Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J6lRFLLhvXlzGzefk91DnAUkvlQ.roa
File: J6lRFLLhvXlzGzefk91DnAUkvlQ.roa (raw, json)
Hash identifier: LAbGhRTQgUtvvpZZAKXQKOBdy9Kvoo1JlGlE1YQLO1w=
Subject key identifier: 27:A9:51:14:B2:E1:BD:79:73:1B:37:9F:93:DD:43:9C:05:24:BE:54
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA38FBAC68D1CA01C7766DCB7D42A9
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J6lRFLLhvXlzGzefk91DnAUkvlQ.roa
Signing time: Sun 06 Jul 2025 22:27:44 +0000
ROA not before: Sun 06 Jul 2025 22:27:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 45.133.245.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:38:fb:ac:68:d1:ca:01:c7:76:6d:cb:7d:42:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a95114b2e1bd79731b379f93dd439c0524be54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:10:e6:42:9f:3c:4b:13:fe:24:62:5e:39:
4b:e5:fb:b2:be:f3:d9:07:fc:28:3e:1c:36:04:4e:
27:89:f1:fb:d6:52:58:b4:5d:f7:5d:52:14:a6:bd:
74:d4:2b:f1:41:5e:3d:a0:da:a4:d4:38:50:3a:12:
c8:d7:b2:0f:90:28:a3:78:0a:7c:ed:65:b6:55:31:
40:8d:98:96:3b:ae:2d:a0:85:ef:8b:60:69:e3:32:
ff:2a:c8:3c:21:68:1b:11:25:c6:27:f7:01:7f:2d:
14:d8:6f:5b:57:95:36:b5:45:62:91:99:45:c8:e2:
03:60:44:2a:f4:9d:63:d9:6d:65:44:50:0c:f0:6f:
d1:a1:0e:6f:18:09:80:a7:68:ff:fd:e9:d2:cc:4b:
0b:80:04:17:d3:01:49:a3:be:55:57:bb:d6:6d:19:
0a:f3:3a:0f:f2:d5:57:ed:51:2b:a8:59:0e:8f:bb:
62:f4:57:72:2c:8d:1a:7b:ff:2b:b6:77:4b:57:2a:
42:c6:92:e7:b2:b4:e7:76:e2:60:f0:60:c3:e9:c6:
f2:5a:59:59:0d:cb:21:4b:eb:73:36:37:29:a3:80:
96:83:79:da:0d:d6:20:3d:4e:8c:c9:d5:73:8b:91:
83:a8:03:b7:fe:40:06:9d:29:a4:41:1b:ec:41:d4:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:51:14:B2:E1:BD:79:73:1B:37:9F:93:DD:43:9C:05:24:BE:54
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J6lRFLLhvXlzGzefk91DnAUkvlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.245.0-45.133.246.255
46.17.106.0/24
185.94.167.0/24
185.105.118.0/24
193.109.84.0/24
193.124.180.0/23
194.67.200.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ba:96:3d:09:10:6c:32:14:50:bd:44:f0:66:3b:52:d2:02:
86:38:27:10:d5:ad:18:ca:55:3f:f4:e3:c7:94:bf:52:9e:13:
dd:17:3a:81:3c:2d:16:af:7b:68:85:47:d4:0d:31:17:a8:db:
0c:0c:d9:35:1d:19:96:f8:0c:9c:a5:0e:bb:8d:68:13:ec:46:
40:96:cb:a8:34:e2:20:40:ae:cc:de:0f:c6:44:43:ef:fc:34:
ec:59:8f:82:3c:8d:5d:83:26:4b:5b:81:9b:8e:e2:0d:c7:1c:
25:c7:b1:28:ab:0e:fd:9a:c4:f5:03:12:e8:69:db:9d:ea:95:
23:8c:f9:34:90:ec:0a:f8:3e:c0:28:12:f2:48:fe:b3:70:f8:
1a:a4:e1:a4:2f:46:8f:2a:20:10:1a:ff:57:65:75:90:34:3b:
40:c2:77:69:34:1a:68:90:44:dd:10:34:9f:c2:c4:ad:f7:5a:
f7:81:48:ff:c7:6d:3f:45:a2:b0:36:f2:a6:a9:03:12:71:a4:
f9:fa:d0:ba:b1:40:51:72:57:23:94:98:f5:da:a5:ee:91:55:
b8:2a:5d:55:fd:d9:26:c3:2c:5c:d4:ae:53:c5:bb:90:54:7e:
34:1a:fb:28:d3:fd:04:b9:e1:79:b2:24:e5:17:59:4e:d0:9f:
4c:f4:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:25:56 2025 by rpki-client