Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/wc9voO9ng2Gaj06dCANRl7x97qU.roa
File: wc9voO9ng2Gaj06dCANRl7x97qU.roa (raw, json)
Hash identifier: b5yPXj6Vn5ZjXwheWD+2+GtdSp2FM5MtIaxW/8KLRAk=
Subject key identifier: C1:CF:6F:A0:EF:67:83:61:9A:8F:4E:9D:08:03:51:97:BC:7D:EE:A5
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 0196D03F48A19E4D43881F8C6A33DA138D7A
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/wc9voO9ng2Gaj06dCANRl7x97qU.roa
Signing time: Wed 14 May 2025 19:22:10 +0000
ROA not before: Wed 14 May 2025 19:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.156.116.0/24 maxlen: 24
45.156.118.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 12:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:3f:48:a1:9e:4d:43:88:1f:8c:6a:33:da:13:8d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: May 14 19:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1cf6fa0ef6783619a8f4e9d08035197bc7deea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:82:bc:b1:2c:5f:0c:e3:f8:bf:ce:63:88:
10:96:ea:55:49:a1:0e:7c:d6:84:1d:06:f1:e8:9a:
51:8d:85:3e:51:4d:6f:32:12:c6:70:db:71:7d:b2:
e1:78:46:86:61:38:e8:0e:43:6c:82:a8:c8:93:18:
ed:6c:80:36:5a:77:38:38:fa:70:f9:9d:f6:1b:47:
a3:73:bf:4e:ce:39:03:e0:58:f8:f6:a9:f4:1c:b9:
d4:5f:a5:94:aa:c8:15:8c:d4:42:c2:41:49:37:45:
0b:79:69:51:97:8d:0b:a5:33:99:c4:82:d8:0a:9c:
7e:f5:4f:27:87:e1:d8:e4:1a:9e:ca:f0:34:42:13:
a9:2c:55:bc:ec:cd:66:78:95:bc:2c:49:d8:e7:84:
5a:32:0f:c5:c7:44:4a:ae:78:f6:81:e2:e5:b8:3e:
da:e4:61:f2:c9:21:90:4d:63:b2:b8:55:ff:1a:78:
ff:cc:33:a0:2c:3e:4c:af:66:25:ce:7c:af:5d:08:
cc:8c:5c:f4:16:24:14:c3:c8:81:82:2c:75:8b:9d:
2a:41:97:16:fe:74:27:d9:46:79:42:96:0c:a7:0f:
40:35:79:47:65:38:a9:c2:9e:c8:58:6f:88:ee:98:
b4:d9:f8:26:b5:5f:9a:9e:b7:d9:1c:ca:d1:be:b2:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:6F:A0:EF:67:83:61:9A:8F:4E:9D:08:03:51:97:BC:7D:EE:A5
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/wc9voO9ng2Gaj06dCANRl7x97qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/24
45.156.118.0/24
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5f:66:96:ba:09:93:71:7f:e8:1f:02:37:93:41:ab:bf:72:
e2:09:d0:41:77:07:15:e5:24:8c:c1:75:96:f5:44:e7:04:20:
a9:8a:45:7c:8e:98:37:d8:6e:19:47:da:92:8a:be:a3:b3:64:
e9:16:85:de:5a:a6:22:cd:ab:77:88:ce:69:0c:ec:67:6a:9e:
64:db:1d:01:4d:5b:8d:7f:42:e8:7e:ab:4a:7c:94:fc:8e:42:
b5:cb:07:b9:ba:dc:c4:78:f4:6c:d4:fa:8c:d7:51:fe:c3:8f:
5c:94:a6:b3:10:8d:99:38:6c:72:65:00:24:d0:ab:a2:25:8d:
8c:ca:a5:e2:ea:d3:53:7e:70:7c:38:d0:6a:04:5c:0b:43:1f:
07:c1:08:b8:79:20:d3:f8:0a:42:b6:29:13:80:e8:eb:10:e8:
c7:fa:c6:39:a6:19:07:f4:5e:fd:24:17:71:d1:0b:3b:b7:60:
99:17:b8:93:86:86:ee:e5:fb:c2:7d:22:d7:03:f1:88:1c:46:
ba:b8:9d:26:e1:fb:d6:7f:38:ff:56:a2:05:5c:9f:b4:7a:e3:
80:7d:22:9e:cd:52:6b:09:10:56:d8:59:54:d2:c5:87:34:c0:
f2:f8:50:ad:35:43:83:86:a7:90:10:78:7f:a3:02:7e:fe:d7:
17:aa:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:26 2025 by rpki-client