Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XWRSDGMiCTm3WPUBtWWk0PjuGM8.roa
File: XWRSDGMiCTm3WPUBtWWk0PjuGM8.roa (raw, json)
Hash identifier: xQf0WWap7k5Reem3LxOsfr57Gx0SOCKKmPIxbaVUAwc=
Subject key identifier: 5D:64:52:0C:63:22:09:39:B7:58:F5:01:B5:65:A4:D0:F8:EE:18:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019690ABF60AE971E2B87797F29C344A07AD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XWRSDGMiCTm3WPUBtWWk0PjuGM8.roa
Signing time: Fri 02 May 2025 11:05:10 +0000
ROA not before: Fri 02 May 2025 11:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 93.123.10.0/24 maxlen: 24
94.156.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:ab:f6:0a:e9:71:e2:b8:77:97:f2:9c:34:4a:07:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 2 11:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d64520c63220939b758f501b565a4d0f8ee18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:88:41:08:d8:15:b1:a4:da:42:f3:a2:c1:
79:ea:38:b5:51:57:04:41:52:77:26:af:cf:a8:1e:
37:23:15:08:f0:6f:53:d0:a2:40:94:8e:e9:96:2f:
41:eb:b5:48:06:71:29:7b:32:ce:dd:86:53:c7:10:
0a:35:a6:c4:21:6f:41:09:1f:54:2c:14:09:8f:f2:
9c:29:d6:67:a0:1c:18:ee:43:26:92:e3:16:a1:98:
66:de:7b:46:61:4c:ce:49:df:93:1e:d5:81:db:34:
6e:e2:1d:9b:ba:53:70:5f:7e:93:46:cc:bd:9a:85:
ef:5f:cc:ec:e3:3a:80:cc:e6:d0:4a:12:9c:7b:5f:
3c:c2:dc:ef:48:3b:5a:42:5e:4e:6c:3e:5e:63:58:
ae:f0:93:76:44:50:34:54:8b:c0:bd:5e:96:dd:26:
5d:89:a2:4c:38:85:c8:f4:bb:cf:2d:1c:2c:42:9d:
1f:85:b1:29:ed:dd:30:e3:26:7f:e6:40:85:4c:ee:
50:06:92:ea:ad:b4:8d:78:81:62:69:ad:b2:c8:0b:
40:9d:1e:14:be:d1:ed:89:b6:4e:cf:45:60:dc:e0:
84:e6:70:41:47:4b:b6:41:13:ae:ab:4f:70:77:f1:
5c:d4:28:d0:cc:98:0a:af:00:3b:96:ff:6f:26:6f:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:52:0C:63:22:09:39:B7:58:F5:01:B5:65:A4:D0:F8:EE:18:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XWRSDGMiCTm3WPUBtWWk0PjuGM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.10.0/24
94.156.174.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cf:d9:ba:d2:2b:d8:45:0b:0d:6c:ec:c5:cb:cd:ab:08:ce:
e5:f9:43:92:d6:80:c5:53:6e:f8:88:96:ac:9d:3c:14:09:66:
6d:45:c1:f0:8f:d5:6e:4d:b3:0b:cf:eb:74:ab:33:92:d6:42:
3e:ae:1c:c9:51:d6:90:3e:42:f4:f5:88:56:04:2e:9a:83:2c:
c1:a0:d8:db:47:36:f7:5f:7e:4d:9b:bb:9a:8b:50:ee:6f:3e:
d4:6a:e1:90:77:fd:1c:a6:6a:64:5c:e1:51:47:ae:0c:eb:dc:
ed:67:dd:6b:81:80:8b:65:d3:c8:9c:19:e4:8c:ad:de:51:7c:
c6:27:d2:0d:08:3b:de:81:03:4d:74:5b:05:99:cd:4b:5e:86:
2e:b3:f7:3e:58:82:39:2f:2a:98:0e:c2:69:c6:dc:96:6b:e7:
6d:45:7a:11:0f:e1:8b:72:a5:c4:81:ef:84:27:62:54:3d:d7:
fa:99:8e:02:01:b9:f4:1f:66:18:21:4f:6b:be:7d:1a:45:e0:
99:30:cd:56:06:72:8f:5c:50:33:c9:11:0a:8a:01:2a:05:be:
fb:78:c6:c8:5a:63:eb:81:2b:d6:8d:4f:19:c7:7e:e4:3e:5c:
e3:9a:b6:88:de:5b:30:04:48:e6:08:69:08:be:d0:f8:69:1c:
e3:ff:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:52:21 2025 by rpki-client