Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/0eDmZRtmAKW6HDyVflTA-XWq4tI.roa
File: 0eDmZRtmAKW6HDyVflTA-XWq4tI.roa (raw, json)
Hash identifier: Iu6kRiLW2EVJpsL6+OGSN+HGlCMRtwc6gkB/2fjAUKY=
Subject key identifier: D1:E0:E6:65:1B:66:00:A5:BA:1C:3C:95:7E:54:C0:F9:75:AA:E2:D2
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0196D4C657EAF09FFFF84C7DED7CE5C3B03C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/0eDmZRtmAKW6HDyVflTA-XWq4tI.roa
Signing time: Thu 15 May 2025 16:28:10 +0000
ROA not before: Thu 15 May 2025 16:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 21:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:c6:57:ea:f0:9f:ff:f8:4c:7d:ed:7c:e5:c3:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: May 15 16:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e0e6651b6600a5ba1c3c957e54c0f975aae2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:a4:87:0d:0b:d5:fb:18:6e:61:fa:8b:88:
ab:7d:38:7b:00:44:50:38:52:ac:0e:42:e4:42:0e:
b0:f6:37:03:4e:4f:0e:d0:c0:12:f3:8d:df:a8:0b:
63:a1:90:62:66:27:a9:38:81:ac:76:6b:40:cd:4c:
de:61:c6:72:99:1c:c0:d6:17:3b:de:bc:ca:c6:d6:
9d:5a:e9:2e:0c:56:c0:93:9a:6f:e3:85:1d:38:65:
d4:75:3d:d0:fa:55:21:3b:cc:e6:83:b6:af:3e:99:
83:13:77:0f:9a:c5:af:2c:d8:14:5e:4e:01:fb:07:
6f:ec:8b:54:ed:9c:f0:16:86:38:a4:d4:23:19:b5:
fd:08:37:a9:6a:f0:a4:c8:d7:e1:e9:7b:4c:a6:f4:
95:04:29:4d:90:5a:4b:22:e2:1c:e8:82:c1:e7:7b:
4e:6c:87:82:01:be:19:5f:af:e3:e2:fe:33:97:c3:
ea:6d:3c:1b:aa:f4:61:10:58:6b:c4:42:9e:29:13:
ce:16:c8:f8:db:28:5d:47:c5:5e:85:cc:40:61:a1:
3f:17:55:1c:66:ca:df:f0:df:2e:ef:8f:12:39:56:
1d:9a:72:f9:c7:45:70:b6:7f:48:2f:c9:88:16:37:
a1:ba:8a:44:b1:7b:4f:4e:94:7d:e2:01:a4:7c:d3:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:E6:65:1B:66:00:A5:BA:1C:3C:95:7E:54:C0:F9:75:AA:E2:D2
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/0eDmZRtmAKW6HDyVflTA-XWq4tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
34:36:c4:b3:ff:d0:56:6f:70:88:2b:d7:96:b8:95:00:dd:b3:
a5:30:1d:08:ca:6c:33:95:6c:a5:e0:28:e1:a1:ca:59:dd:fa:
03:cf:fa:7b:93:4c:cb:7f:66:28:a4:eb:2d:e4:05:bf:ed:a4:
3a:26:0c:ac:11:e3:33:bc:b8:04:76:8f:2c:02:e1:b3:2e:bc:
a3:78:c6:42:43:37:50:23:54:01:a3:8f:59:e1:ad:2c:58:61:
64:b1:73:46:04:71:90:cb:79:cd:d4:e0:24:62:bf:2d:f6:21:
01:01:00:25:65:89:4a:3c:26:e6:72:d6:37:33:12:95:ce:86:
b6:de:78:7a:ac:d5:4c:ca:8b:68:14:63:a4:34:7b:f9:1b:d5:
7d:f2:8c:04:b3:2e:fa:65:bf:b1:5f:8f:1e:ad:5d:0c:0b:0d:
bf:b4:c0:38:4b:51:1e:b1:94:ca:2a:00:10:af:2d:04:0a:6d:
ca:48:3a:31:90:01:7a:f8:70:ff:96:43:d6:3c:c3:12:ac:b1:
e2:00:6b:96:49:ad:b8:3d:03:33:ef:7b:08:ee:ef:0a:ca:5a:
0a:61:63:f9:b5:e4:91:a2:01:00:1b:5d:d5:88:fa:c0:32:95:
59:3a:a0:f8:49:63:77:c7:b1:b3:54:25:67:47:e0:2e:16:ba:
ed:77:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:42 2025 by rpki-client