Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: LNQ5il++lM0Cr4owg4x8KdXd9cL5QFcyvS4ZspTY9Sg=
Subject key identifier: DB:17:06:A5:AB:DA:4B:5E:AE:6C:CB:FF:8B:0E:82:5B:28:85:AB:2E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 367D013A0E765F0D5FCEB3EDB9E2411C3677A515
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11404.roa
Signing time: Sun 27 Apr 2025 00:00:42 +0000
ROA not before: Sat 26 Apr 2025 23:55:42 +0000
ROA not after: Sun 26 Apr 2026 00:00:42 +0000
asID: 11404
IP address blocks: 95.135.173.0/24 maxlen: 24
95.135.178.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7d:01:3a:0e:76:5f:0d:5f:ce:b3:ed:b9:e2:41:1c:36:77:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 26 23:55:42 2025 GMT
Not After : Apr 26 00:00:42 2026 GMT
Subject: CN=DB1706A5ABDA4B5EAE6CCBFF8B0E825B2885AB2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:06:93:bf:63:af:32:a5:08:cd:0a:98:4d:
ca:0f:02:97:bc:84:11:7d:09:d1:e4:9a:36:ca:7b:
ca:13:ce:98:3a:73:00:87:98:98:db:de:15:36:60:
7d:b0:f3:50:aa:7f:b7:d4:c2:5e:88:34:80:4e:4b:
05:47:b4:0c:dc:1e:fb:b4:15:d5:fc:a0:3c:28:08:
25:08:36:f2:20:c5:34:3b:28:14:4a:f3:b8:c8:54:
6d:b2:e7:b6:e9:c4:76:10:68:41:75:3f:06:00:37:
e4:bb:67:ac:19:d3:fc:ef:5e:8e:8c:af:0b:5e:b1:
e3:2b:1c:6a:c3:46:eb:5c:17:07:1f:f7:5a:c7:74:
0c:10:bb:87:4c:cf:fb:d6:bd:dd:de:1c:cd:d1:41:
04:44:05:45:c4:20:3a:81:06:6c:85:a7:60:61:13:
ee:01:fd:9f:c1:5b:69:d8:9d:1b:7b:ac:e3:c8:88:
a3:03:62:9b:d9:5b:b5:50:4a:11:33:c0:15:52:fe:
33:c4:11:d8:53:62:d7:10:df:65:65:62:f0:bd:e3:
1f:f3:7b:cb:df:81:f0:7d:41:44:37:08:0e:95:8e:
64:32:ba:30:61:fa:2b:b1:07:0c:bd:6c:1e:9f:18:
91:ee:66:66:30:33:75:0e:93:89:11:b0:40:62:95:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:06:A5:AB:DA:4B:5E:AE:6C:CB:FF:8B:0E:82:5B:28:85:AB:2E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.173.0/24
95.135.178.0/24
95.135.210.0/24
95.135.221.0/24
95.135.228.0/24
95.135.230.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a5:ee:a3:e5:5e:2f:ce:d3:44:cf:ff:70:0c:1f:e6:3a:2a:
6a:23:d8:d2:fe:66:c4:e6:c1:c7:c9:2c:33:c9:76:f0:99:e0:
f6:f7:e8:cb:dd:d5:ae:05:e5:4f:a1:05:06:fc:be:ea:94:f1:
9d:1f:3f:b4:77:5b:d7:6f:b3:b4:e4:00:13:27:a7:e5:94:db:
73:ad:77:6a:16:ab:87:2f:10:99:3f:b8:7f:1a:34:fb:c9:b3:
b0:0f:e1:98:c9:09:fc:ab:8b:b5:63:6d:ce:f3:93:ca:a0:d2:
f8:5e:55:ec:e6:1f:cb:a9:78:5c:82:e2:fd:15:e4:1e:fa:bd:
b4:f7:4c:df:06:c4:07:31:6b:8e:98:e8:0e:04:c7:2f:e3:f7:
2a:de:fd:47:ce:eb:ce:9e:7e:5c:da:43:0d:49:85:4f:b9:bd:
5b:a2:2d:ab:11:c6:ae:d2:03:7f:d2:8e:b8:eb:73:e2:ad:77:
16:52:c4:0d:f4:a0:72:42:a3:7c:a5:05:f0:0d:06:dd:08:bb:
28:26:53:06:fa:68:a8:8f:c4:a2:f3:26:12:76:9b:ac:28:09:
56:b5:cc:ad:d8:59:c9:51:e4:58:33:85:bc:b8:72:e9:18:b5:
ec:fa:ae:3b:c6:53:9e:da:66:d3:2e:05:d0:06:65:de:24:aa:
87:29:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:47 2025 by rpki-client