Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/rd86WW_6QX7Tjb0SMCTA0xC4Eyc.roa
File: rd86WW_6QX7Tjb0SMCTA0xC4Eyc.roa (raw, json)
Hash identifier: M7vRYqwDqstESy+gd2Jvp6ZtebG+AH8K8ZW+1b+uMXU=
Subject key identifier: AD:DF:3A:59:6F:FA:41:7E:D3:8D:BD:12:30:24:C0:D3:10:B8:13:27
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019701EE7828A8BCCA8D5014AE39AE1C2E2D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/rd86WW_6QX7Tjb0SMCTA0xC4Eyc.roa
Signing time: Sat 24 May 2025 10:54:54 +0000
ROA not before: Sat 24 May 2025 10:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.26.0/24 maxlen: 24
89.21.84.0/24 maxlen: 24
89.251.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 11:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:ee:78:28:a8:bc:ca:8d:50:14:ae:39:ae:1c:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 24 10:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=addf3a596ffa417ed38dbd123024c0d310b81327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:04:fc:69:86:f5:e5:69:24:ab:43:95:41:
52:22:ae:09:4e:2a:82:72:83:88:e3:70:32:23:cd:
64:72:71:6a:40:78:81:42:12:5b:96:43:77:91:90:
a3:05:f6:8b:93:05:d0:12:88:d7:b3:6c:d5:46:85:
ad:a5:d4:63:44:0c:39:52:34:8b:c0:b7:b4:e9:7d:
f9:92:13:65:cf:79:f8:a6:b3:09:e1:27:e5:72:f2:
c3:da:53:c3:c7:bd:89:9e:64:b6:18:b4:6c:2d:5f:
cd:f0:7f:84:3c:75:f1:56:65:8b:ec:3c:a5:a7:61:
1e:e1:46:39:7c:0a:32:0a:7f:21:3a:a6:cc:74:90:
76:1b:b9:cb:d2:86:ed:23:eb:1e:a0:a7:02:ce:42:
6b:9e:47:0b:b1:29:ad:69:96:cf:b3:16:c5:3f:05:
7e:15:c8:ff:d1:da:d8:42:04:9e:78:4a:83:d6:48:
6d:12:5a:32:da:22:d0:1b:ab:18:25:fc:c7:75:2f:
18:ea:2f:80:03:9b:16:df:c7:82:b4:50:8b:47:4e:
ae:09:27:49:1f:65:0c:2d:c9:c5:b9:a7:3f:78:1f:
74:8b:6d:ff:21:1c:f2:af:96:e9:91:1b:8d:4a:17:
6c:30:ca:e3:47:50:4e:ff:22:ec:3f:6c:be:9f:74:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:3A:59:6F:FA:41:7E:D3:8D:BD:12:30:24:C0:D3:10:B8:13:27
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/rd86WW_6QX7Tjb0SMCTA0xC4Eyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.21.84.0/24
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7a:e3:da:80:2c:0f:6a:eb:77:0c:4e:aa:9f:61:49:2e:3c:
af:68:df:2e:02:d3:f2:d7:18:e7:d3:14:a5:4c:7e:b7:a8:32:
f8:23:ed:f9:0b:7b:a6:46:d3:55:77:4b:3d:b5:5e:00:8a:89:
9b:da:3e:ee:2f:e5:f5:8d:b6:79:3e:37:f2:ce:ef:03:47:e3:
1a:a1:d6:10:57:87:10:00:e3:b8:b7:fa:9b:69:94:8a:2f:8f:
66:a4:2e:a1:9d:64:ac:e0:ce:3f:2f:31:32:1f:55:ff:42:78:
97:0f:61:00:68:72:36:90:e4:07:d5:9c:99:24:85:06:50:09:
5a:47:ae:0a:c6:e4:de:35:ce:fa:be:d5:ca:47:91:52:67:4b:
82:a8:e1:ee:05:67:6b:d1:48:72:85:5e:6a:c2:2d:af:f6:bf:
b2:86:5f:53:63:de:33:8f:3b:8d:4e:d2:66:24:ba:f8:ca:08:
f6:13:ed:94:58:e2:4f:4f:db:dc:6e:ff:3f:ba:0d:82:c1:4d:
ea:82:ab:ad:5b:10:bf:55:66:89:dc:ec:5f:4f:ce:cd:f5:1f:
e7:07:b7:d6:40:ee:82:d3:40:d2:27:f9:96:00:07:68:9a:4c:
c1:37:65:1c:5e:2d:06:4e:59:61:45:91:4b:0b:71:29:e0:02:
07:30:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:59:40 2025 by rpki-client