Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/peeZSb1UXNN-ywk2glHeOQFRMUw.roa
File: peeZSb1UXNN-ywk2glHeOQFRMUw.roa (raw, json)
Hash identifier: 5Sdsz6aTuccgb/ApPPgMA97cwRfi8R5KRjc9rsOmKzw=
Subject key identifier: A5:E7:99:49:BD:54:5C:D3:7E:CB:09:36:82:51:DE:39:01:51:31:4C
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019643FB62A9063282915D709C682F98316D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/peeZSb1UXNN-ywk2glHeOQFRMUw.roa
Signing time: Thu 17 Apr 2025 13:41:10 +0000
ROA not before: Thu 17 Apr 2025 13:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16321
IP address blocks: 37.139.48.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
45.156.212.0/22 maxlen: 22
46.161.12.0/23 maxlen: 24
46.161.24.0/24 maxlen: 24
46.161.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 07:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:fb:62:a9:06:32:82:91:5d:70:9c:68:2f:98:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 17 13:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5e79949bd545cd37ecb09368251de390151314c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:f3:2a:1c:73:45:04:0e:c2:15:86:f8:cd:
91:56:9c:f5:16:b2:c0:fd:2f:d5:30:cc:71:c8:7b:
96:6b:64:0f:1c:3e:06:51:d0:6b:55:6c:9f:8a:52:
13:e5:c8:b0:ff:d1:e4:22:9d:ae:81:e9:48:ca:11:
72:c5:ee:64:84:e5:de:f0:d4:0a:b5:d7:3b:9b:bb:
81:67:e4:09:b6:dc:1a:3e:fe:95:0e:74:f3:08:04:
fa:df:12:17:7a:11:9a:ca:f0:2f:b4:01:0e:91:31:
60:e9:8b:b3:0b:b9:6f:2d:7e:28:77:35:31:63:9f:
fa:cf:32:73:36:b8:e3:34:3f:73:06:f3:e5:58:ab:
f1:72:00:3d:81:59:71:f4:f4:30:d5:88:25:74:d4:
57:16:1b:98:33:62:8e:83:8b:b2:d7:93:6e:60:8c:
c7:5e:19:bc:a6:b3:7c:c4:ec:54:20:02:81:2f:04:
dd:85:5e:26:4a:08:2e:d2:3e:45:5b:7e:93:ca:50:
ab:2c:43:bd:a0:0d:d8:f6:fd:20:c0:8a:92:eb:5a:
53:6f:ef:9e:0d:90:1c:a9:e5:5e:fe:28:f5:55:b3:
2c:9b:fc:02:62:11:60:e3:36:ed:15:51:80:0c:09:
77:01:79:b1:6c:d9:b3:33:e3:65:75:5e:af:f3:78:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:99:49:BD:54:5C:D3:7E:CB:09:36:82:51:DE:39:01:51:31:4C
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/peeZSb1UXNN-ywk2glHeOQFRMUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.48.0/23
45.156.212.0/22
46.161.12.0/23
46.161.24.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:52:ae:67:94:6c:74:dd:ea:28:a9:8e:dd:65:0e:03:f7:8f:
46:df:7b:76:dc:b7:94:bf:8b:d9:18:b7:be:64:7f:c2:bc:b7:
32:8d:e1:ed:46:21:8e:ba:49:21:cf:d7:3f:9f:99:53:3e:dc:
68:ee:93:90:89:bf:65:8a:a5:e6:53:3c:e0:35:b6:8d:47:23:
31:0a:d6:7c:59:ca:76:14:31:de:ac:7e:a2:d4:44:0f:b4:d9:
83:ae:17:b0:e4:d6:9f:ee:87:ee:ca:91:d7:b1:fc:bf:b7:ca:
4a:a8:63:d3:5d:20:be:5b:95:ed:a0:61:c5:aa:f7:6f:fe:85:
44:0a:2d:92:31:e2:2e:61:9c:38:4a:2d:cb:a9:a3:5d:26:23:
d7:c9:cb:16:e4:51:fa:92:6e:95:91:87:04:28:ac:f4:21:f0:
57:86:32:85:1f:67:e2:94:2a:8c:cd:aa:d3:8b:20:63:04:d6:
c6:4f:01:6e:c4:c7:6b:b4:61:d2:a3:4a:93:e6:71:3d:8a:ee:
b9:f8:8b:c4:30:75:39:d3:f4:f1:2e:83:90:06:3c:09:35:71:
4c:d0:6d:62:86:40:40:4d:60:e2:18:b0:90:d1:8f:5a:2e:2b:
59:4d:3e:a3:59:9d:b1:ac:a5:5a:46:66:34:04:46:dd:99:2d:
8d:4b:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:37:43 2025 by rpki-client