Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/p8MHvbCM6npWdHW8gD2Eo_pJsZ0.roa
File: p8MHvbCM6npWdHW8gD2Eo_pJsZ0.roa (raw, json)
Hash identifier: zZ+gjo6qamsfGiOhx6/IBMnCo8iw/FXsjR6Y11EE8oY=
Subject key identifier: A7:C3:07:BD:B0:8C:EA:7A:56:74:75:BC:80:3D:84:A3:FA:49:B1:9D
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019816FF973DF5CE5E78448FFA2708190957
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/p8MHvbCM6npWdHW8gD2Eo_pJsZ0.roa
Signing time: Thu 17 Jul 2025 06:08:25 +0000
ROA not before: Thu 17 Jul 2025 06:08:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214503
IP address blocks: 45.84.106.0/24 maxlen: 24
45.84.107.0/24 maxlen: 24
2a0d:bbc1::/48 maxlen: 48
2a0d:bbc7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Jul 2025 09:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:16:ff:97:3d:f5:ce:5e:78:44:8f:fa:27:08:19:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Jul 17 06:08:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7c307bdb08cea7a567475bc803d84a3fa49b19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:37:d0:41:1d:4f:fa:ad:c0:fd:7a:06:10:
68:40:1d:db:60:6a:c7:7e:4c:dd:22:29:6a:08:7c:
54:0b:8b:94:91:ec:0b:76:6f:38:b3:26:61:e8:51:
2a:41:ac:cd:01:fc:22:69:b3:d1:a2:22:9f:5d:13:
3d:aa:7e:2b:4d:8b:9d:2d:06:c5:57:42:f0:78:12:
f5:9c:59:03:be:00:89:f9:03:ac:7f:f1:b3:c2:5f:
87:5f:b9:18:c7:d7:e0:0a:c1:3a:fd:01:5a:66:d4:
6a:11:6b:66:36:7a:d2:33:63:db:80:eb:34:6e:70:
c5:6a:bc:fe:5c:a8:61:88:2a:f8:d4:91:6e:c1:b7:
49:96:2a:92:38:6f:6b:76:ec:d8:7b:63:df:91:ed:
96:67:39:bd:80:b5:69:7a:b3:7f:1b:98:5f:24:8b:
d1:a9:45:44:bc:c2:47:9e:d2:57:e1:9d:bb:43:58:
b3:c3:60:a6:0c:0d:ed:12:39:7e:70:d7:1e:5f:44:
22:19:fa:76:3e:92:68:24:c8:83:4c:c0:10:6f:cd:
11:fc:63:5e:b8:c9:bb:c8:00:c6:f9:57:69:de:3e:
23:96:4b:70:40:a5:32:5e:ab:3d:ac:9e:7a:6f:4b:
6b:f5:5e:ee:0c:84:58:d4:01:0f:5f:d6:cc:6b:b5:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:07:BD:B0:8C:EA:7A:56:74:75:BC:80:3D:84:A3:FA:49:B1:9D
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/p8MHvbCM6npWdHW8gD2Eo_pJsZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.106.0/23
IPv6:
2a0d:bbc1::/48
2a0d:bbc7::/48
Signature Algorithm: sha256WithRSAEncryption
05:f0:9a:cd:29:6b:52:16:29:77:81:b3:d6:30:3a:a1:e2:0f:
bb:95:a7:08:b5:4f:54:d2:47:04:00:37:1a:f6:e6:b3:1a:d5:
b7:82:42:07:d1:2e:80:3f:cb:08:70:7e:c4:97:9a:45:d2:87:
40:6c:0c:ff:a8:a3:a3:2f:c9:88:b2:2c:85:41:66:ef:05:3b:
a5:ff:0f:34:7e:13:b9:1d:d6:2a:27:b4:33:cf:b8:e6:8d:91:
c9:3c:c6:86:6a:d7:f0:fe:fd:0a:93:97:dc:10:37:07:7d:83:
1f:08:e5:63:b6:2b:d3:9d:da:0c:2f:d2:c8:b7:9e:e8:e0:54:
93:e2:ee:84:c4:e8:18:8b:e4:b5:a1:33:8a:b0:fd:0f:e2:04:
ee:82:5d:a4:ac:da:bd:4d:88:9c:c3:50:68:0f:33:59:06:86:
4e:6b:a5:d5:e1:34:fa:91:1b:79:93:1e:6a:31:db:d4:26:c1:
bc:d8:5f:42:fc:06:1c:63:43:90:79:11:84:c1:a2:d7:3e:fe:
ac:d4:a6:ab:34:ab:de:eb:06:a4:13:41:02:ca:0d:2b:fe:c3:
dc:4d:df:b2:72:2e:c2:cf:ce:0a:11:d2:6f:d4:45:66:1f:d4:
76:52:63:a7:05:4b:2e:6a:7b:e3:37:ff:82:3c:82:c8:54:c2:
db:25:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:34 2025 by rpki-client