Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/vb1e3gqxhVmzVKwUUdsVNS2xaOk.roa
File: vb1e3gqxhVmzVKwUUdsVNS2xaOk.roa (raw, json)
Hash identifier: Ro34Koig3/9CKJ12fBY/VvtXwspCiQXTl6cfxvIu7nI=
Subject key identifier: BD:BD:5E:DE:0A:B1:85:59:B3:54:AC:14:51:DB:15:35:2D:B1:68:E9
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0197E407BF9C6261EBEE16120936823E138B
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/vb1e3gqxhVmzVKwUUdsVNS2xaOk.roa
Signing time: Mon 07 Jul 2025 08:36:42 +0000
ROA not before: Mon 07 Jul 2025 08:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.11.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 04:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:07:bf:9c:62:61:eb:ee:16:12:09:36:82:3e:13:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jul 7 08:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdbd5ede0ab18559b354ac1451db15352db168e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:2c:42:64:4c:a3:6d:3d:f4:e6:ac:93:83:
54:a7:b0:7a:e8:7c:4b:d7:c8:ad:5e:4d:8b:ff:a7:
68:01:31:e8:f5:a8:47:f5:45:7e:c8:2f:1e:7d:92:
e2:3d:ca:1e:60:38:01:5f:77:1e:91:c4:6b:10:d5:
ee:17:ba:1e:88:36:0c:41:07:2e:46:c3:be:36:a5:
b6:4b:11:9c:95:29:eb:6d:31:34:96:c3:6a:09:1e:
79:21:2c:92:60:72:4c:c7:48:8c:ab:15:24:73:a3:
4b:59:55:eb:41:3c:cc:d6:07:33:36:d7:73:07:40:
a5:fb:b2:be:24:1d:7f:88:8e:50:0a:ec:07:98:ad:
0b:d1:4b:bf:2f:c7:0f:59:c4:dc:0e:be:67:12:52:
b5:c3:c9:11:fb:43:c4:6c:c8:03:d3:17:d0:fa:4f:
96:ca:b8:39:ba:73:b6:bf:b8:63:48:d2:16:1d:34:
9d:b9:a0:59:20:7c:9c:4c:29:b5:46:d4:c0:14:79:
4a:0e:8a:59:bd:54:f8:4d:4f:7f:f0:a7:be:82:45:
46:0c:15:4e:d5:35:41:13:e7:1a:80:be:1f:ff:f1:
90:cf:39:34:32:df:97:ff:24:a0:57:4f:67:55:ed:
22:21:04:48:aa:a5:48:30:d0:fb:16:9d:74:40:ec:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:5E:DE:0A:B1:85:59:B3:54:AC:14:51:DB:15:35:2D:B1:68:E9
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/vb1e3gqxhVmzVKwUUdsVNS2xaOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2f:ec:e3:4e:db:75:09:fd:70:20:ca:ce:cd:de:4c:0c:f9:
59:de:02:6a:6a:c5:51:94:92:35:93:1a:e7:9b:9b:39:4d:f7:
2b:9b:88:d1:ad:49:09:04:35:85:d7:45:93:c1:bc:99:ed:d3:
3d:c2:0f:ca:f0:3b:7d:d5:1e:44:2b:1d:d3:d7:66:bd:16:9e:
a5:84:4b:63:cd:7f:86:b2:59:15:82:f4:f4:b6:02:4a:33:ff:
dc:0a:b1:0f:66:dc:cd:e5:94:55:87:d3:21:fc:a4:81:96:34:
76:7d:b8:76:9d:68:5d:9e:7b:ef:32:c2:03:62:ea:23:d0:bf:
0f:22:e6:5c:90:e4:aa:b6:a8:0d:bd:3a:08:39:2c:e3:dc:b5:
ff:c5:43:7e:de:4b:fd:64:90:c3:e3:4f:ed:83:a4:48:f3:73:
f5:67:35:e8:6d:d8:15:48:0a:9c:69:be:6c:d3:57:e0:e4:d1:
44:fa:d3:fc:25:b3:33:5a:1f:26:a6:9c:5f:8f:70:d0:90:09:
c8:7c:75:77:6c:d9:1a:5f:43:66:ad:10:de:b2:a7:59:13:2a:
4f:31:86:2a:48:5e:74:2f:dc:b6:c6:44:a9:19:0a:e5:f5:4c:
e4:4b:9d:bc:e5:d6:a0:12:31:22:d2:b5:37:2e:9e:99:22:23:
da:f3:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:25 2025 by rpki-client