Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/22M22H9RLcd4ylydfYJ1wx-LONM.roa
File: 22M22H9RLcd4ylydfYJ1wx-LONM.roa (raw, json)
Hash identifier: IbA+JSY3adxIM7BoZv6gZyFJ4Vm3n8yZPsytmK77zaQ=
Subject key identifier: DB:63:36:D8:7F:51:2D:C7:78:CA:5C:9D:7D:82:75:C3:1F:8B:38:D3
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0194F13D65D849A2273DDADF06099EA763A8
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/22M22H9RLcd4ylydfYJ1wx-LONM.roa
Signing time: Mon 10 Feb 2025 19:02:00 +0000
ROA not before: Mon 10 Feb 2025 19:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213744
IP address blocks: 91.142.129.0/24 maxlen: 24
212.233.68.0/22 maxlen: 22
212.233.68.0/24 maxlen: 24
212.233.69.0/24 maxlen: 24
212.233.70.0/23 maxlen: 23
212.233.70.0/24 maxlen: 24
212.233.71.0/24 maxlen: 24
2a13:6d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Feb 2025 10:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:3d:65:d8:49:a2:27:3d:da:df:06:09:9e:a7:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Feb 10 19:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db6336d87f512dc778ca5c9d7d8275c31f8b38d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:8a:9c:5f:3a:7f:7a:06:8c:6d:ea:c0:d9:
4b:7f:9c:ad:30:b4:0f:2e:2f:16:a9:86:e7:6f:9d:
0e:3d:d4:21:6d:7a:22:94:50:d5:a4:06:35:c7:e8:
3a:30:16:c6:0c:ea:6f:61:27:c2:a3:7f:d1:af:b6:
9b:fa:70:66:df:5f:94:aa:80:0c:1c:09:86:52:b4:
3a:cf:e9:eb:1e:6c:02:88:9c:c8:0a:be:a7:42:ad:
3c:28:54:34:37:d1:71:58:91:60:57:2f:b8:ac:50:
b9:65:6a:e0:0a:db:2d:41:8d:8a:a4:bf:06:af:aa:
94:c4:30:68:98:6e:98:16:f5:cd:ad:2c:61:e9:92:
2e:8a:27:ab:9c:1e:5c:e5:d6:73:da:e4:7a:e9:cd:
d1:91:14:cf:58:41:e1:5f:fe:d6:de:17:03:f2:25:
11:5c:41:e4:6f:f4:b4:09:64:c6:7d:05:25:14:be:
99:49:55:65:52:06:96:43:83:0d:5a:1e:58:d6:15:
c2:de:f5:60:56:6f:14:f6:d9:2f:d0:f6:ac:3f:b2:
cb:81:b5:9b:31:71:d8:c8:a0:75:14:82:95:6c:fe:
65:c5:93:85:12:ee:93:93:de:0f:9b:f6:49:d8:dc:
d1:f7:11:d5:db:20:9a:66:80:42:04:bc:d2:95:96:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:36:D8:7F:51:2D:C7:78:CA:5C:9D:7D:82:75:C3:1F:8B:38:D3
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/22M22H9RLcd4ylydfYJ1wx-LONM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.129.0/24
212.233.68.0/22
IPv6:
2a13:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
ac:0f:14:3f:3c:63:b0:64:72:ef:05:82:3f:2a:32:bf:74:d1:
e3:62:fc:90:29:95:a7:20:87:2e:8a:d8:8c:4f:8d:f0:e5:5d:
79:f6:f6:64:d2:00:27:a5:72:17:89:02:c4:0f:77:54:f8:d6:
36:23:5b:e7:43:8b:4f:70:28:7f:7a:87:e3:a2:47:0d:df:ab:
ac:d5:54:e8:89:f4:bf:d2:40:49:47:21:ee:f7:40:2a:b7:57:
3e:c7:70:99:fc:69:15:33:42:5a:ce:7b:e5:63:97:cc:34:e7:
90:32:85:bc:e2:e2:31:30:e7:50:b1:6f:94:4d:62:e8:2f:04:
fc:d6:e2:24:17:ab:71:1b:ab:6e:ac:19:29:44:c1:2a:41:be:
d8:ee:0c:b1:07:33:56:8f:e3:fa:b3:3c:0b:c9:df:03:5a:76:
93:bf:e3:de:0b:88:3d:92:b3:3b:5b:5b:da:93:5c:1e:2a:96:
c1:bd:b3:73:c7:2c:ed:86:1a:a9:b2:7b:96:34:40:cc:7e:48:
b0:5f:85:31:0e:28:91:63:96:37:40:e7:a3:73:78:f2:c6:81:
88:ff:8a:cd:fd:c7:0e:04:f2:b2:37:9f:d5:41:3b:82:ee:e7:
40:f6:07:61:b4:1d:3f:c0:d3:8d:81:84:89:4e:ac:6c:30:b6:
5b:76:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:12:01 2025 by rpki-client