Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YXqvSKSk3plmOH_Lim6BdUp1Dhc.roa
File: YXqvSKSk3plmOH_Lim6BdUp1Dhc.roa (raw, json)
Hash identifier: 5uUvyvnrKZT2dMsz1dEARyGm28TnRsMZDz4MvBFjTjY=
Subject key identifier: 61:7A:AF:48:A4:A4:DE:99:66:38:7F:CB:8A:6E:81:75:4A:75:0E:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01955B1866100688812790259CA31D9D5765
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YXqvSKSk3plmOH_Lim6BdUp1Dhc.roa
Signing time: Mon 03 Mar 2025 08:21:20 +0000
ROA not before: Mon 03 Mar 2025 08:21:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.90.88.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 08:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:18:66:10:06:88:81:27:90:25:9c:a3:1d:9d:57:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 3 08:21:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=617aaf48a4a4de9966387fcb8a6e81754a750e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:ae:15:84:72:b3:da:b9:ee:d7:a8:05:eb:
12:ee:f9:b1:39:fb:16:2b:fc:38:71:26:31:74:ed:
9d:db:d9:8d:38:7b:7f:d3:85:de:f3:4e:e4:34:0b:
d2:90:05:9d:7e:e0:12:32:6e:4e:03:40:79:0a:ae:
fc:1c:ff:9c:8b:14:2b:86:05:fd:76:de:6b:09:5b:
40:bf:77:9d:8a:ad:79:0d:15:8d:22:fa:33:c5:17:
f8:6c:35:df:67:21:bb:8d:f2:cd:2f:82:13:86:91:
09:2f:c1:78:ec:ce:71:d4:25:70:05:56:f2:de:a7:
8c:0c:f1:a3:36:12:24:2a:24:ed:34:63:de:1f:15:
e0:41:55:fd:e9:f9:47:d8:57:5d:fd:ab:de:a7:a7:
a8:db:8e:c0:15:58:54:7f:30:88:f5:9a:03:e5:41:
62:46:7b:81:8e:fe:07:98:9a:02:46:bd:65:b1:eb:
7f:c9:73:28:70:c1:14:97:53:91:d3:7b:04:5b:4a:
ac:aa:31:12:6c:11:c0:e6:40:78:98:56:bd:24:f6:
cc:4f:64:19:ce:2a:86:4b:94:80:bf:4e:e1:19:64:
c3:4a:e1:e2:a4:25:34:9f:a9:c5:81:4d:3c:9e:5d:
61:2f:fe:91:40:b7:a8:d8:79:27:b6:23:a9:93:30:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7A:AF:48:A4:A4:DE:99:66:38:7F:CB:8A:6E:81:75:4A:75:0E:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YXqvSKSk3plmOH_Lim6BdUp1Dhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/24
45.149.242.0/24
87.121.103.0-87.121.104.255
Signature Algorithm: sha256WithRSAEncryption
1f:08:c1:2c:5c:f7:52:96:9e:62:56:6f:a6:3f:c3:9d:70:7c:
8c:f7:41:15:f0:47:22:bc:6f:f3:d8:44:61:30:a6:77:b2:c2:
ba:14:ca:74:41:1f:69:ca:ae:09:be:cb:e4:2b:29:a0:16:77:
e6:eb:fb:2c:35:6a:b6:3e:a8:ff:b6:29:a8:9e:1b:d1:49:39:
c0:73:2d:91:07:a2:06:15:83:59:01:d2:42:b4:ec:4d:8c:37:
6a:f2:39:a9:9d:4e:8d:92:e3:0b:68:14:7e:a6:d4:71:c0:a9:
1c:14:a2:1f:ce:6c:10:35:ec:c8:ba:be:0f:ee:c0:89:2a:a3:
83:5d:a5:12:0d:14:7a:9d:b8:8d:e5:00:5d:ab:c8:17:7e:4d:
42:84:1e:30:4a:d1:16:a8:da:61:84:94:0e:c5:b9:3b:5c:ac:
39:8a:37:97:34:5e:02:7a:be:bf:e9:e1:92:fb:42:a6:3a:a3:
27:9e:35:43:19:63:d0:f6:76:5a:c7:fe:fa:4a:e8:74:18:46:
b4:6a:2b:cd:9e:a0:31:6f:f4:9f:96:1a:b7:25:12:b1:e4:8b:
c5:05:fc:e9:7e:0c:76:59:94:ff:0c:e9:8b:01:e6:b7:79:31:
62:24:17:8f:28:4a:63:f7:33:f9:cd:8d:38:1f:6c:3f:32:01:
d2:e3:98:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:14:53 2025 by rpki-client