4:96:60:9f:f9:
4d:c9:05:ad:fc:60:75:c7:7c:47:29:9f:3f:5a:4c:
de:d1:6a:d5:22:0d:83:16:5e:8f:f5:26:16:00:ca:
07:ba:b6:67:94:fb:76:88:0d:10:b0:7d:c7:1b:8a:
df:ff:ae:47:fb:bc:4d:22:36:5f:c4:84:2c:ec:06:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:CD:81:FE:AF:54:4E:4D:69:A2:B5:C1:D7:DC:1D:95:BF:B4:EE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8oXNgf6vVE5NaaK1wdfcHZW_tO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.20.0/24
45.140.214.0/24
45.142.204.0/24
45.142.206.0/24
45.144.156.0/24
45.144.158.0/24
45.145.249.0/24
45.146.53.0/24
136.144.25.0/24
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
6d:f6:72:13:b4:24:8d:7e:d3:bb:b3:f2:56:6f:b0:86:23:61:
ab:f3:98:42:ab:23:7a:42:2d:9f:5a:b2:a7:33:44:75:50:9d:
4c:aa:fa:38:0d:d4:c4:1e:43:11:95:f1:e8:b3:00:4b:6c:d2:
ca:d7:33:1f:0b:a5:31:5e:e2:ae:e1:89:3e:2c:2d:7d:3e:9e:
ae:25:1e:5f:23:c1:e2:49:da:a4:c6:c9:d6:00:31:bf:fc:9f:
e8:75:dd:e2:51:56:86:67:cb:f4:a3:c4:37:ef:b8:fb:7e:dd:
83:e8:02:b4:59:95:3c:88:1d:a6:f7:e1:e0:ca:d8:64:ef:6e:
43:87:b5:0f:60:af:bb:f7:79:80:c1:6a:57:6e:be:19:7b:1a:
6c:99:53:8f:71:ea:83:ba:74:93:6e:e1:83:f7:87:d3:81:d4:
52:9a:4b:31:64:9a:12:a7:9a:5d:b8:ba:b1:9e:1c:3a:19:36:
a4:f8:7c:89:fd:54:f8:04:15:b9:fe:51:10:c1:c3:62:6e:3d:
e4:02:b3:68:15:47:0e:04:ac:44:bc:b7:ea:57:6a:dc:30:25:
00:60:62:99:3a:c0:0f:4d:ed:ed:ef:5c:16:fa:0c:fa:a0:9f:
d0:51:a2:3c:1d:99:df:62:95:8e:78:10:8e:14:43:a0:c1:3a:
5b:ca:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:31 2025 by rpki-client