Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/8C9DehOO6pCmzUVmGlOc8wM3iwk.roa
File: 8C9DehOO6pCmzUVmGlOc8wM3iwk.roa (raw, json)
Hash identifier: nR3SvBL+9WSQVFynhyYPl2105MQezN2fuJuFIVfqiME=
Subject key identifier: F0:2F:43:7A:13:8E:EA:90:A6:CD:45:66:1A:53:9C:F3:03:37:8B:09
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 0196E8C5F8B3BCA4E3366327247FF8FA2991
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/8C9DehOO6pCmzUVmGlOc8wM3iwk.roa
Signing time: Mon 19 May 2025 13:40:10 +0000
ROA not before: Mon 19 May 2025 13:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
45.95.171.0/24 maxlen: 24
150.40.96.0/19 maxlen: 19
203.31.217.0/24 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 27 May 2025 22:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:c5:f8:b3:bc:a4:e3:36:63:27:24:7f:f8:fa:29:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: May 19 13:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f02f437a138eea90a6cd45661a539cf303378b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:7f:01:97:e8:9a:da:d3:3b:b1:93:3e:31:
c9:db:df:cf:ba:de:d6:86:11:3e:c0:63:9e:10:64:
aa:92:c2:a6:6a:d2:e5:10:91:d5:c8:2e:fa:80:bd:
56:ac:e4:3f:62:8d:c1:79:4e:2d:04:af:2f:ff:d2:
67:68:80:07:bc:22:c6:e0:6a:9e:3f:55:12:47:15:
d7:39:14:a2:90:b5:7c:d1:52:44:21:68:ec:e6:7c:
e2:f5:ba:9e:64:71:21:90:2b:40:95:44:2a:10:07:
cc:70:ab:f3:16:24:51:04:7b:75:f3:da:f5:90:fb:
51:b9:54:ec:cc:49:b0:84:65:9a:c8:bf:53:27:4a:
e9:fd:f0:56:e2:b8:28:ba:3f:86:d8:84:dd:55:6e:
57:df:38:06:15:e5:a3:c9:7f:9c:1b:2f:d4:fe:98:
ea:c7:05:df:28:9e:0f:c3:fb:01:fc:f9:ec:67:36:
ab:1c:ea:f6:eb:fa:d0:52:e8:f9:a9:52:27:bb:57:
d6:4f:7d:fe:ee:ce:e8:35:ba:4f:15:ca:32:c0:bd:
16:a7:c8:08:4d:dc:dc:a9:37:39:39:24:48:08:c5:
43:22:a6:18:94:ce:a0:a5:20:c3:b8:03:b9:c3:9a:
b0:d1:be:81:80:d3:2e:61:30:db:da:60:57:b4:f1:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:43:7A:13:8E:EA:90:A6:CD:45:66:1A:53:9C:F3:03:37:8B:09
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/8C9DehOO6pCmzUVmGlOc8wM3iwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0/22
150.40.96.0/19
203.31.217.0/24
IPv6:
2a0e:bfc0::-2a0e:bfc7:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:b3:52:37:4f:3d:e2:bd:54:09:9e:0a:ff:cd:d5:38:f0:ed:
7d:0a:fd:a0:69:a9:e2:42:b7:5d:87:71:22:98:46:e0:5b:b9:
44:d3:73:04:81:71:f3:c4:d9:0d:a4:1f:b4:04:06:7f:d8:1e:
9c:25:92:c0:55:c5:85:05:8e:b8:c5:1b:bb:7b:ba:b5:23:53:
1c:a3:2f:49:eb:89:68:2a:95:81:ad:cb:f4:f0:6d:5b:33:b6:
24:fe:2b:98:56:e6:02:29:95:bb:96:11:36:87:49:93:a7:66:
99:d5:f7:86:74:2f:50:13:aa:8d:4c:32:31:62:5c:01:96:6f:
67:5c:3f:92:a5:82:22:e4:74:c7:5d:16:b6:7b:df:77:9a:e6:
75:5a:8b:89:71:f9:0c:a1:c9:dc:b5:e3:ac:6d:a7:9f:b1:f4:
c7:08:ea:95:c1:4b:16:29:2c:5d:dc:a4:51:a5:1e:62:2c:13:
3f:16:9c:aa:24:4f:db:22:be:80:fa:86:8e:a4:52:3a:6b:1f:
25:03:11:0f:30:73:f6:89:66:2d:96:8b:95:be:f2:ed:62:f3:
af:23:ec:f7:77:71:ee:1f:1d:0c:9a:c3:20:9d:32:46:bb:60:
b3:94:ae:3f:65:27:71:e3:60:a5:09:99:1d:31:8e:60:b6:97:
f6:2c:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:50 2025 by rpki-client