Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/E1worBWAwsusp04HZPSY7LEvxtA.roa
File: E1worBWAwsusp04HZPSY7LEvxtA.roa (raw, json)
Hash identifier: uW3en+16iKPitsn3VPvks084rSVlzoiM/1oXXO9xXBA=
Subject key identifier: 13:5C:28:AC:15:80:C2:CB:AC:A7:4E:07:64:F4:98:EC:B1:2F:C6:D0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0197596C474E5614CEC4DD960C0C6DDA1BD1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/E1worBWAwsusp04HZPSY7LEvxtA.roa
Signing time: Tue 10 Jun 2025 10:39:17 +0000
ROA not before: Tue 10 Jun 2025 10:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 45.90.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 12:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6c:47:4e:56:14:ce:c4:dd:96:0c:0c:6d:da:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 10 10:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135c28ac1580c2cbaca74e0764f498ecb12fc6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:43:e0:00:e8:eb:ae:cf:99:b3:b9:cf:84:
c2:1f:ff:b1:e8:36:b0:43:84:2c:8e:31:52:44:25:
03:3f:18:aa:45:f1:88:31:80:3c:44:cc:49:74:cc:
47:89:dc:1a:59:1e:37:12:2e:c4:93:96:0b:74:9c:
c0:41:ba:1e:e6:ed:c9:d3:82:0c:68:2e:ff:e4:df:
f9:cf:60:c6:14:d3:1f:98:83:38:f2:6a:ca:44:e0:
5c:b1:b5:50:64:40:bf:dc:38:60:05:2e:47:03:67:
61:8a:78:88:3e:53:09:1a:71:77:e6:a9:70:46:4e:
85:22:25:73:d8:76:32:10:15:ad:d0:48:a7:a4:34:
61:99:df:7a:f6:ce:a9:40:02:f8:32:2b:91:2e:68:
47:b2:88:9b:39:d2:92:26:15:cb:2e:dd:25:58:97:
57:98:f1:96:cc:ad:83:a3:14:24:4f:c0:b4:24:1c:
cd:7e:ee:c5:14:ba:40:83:e2:25:59:9f:cc:f0:82:
e0:15:f9:61:c9:74:1e:df:25:a6:5f:6e:21:35:a6:
da:ad:fd:68:a9:d8:00:98:e8:ab:62:51:bf:a3:e5:
45:9d:17:bd:8e:9e:98:f4:73:be:c9:1a:e6:fa:c8:
ef:52:bd:aa:81:24:63:12:21:1f:4b:75:ab:03:2f:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:28:AC:15:80:C2:CB:AC:A7:4E:07:64:F4:98:EC:B1:2F:C6:D0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/E1worBWAwsusp04HZPSY7LEvxtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.97.0/24
Signature Algorithm: sha256WithRSAEncryption
14:37:13:8b:cd:b6:b6:cf:1b:00:d2:5a:78:5a:2d:b1:9a:4f:
93:a3:82:13:2a:d2:27:12:fe:be:42:1f:89:7d:fb:d9:29:54:
a6:2f:99:c0:26:2a:38:0e:b8:98:a7:bc:2a:8d:f5:73:74:28:
92:8e:8a:9c:cf:cc:13:37:e7:12:7a:86:c6:0b:65:8b:cf:8e:
96:83:6b:0f:e4:bc:58:bc:b6:64:a2:63:22:b9:4d:4b:0b:b7:
e9:e7:ab:4c:4b:22:8e:1d:8f:29:ee:8f:76:fd:b3:27:a1:28:
58:d7:9b:c3:e9:33:b2:b0:37:b5:6b:18:7b:d8:7d:9d:6d:56:
2f:9f:8f:b4:a3:e8:82:39:d6:1b:75:97:dc:33:68:0c:30:d1:
6d:26:c4:8f:83:e0:7e:d4:99:f8:a6:1d:f2:eb:af:06:7d:b0:
38:20:f3:c7:02:49:40:a5:11:a0:56:90:d0:d9:02:6d:fe:50:
c1:0a:c8:77:98:5a:89:d6:6e:3a:ee:98:90:60:39:a3:7c:a9:
9c:ea:ce:bc:bb:82:08:28:e9:81:0d:2a:69:65:2e:06:65:b5:
e8:c3:75:91:d7:b4:bf:64:ca:50:11:dd:25:d8:4c:41:6b:2a:
30:7f:a5:c0:12:cb:a3:34:a2:c0:64:18:5f:4f:69:6c:17:da:
9b:d1:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:10:15 2025 by rpki-client