Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/rn-uzgytc7IseYcmV-dDqLsv8vQ.roa
File: rn-uzgytc7IseYcmV-dDqLsv8vQ.roa (raw, json)
Hash identifier: 74TehG2rqdcWgwXnZFbVuqPgOMMTYEfEdB2jlfQFmzg=
Subject key identifier: AE:7F:AE:CE:0C:AD:73:B2:2C:79:87:26:57:E7:43:A8:BB:2F:F2:F4
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019761615376CCE269454261213F0639A565
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/rn-uzgytc7IseYcmV-dDqLsv8vQ.roa
Signing time: Wed 11 Jun 2025 23:44:17 +0000
ROA not before: Wed 11 Jun 2025 23:44:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 08:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:61:53:76:cc:e2:69:45:42:61:21:3f:06:39:a5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 11 23:44:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae7faece0cad73b22c79872657e743a8bb2ff2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:39:59:8e:89:d4:ee:7b:30:c7:7d:db:4b:
58:b8:2d:73:4c:df:22:70:a3:74:df:a7:4b:de:c9:
8d:2f:65:8a:a3:f5:e5:ac:47:08:cb:41:e5:4d:55:
26:07:81:d3:96:6c:c8:d6:f9:3c:a9:81:08:aa:97:
71:66:70:b7:24:a3:d9:4f:1f:3e:fc:dd:d5:6b:e4:
ee:ad:ba:e3:32:f7:f3:12:ec:b1:e3:a1:94:03:f1:
8a:aa:0a:e3:fb:40:af:90:58:04:76:12:3a:e4:06:
f1:3d:56:ce:94:5d:26:20:97:93:08:a6:1c:05:26:
c3:86:f3:73:79:c0:b2:57:0a:08:17:26:64:9b:f2:
7a:61:28:6c:a4:77:86:3c:56:d2:e5:3c:cf:9e:c7:
9d:96:c1:fe:b3:89:c1:0c:59:b0:de:88:48:09:de:
a0:69:80:49:a6:52:f1:7e:27:66:05:49:db:60:79:
f1:2d:c3:ea:f6:70:b7:25:9a:95:51:eb:0c:85:af:
bc:8e:19:82:68:1e:67:1e:3c:e9:93:11:de:73:25:
02:76:7c:bb:0f:f9:27:cf:12:ec:f0:f4:1d:75:72:
0d:a2:a9:0d:c8:ee:0c:97:04:6a:2c:b9:e4:a2:86:
bf:8f:80:17:d0:f8:fe:56:a6:a2:fd:6e:fc:84:c3:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:AE:CE:0C:AD:73:B2:2C:79:87:26:57:E7:43:A8:BB:2F:F2:F4
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/rn-uzgytc7IseYcmV-dDqLsv8vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.208.0/23
185.199.151.0/24
185.199.213.0/24
185.221.26.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
45:10:99:68:71:d4:66:4a:a3:32:00:a2:79:f4:bd:07:af:46:
d0:19:db:7b:93:aa:66:51:08:f9:d3:76:ea:1f:fe:bb:62:66:
60:3c:73:91:14:04:bc:91:ad:47:df:45:cc:af:c7:43:a6:51:
fa:e4:e6:2e:58:b8:1e:3f:9c:67:12:7d:59:0a:15:eb:fc:eb:
36:67:b1:bf:c9:bf:9d:0a:6a:70:88:73:11:6c:2f:c9:0d:54:
fa:f7:3e:f6:c0:89:da:5b:9f:b3:ac:4f:34:3d:59:f8:04:c9:
99:73:51:46:d7:03:45:4d:68:d1:8d:ce:3f:a0:d7:d5:eb:98:
2d:cb:a2:a9:b8:00:4b:72:50:48:ea:3a:3f:f1:31:17:db:7c:
4c:28:5d:02:fc:5b:8c:4b:92:92:82:70:b1:29:0e:a4:d1:0c:
ca:91:cb:40:03:15:be:50:06:cb:1f:30:f3:4a:ae:ec:99:8d:
cf:1b:db:a0:92:14:f6:cd:f7:17:8d:2f:4b:8a:fb:48:97:b9:
29:86:45:8b:3b:d9:6f:85:2d:d2:03:0e:a3:fd:ae:d7:fb:6c:
ce:b4:f9:34:87:c2:d5:53:62:1d:13:c5:2e:58:50:38:9b:ca:
10:a1:d8:ad:65:44:92:10:29:a9:1a:d8:f8:03:ce:6a:d5:1e:
cc:ba:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:00 2025 by rpki-client