Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/754G1VzGuafXsBrNKM3RcEzb7A8.roa
File: 754G1VzGuafXsBrNKM3RcEzb7A8.roa (raw, json)
Hash identifier: 4wmBCZaKX7puYbcwAhd8315tsWBxuE9j3OXRyIr3Ljc=
Subject key identifier: EF:9E:06:D5:5C:C6:B9:A7:D7:B0:1A:CD:28:CD:D1:70:4C:DB:EC:0F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0196EC891BD62E46125AD777FEF377264861
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/754G1VzGuafXsBrNKM3RcEzb7A8.roa
Signing time: Tue 20 May 2025 07:12:10 +0000
ROA not before: Tue 20 May 2025 07:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.26.0/24 maxlen: 24
89.251.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 10:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:89:1b:d6:2e:46:12:5a:d7:77:fe:f3:77:26:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 20 07:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef9e06d55cc6b9a7d7b01acd28cdd1704cdbec0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b3:b1:8e:39:6d:7c:28:db:7d:e9:55:a6:c5:
e4:02:31:40:8a:ee:c9:a4:97:8d:a9:13:eb:b8:47:
63:bb:37:1f:75:78:c8:5c:3c:61:e4:85:df:65:a4:
d2:c2:d0:e8:4d:d0:7a:d3:82:98:8e:10:95:b8:06:
bf:aa:6a:67:7f:42:89:71:d6:4d:5a:ff:da:d7:ce:
43:ac:46:68:35:b3:55:c5:72:ee:fc:83:26:d0:9e:
09:56:03:1c:0e:92:b3:5a:26:aa:14:dc:bf:76:c9:
61:34:24:cf:7d:c6:4e:65:af:a3:90:84:a8:d0:13:
eb:d9:d5:b6:f7:77:54:d9:19:14:33:37:32:ea:10:
a5:ff:35:b3:0f:84:dd:c5:a8:60:e6:11:f5:35:4b:
99:59:df:fd:0d:5d:a0:38:e9:af:e3:0e:2e:54:9e:
a2:12:1e:bf:c3:82:a0:7f:aa:3a:c4:85:a3:2b:67:
09:54:e1:84:22:8a:9a:83:62:e5:3c:ad:e2:2d:15:
56:01:fe:c4:ae:04:0c:8d:7a:03:da:e5:17:f7:f8:
de:af:90:5e:b9:a7:6c:83:73:9d:05:a1:b4:d4:29:
28:ff:fd:cd:c5:0e:f3:6b:60:e1:d8:38:d9:0a:2d:
65:41:71:31:89:fb:93:d1:1d:3c:18:3a:39:ba:7a:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9E:06:D5:5C:C6:B9:A7:D7:B0:1A:CD:28:CD:D1:70:4C:DB:EC:0F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/754G1VzGuafXsBrNKM3RcEzb7A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a2:5f:71:db:ea:6a:c6:66:ff:c4:b6:38:89:13:27:2e:ec:
ee:d0:e2:a2:e7:87:b8:08:f5:06:07:1a:d2:aa:06:22:4a:a1:
89:78:d7:d3:c0:2f:1b:8d:86:4d:bf:36:e1:b3:e4:0f:37:6c:
08:7e:7a:32:25:79:0a:b0:1b:b0:5b:6c:05:37:7a:38:a6:6d:
c2:2e:17:54:14:6d:13:e6:9b:c8:eb:30:5b:4c:81:5d:ed:a2:
ad:80:28:33:9c:64:c9:c9:c1:95:41:0e:b2:3d:7f:c1:39:bd:
cc:97:b1:56:00:7a:88:7f:b3:45:fa:bd:66:28:e0:39:38:82:
3e:ea:e9:09:d3:6b:0c:9f:27:ec:0a:84:01:80:47:bd:ff:f0:
92:84:62:58:32:98:17:ba:57:fc:0b:d5:0d:04:ed:77:11:b1:
51:9a:4f:8e:f1:68:57:af:5b:10:06:77:b3:13:8b:d5:ad:6d:
e9:15:63:34:90:41:e6:ed:5a:02:8f:79:c6:33:bf:82:55:99:
d1:6e:22:c7:62:4e:ab:b9:3e:00:77:a8:a7:4b:64:d8:48:f8:
32:19:bc:fd:72:a5:f7:c7:23:e2:86:46:97:e4:94:2b:6b:7d:
fd:c7:a2:6e:ff:4b:47:4e:66:82:46:5a:fc:01:bb:66:71:bc:
94:1a:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:22:48 2025 by rpki-client