Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7UOu2eHk8Vx5_R2ixOFAp72E_2M.roa
File: 7UOu2eHk8Vx5_R2ixOFAp72E_2M.roa (raw, json)
Hash identifier: Nb1SGH6DUJtqmZPZe3Y6/KLPNjoR5BzXsE6cVj+M+L8=
Subject key identifier: ED:43:AE:D9:E1:E4:F1:5C:79:FD:1D:A2:C4:E1:40:A7:BD:84:FF:63
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0195A835736855F9BCF2C1034F79195124BE
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7UOu2eHk8Vx5_R2ixOFAp72E_2M.roa
Signing time: Tue 18 Mar 2025 07:43:49 +0000
ROA not before: Tue 18 Mar 2025 07:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153656
IP address blocks: 45.135.237.0/24 maxlen: 24
103.100.170.0/24 maxlen: 24
185.235.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 09:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:35:73:68:55:f9:bc:f2:c1:03:4f:79:19:51:24:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 18 07:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed43aed9e1e4f15c79fd1da2c4e140a7bd84ff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:89:79:95:8f:a6:b5:cf:10:ac:69:13:dc:
96:c9:70:3f:ea:52:a1:58:ea:78:4a:b0:47:c2:a6:
df:17:89:63:a6:23:c8:fa:b8:e7:ef:97:a2:79:a1:
04:ec:56:a1:7e:9e:5d:3a:16:a2:a4:d1:02:b7:3b:
cd:81:37:35:e6:52:d3:24:17:48:79:8c:21:8e:27:
31:b3:95:93:fc:b1:e2:93:55:1f:21:79:5d:25:3d:
8f:66:a7:f2:09:76:b2:64:70:61:05:07:60:12:65:
36:87:7f:11:9c:86:93:65:20:cb:8f:5c:d0:2a:6b:
c3:9c:6b:75:13:a0:42:ca:41:53:52:4c:74:80:30:
f8:50:2c:bc:fa:06:a2:71:ca:14:2d:b6:6f:64:ce:
3f:c8:b0:12:3c:b6:d5:6f:74:1c:0d:05:1d:d1:83:
10:f9:e0:8e:ab:8a:5f:71:8a:f2:2a:b8:e8:f3:7e:
11:7b:fa:f9:b9:4b:98:af:fb:5f:34:17:5f:42:89:
b9:22:45:6e:4e:ea:28:0e:2c:06:db:d7:5f:5d:c0:
01:e8:9d:c9:1d:96:5b:03:ac:a1:e8:7d:9e:c7:a3:
0b:ad:af:c0:ac:60:e4:d0:c2:e0:82:80:74:13:57:
25:4a:82:7c:96:8d:f5:fe:d8:c6:98:2b:0b:a3:be:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:AE:D9:E1:E4:F1:5C:79:FD:1D:A2:C4:E1:40:A7:BD:84:FF:63
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7UOu2eHk8Vx5_R2ixOFAp72E_2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
103.100.170.0/24
185.235.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:c8:50:59:a1:a6:80:70:a9:29:61:d0:25:ed:0e:0a:0e:f3:
d2:48:fa:cb:d4:34:c4:5f:3d:ab:37:e7:79:eb:c4:af:6e:23:
57:a8:da:8c:cf:1a:60:5c:5c:ab:93:e1:18:2b:75:e5:19:42:
a2:10:63:9c:53:4a:a3:6c:99:60:6e:4b:4e:80:8d:ba:db:50:
7d:13:ca:95:fb:3a:8b:36:1b:d3:9e:ab:4f:b4:f1:5a:0e:d0:
28:9d:68:9b:79:62:4d:01:0e:fb:de:59:78:41:1f:c6:f0:84:
0e:20:9a:81:fa:b5:85:cb:61:3b:08:4f:42:a8:b4:85:ec:1d:
48:8a:06:3d:fe:66:ec:b2:5b:28:5b:a6:84:6d:60:53:3d:59:
a0:11:02:81:a2:c9:7d:7e:9a:d2:b2:79:38:49:a4:ed:30:24:
00:7e:b9:cb:5c:a4:71:a4:d8:57:fe:99:15:ef:32:15:e5:99:
02:e0:41:d5:35:17:cc:2b:7b:f0:8c:01:96:21:4e:d4:14:49:
77:3c:f0:23:6f:0e:fd:3c:a2:8a:fc:bd:f2:36:6b:ca:e5:bd:
45:86:23:2c:76:15:4b:73:a9:05:db:be:b2:5f:a3:33:81:28:
9b:4c:f4:48:97:43:70:98:f3:04:7b:43:9c:66:7f:ea:fd:f5:
70:3f:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:37 2025 by rpki-client