Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lGrqE5_NZ5UvsqBwAR4ULzEv0Ho.roa
File: lGrqE5_NZ5UvsqBwAR4ULzEv0Ho.roa (raw, json)
Hash identifier: nDqBuA0twGkuHWvlB9EylBbRDslUATUVgDaEeGRZeuE=
Subject key identifier: 94:6A:EA:13:9F:CD:67:95:2F:B2:A0:70:01:1E:14:2F:31:2F:D0:7A
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 01973B97DE3C4368DF819E5FEB570A2B6F8A
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lGrqE5_NZ5UvsqBwAR4ULzEv0Ho.roa
Signing time: Wed 04 Jun 2025 15:38:17 +0000
ROA not before: Wed 04 Jun 2025 15:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42724
IP address blocks: 45.155.127.0/24 maxlen: 24
193.3.167.0/24 maxlen: 24
194.36.84.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
194.62.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 18:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:97:de:3c:43:68:df:81:9e:5f:eb:57:0a:2b:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jun 4 15:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946aea139fcd67952fb2a070011e142f312fd07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:b0:74:3a:bf:75:c1:7b:5b:84:8e:72:98:
05:f3:3b:e3:c7:4d:95:60:d8:7f:47:97:23:3a:32:
92:21:98:d8:ea:1b:e4:48:6c:08:3f:e7:a3:c5:41:
bd:9d:3d:2c:70:05:3f:28:79:ab:06:ec:73:9f:50:
82:7c:9f:f1:2a:7f:8b:82:b8:0b:af:55:b1:0c:9c:
dc:55:ff:50:33:b8:b1:f7:75:e2:f2:e9:00:08:8a:
00:9b:ec:be:51:99:44:fb:d8:2d:ca:04:bf:f9:91:
5f:91:15:60:6d:4c:d5:70:de:10:91:8e:bc:56:59:
20:7f:72:96:d8:89:e4:0f:82:81:21:73:2a:05:20:
72:d8:da:95:00:9a:b6:b2:86:8d:a4:4e:6f:d0:19:
26:85:ef:b8:14:e4:90:e1:93:e5:a2:b0:84:57:d3:
1b:12:10:a3:98:5a:e0:d2:a5:c5:9e:1e:95:e1:ed:
34:56:a8:bb:f0:a3:2c:1b:5b:e6:21:75:4c:72:f4:
3b:f4:63:bf:a6:67:3c:80:e4:37:4c:e6:5e:83:73:
e8:b8:c4:19:56:e2:5a:4e:9e:17:25:f2:53:17:42:
98:ed:37:ef:4f:b5:c1:97:fb:99:dd:7a:d1:cb:27:
ce:14:a0:36:31:d3:78:ff:3e:c0:dc:48:78:9f:ab:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:EA:13:9F:CD:67:95:2F:B2:A0:70:01:1E:14:2F:31:2F:D0:7A
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lGrqE5_NZ5UvsqBwAR4ULzEv0Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.127.0/24
193.3.167.0/24
194.36.84.0/24
194.36.86.0/23
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a2:d1:5e:c0:c5:d5:1d:0c:90:53:39:48:6b:15:74:a5:98:
42:c7:f2:a5:c1:15:87:5d:9b:4b:cd:79:98:bd:13:a4:fc:0f:
aa:c9:17:85:7a:ed:d0:d4:60:50:53:25:43:88:50:a0:08:b0:
29:5e:65:75:e6:ba:cf:86:46:ec:d6:ff:62:cd:db:e7:5f:40:
53:63:20:29:98:8e:ed:f0:c1:32:9b:60:76:69:df:9e:f5:cd:
34:db:12:9e:08:53:93:df:20:b6:ba:6e:f2:33:78:42:86:bf:
8e:4e:3f:18:f0:fe:f5:35:dc:0b:63:7d:51:4f:e7:4f:9e:d8:
23:72:68:4b:5e:1b:dc:7f:fa:47:21:c9:0a:7d:9e:dd:26:16:
b9:ca:9b:09:20:a0:1e:43:c1:04:54:2a:75:0b:69:6b:ae:6e:
9b:17:b0:d6:5a:02:1f:ab:c7:a4:ec:0c:47:01:cc:09:38:26:
65:bd:68:d8:04:fb:ae:b4:06:4d:89:c6:ca:5f:c7:45:11:ac:
e4:c1:c5:19:51:10:c7:f9:fd:92:f9:c5:8f:c2:78:71:07:8c:
f7:df:91:c8:a1:0c:bd:b2:8f:9b:bc:31:40:c0:4a:de:e7:04:
89:cc:3a:ea:03:cf:23:e4:fb:76:61:58:78:07:e4:92:42:a2:
42:8e:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:38:15 2025 by rpki-client