Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DNi8kqQQR0_PqDjUWlR-Kf_vZus.roa
File: DNi8kqQQR0_PqDjUWlR-Kf_vZus.roa (raw, json)
Hash identifier: Ox8caIl8ePnnyczuAbyeEI3i+T9PZE+f/er5D6urF9E=
Subject key identifier: 0C:D8:BC:92:A4:10:47:4F:CF:A8:38:D4:5A:54:7E:29:FF:EF:66:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019695E4A1105E932039A200F47F86979ECE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DNi8kqQQR0_PqDjUWlR-Kf_vZus.roa
Signing time: Sat 03 May 2025 11:25:10 +0000
ROA not before: Sat 03 May 2025 11:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 May 2025 08:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:e4:a1:10:5e:93:20:39:a2:00:f4:7f:86:97:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 3 11:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd8bc92a410474fcfa838d45a547e29ffef66eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:e8:40:08:2c:b7:ef:a4:d1:cc:67:99:6b:
85:6f:77:7e:25:59:d5:b8:0b:5d:8b:0b:3e:10:32:
c1:2e:dd:1a:66:f8:45:17:98:3c:bf:3b:5e:bd:be:
11:5d:40:4d:0a:a3:3f:dc:97:7d:2f:26:1d:04:e2:
e5:e4:19:57:f7:ca:6b:4f:65:ec:d7:7b:17:5c:cd:
2f:c2:a9:62:d6:05:b5:e8:7f:b8:08:b6:ac:37:d5:
88:1b:1b:5c:01:dd:55:2f:a0:35:d0:a3:45:10:5c:
51:4f:15:e0:1a:b7:4e:f0:f9:bd:69:35:85:d9:82:
f2:65:95:fb:6b:b4:00:c6:f6:d3:dc:0a:67:73:70:
09:f8:b4:76:4a:2e:05:ba:34:1f:be:2d:2c:3f:80:
e7:7a:fc:2b:bd:16:b6:a5:e6:2c:c6:81:75:5d:00:
c2:09:06:95:0b:fe:66:56:2b:77:69:10:85:d5:23:
5a:af:78:8c:5f:c8:c0:f6:cf:69:d1:7c:4b:91:a5:
b0:f3:21:63:b1:fa:15:f8:d8:a2:7b:5d:1c:77:7d:
42:0a:47:64:28:b2:5e:7f:6e:dc:03:f4:8b:39:a2:
17:85:2f:8e:76:b6:80:45:d0:8a:b8:f8:6d:78:16:
3f:ba:b2:4e:cf:07:97:f6:d2:8c:e9:f1:2c:87:da:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:BC:92:A4:10:47:4F:CF:A8:38:D4:5A:54:7E:29:FF:EF:66:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DNi8kqQQR0_PqDjUWlR-Kf_vZus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f7:7b:db:b3:50:4d:96:f1:fa:82:65:19:2e:56:94:37:57:
b4:aa:70:ba:a9:72:7f:94:49:f3:6a:4a:77:a7:dd:78:7a:e9:
e9:d5:ed:e5:59:02:6a:3e:cb:e7:96:bb:69:d1:6e:c6:ca:74:
7d:d7:f2:fd:4f:14:e4:91:a1:e5:9e:49:82:32:7b:f8:96:73:
83:34:87:d6:4e:53:d0:51:83:af:c8:04:aa:86:a0:29:d7:0d:
ca:2f:a7:40:ad:9e:ef:e4:57:bf:f0:06:cf:70:a0:88:2f:44:
20:51:2b:9d:f7:0f:0f:b1:ae:48:7c:df:3d:5d:9d:d4:69:53:
6a:fa:4d:bc:6e:8d:ff:dd:06:68:57:2f:01:b7:58:7d:98:d7:
c4:7a:cc:55:1e:21:25:8e:ef:df:d0:be:cd:4b:9f:3b:3f:0e:
cb:55:60:e4:4b:b3:42:7a:ca:7c:d6:b3:19:96:ef:c9:b4:6c:
a0:96:30:a6:33:e0:b8:39:0b:24:ee:f2:e3:63:40:7b:ee:13:
b5:37:70:85:92:cc:0c:69:ab:2c:88:33:85:a3:15:76:c8:e7:
35:65:54:5a:80:ff:ff:74:a5:55:aa:2a:73:c8:13:c3:6a:df:
39:ad:e4:f3:ab:dd:be:80:5a:00:99:b5:69:d0:5b:b4:f9:19:
b4:55:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:24:50 2025 by rpki-client