Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/R3iQwKHRBkHmMhTIJ-JXuM9LjFs.roa
File: R3iQwKHRBkHmMhTIJ-JXuM9LjFs.roa (raw, json)
Hash identifier: YhVH0I/rPbHFfHkk5NJE7kfKmaX+XcwZTuP0b7a2FeM=
Subject key identifier: 47:78:90:C0:A1:D1:06:41:E6:32:14:C8:27:E2:57:B8:CF:4B:8C:5B
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0194377C46E97DC4532B84695ACBD4F42A67
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/R3iQwKHRBkHmMhTIJ-JXuM9LjFs.roa
Signing time: Sun 05 Jan 2025 17:21:18 +0000
ROA not before: Sun 05 Jan 2025 17:21:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 01:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:37:7c:46:e9:7d:c4:53:2b:84:69:5a:cb:d4:f4:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 5 17:21:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477890c0a1d10641e63214c827e257b8cf4b8c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:95:ad:02:c8:01:ed:71:87:f8:33:6b:77:
79:fe:61:3d:f4:b5:2b:00:34:e2:48:6c:ea:3f:90:
6d:08:36:fd:40:e3:b2:32:25:0e:ce:67:0e:13:57:
f5:8f:df:e2:63:96:9c:d8:21:0a:6c:6c:48:d5:34:
4c:fb:0c:f4:5f:ab:9a:70:e0:42:b9:41:d7:7a:64:
4b:69:4e:3b:8e:32:de:bd:c2:96:4a:fb:c6:a9:c8:
0f:53:1f:90:ac:47:68:d0:e5:29:fa:bb:62:41:c6:
43:b8:03:85:a9:de:b7:d6:d2:d1:18:c7:26:d8:ed:
bf:c6:66:50:55:40:34:55:fe:70:a9:92:91:15:4a:
e2:ed:1d:3d:2c:0f:fc:f4:c6:2e:a4:c9:e5:38:f8:
cc:dc:3c:15:9b:82:57:3f:e4:19:e5:7c:56:4a:f2:
9c:c1:7d:19:1c:d9:de:df:b2:45:70:9a:4b:8f:4c:
f5:25:3e:07:43:fd:11:64:87:90:11:a0:03:31:97:
71:7f:d0:96:f9:8c:38:c5:c9:a9:bb:47:aa:f3:01:
2f:7f:64:0f:3c:a1:52:48:e4:0e:d4:4b:fa:94:5a:
9b:f7:19:44:0c:16:ee:ed:6a:0c:bd:14:fc:8a:cf:
10:40:88:b0:5f:2e:51:93:8b:ca:90:bd:8a:cb:f3:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:78:90:C0:A1:D1:06:41:E6:32:14:C8:27:E2:57:B8:CF:4B:8C:5B
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/R3iQwKHRBkHmMhTIJ-JXuM9LjFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ed:63:bc:29:b6:9f:e0:b4:3f:fe:27:36:7d:d6:aa:99:f5:
99:19:5d:80:3e:f8:9a:a9:c9:1e:b7:36:2f:fe:e5:ba:6e:72:
6f:c4:27:60:d2:14:64:d9:98:25:d8:7c:22:11:ba:fe:b9:18:
b9:2b:9e:80:5c:5e:f2:5e:91:54:88:a2:c2:cd:fa:6d:4e:0b:
ce:e0:c6:e6:3c:ef:2a:7b:17:c7:4e:5b:c5:03:20:75:0c:77:
a0:f3:30:8f:d8:bd:1e:9a:d7:d2:63:08:ba:4f:fb:8b:79:32:
3e:f1:46:dc:7e:8f:ff:b6:56:54:a9:bc:66:bf:20:f9:33:ee:
da:b0:4e:b0:7c:18:22:43:0a:0e:2c:51:72:b7:3f:14:2f:ee:
3e:f9:b8:43:a1:0a:5f:62:b2:b4:89:18:ec:25:e9:23:1a:e0:
30:95:80:3e:0f:ed:dd:70:7c:80:39:e9:a3:da:b7:43:f4:53:
e9:a3:22:78:f3:f5:f3:26:03:71:cb:94:4f:4f:f6:e9:39:6f:
76:31:3d:bf:86:86:27:9a:25:f0:98:4c:cd:d2:e3:d3:80:48:
37:2a:10:fb:bf:7d:41:98:b3:7a:51:5f:15:81:3a:c8:46:eb:
eb:ac:13:8e:60:4d:52:91:94:c7:be:4b:8b:45:b1:6a:e5:3a:
61:bc:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:23:50 2025 by rpki-client