Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TxjIz_OgI7dtOUP877sp5bi89pM.roa
File: TxjIz_OgI7dtOUP877sp5bi89pM.roa (raw, json)
Hash identifier: MIpb05CVdktBMZ30MkS3MSu0wr4vSw5cOqAX3pwkBo0=
Subject key identifier: 4F:18:C8:CF:F3:A0:23:B7:6D:39:43:FC:EF:BB:29:E5:B8:BC:F6:93
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194BEEA31E242DDEF2E23C2684D47C027C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TxjIz_OgI7dtOUP877sp5bi89pM.roa
Signing time: Sat 01 Feb 2025 00:30:06 +0000
ROA not before: Sat 01 Feb 2025 00:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.253.64.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 00:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:be:ea:31:e2:42:dd:ef:2e:23:c2:68:4d:47:c0:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 1 00:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f18c8cff3a023b76d3943fcefbb29e5b8bcf693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:55:73:d0:33:f2:9c:89:34:2f:6b:d7:ab:
e7:1f:b1:37:4b:ff:20:68:54:59:bf:fd:13:fc:5a:
3d:43:23:ce:60:ba:5a:ad:18:55:e4:a3:44:a7:c9:
ad:5f:01:49:83:bb:fa:c4:6f:e2:49:3f:b0:8d:eb:
be:a6:77:c1:c2:88:c1:b2:e8:d9:44:b5:5b:f7:64:
1e:60:53:78:6c:3a:9a:66:4d:9b:59:4b:3a:bd:e4:
97:08:2d:55:40:e8:cb:f6:13:08:5d:f2:35:dc:2e:
be:b0:27:e7:64:c1:28:76:3d:ce:e6:6a:26:45:7f:
e6:74:3c:7a:20:c9:69:18:04:d1:fd:37:e2:b3:41:
36:4d:e6:4e:02:e5:bb:b1:c1:94:55:90:b1:94:ed:
43:d9:88:fa:a0:3b:46:0c:07:03:f2:bd:03:8a:bb:
8a:0f:e4:04:92:c9:af:91:dd:ef:f2:ac:f4:66:be:
a6:df:0c:eb:0b:f3:0e:f6:fe:8d:8a:fc:58:da:20:
6b:cd:c2:ac:c4:e7:da:f7:04:95:d1:eb:1b:6f:df:
ad:ac:7d:21:27:cd:71:1b:b7:fe:5d:a9:58:1d:c0:
21:37:3a:aa:ef:27:5b:a3:4f:cb:79:c3:83:93:2e:
4c:11:cc:16:e9:5e:2c:eb:0a:7a:c9:95:3b:fd:7c:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:18:C8:CF:F3:A0:23:B7:6D:39:43:FC:EF:BB:29:E5:B8:BC:F6:93
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TxjIz_OgI7dtOUP877sp5bi89pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
45.12.253.0/24
83.219.98.0/24
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:ff:27:87:a3:74:86:66:f1:f8:ae:cd:9f:5f:a6:ee:44:d6:
29:82:e4:72:30:8d:a3:7d:67:c9:f2:26:f5:ee:97:3d:c3:b4:
c5:fe:2e:32:55:3f:f0:93:63:98:31:d7:ff:0f:36:f8:bf:87:
93:1e:52:fa:8a:95:6e:c6:ff:c5:0a:e0:87:9a:62:ff:5a:13:
ec:a6:a9:0d:81:ee:73:45:14:b5:38:0a:a2:7b:3a:c9:4e:45:
98:f6:f0:5b:59:00:be:65:fa:a8:35:a0:d1:e1:3b:b9:5a:a4:
b5:42:2c:b7:fb:05:4e:e5:1e:07:b6:d5:23:75:df:45:ad:16:
78:16:c1:3e:f3:45:85:05:fa:f5:c4:d1:b3:b6:e6:df:bb:04:
d9:1a:24:a6:67:4d:a5:08:d1:8b:9e:2a:12:32:a5:b7:28:dc:
0b:9e:2b:91:92:35:79:27:29:e2:f6:e7:e5:b8:6d:d9:bd:0b:
26:64:80:91:3e:f2:c5:4a:54:13:10:7d:01:1b:80:6b:da:a7:
0c:9f:cd:7e:56:d4:74:9c:db:d5:1d:3f:96:c3:34:12:cc:45:
56:2b:2f:34:7a:5c:5c:c4:e2:fb:f5:f1:1a:c2:7b:8e:88:ba:
3a:d5:1c:27:03:49:4e:52:bc:63:d6:cc:f1:2b:d6:a0:c7:1f:
67:b5:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:16:18 2025 by rpki-client