Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1T_SwRMVnX7IybWE69aXrN9i5K4.roa
File: 1T_SwRMVnX7IybWE69aXrN9i5K4.roa (raw, json)
Hash identifier: rLBIhUx0O0uYrIVYcC63rm0Ze6miWNiKPDH6mhPbUrU=
Subject key identifier: D5:3F:D2:C1:13:15:9D:7E:C8:C9:B5:84:EB:D6:97:AC:DF:62:E4:AE
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0196D9836A6D4D76B90B7F46552B369AF166
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1T_SwRMVnX7IybWE69aXrN9i5K4.roa
Signing time: Fri 16 May 2025 14:33:10 +0000
ROA not before: Fri 16 May 2025 14:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 45.130.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:83:6a:6d:4d:76:b9:0b:7f:46:55:2b:36:9a:f1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 16 14:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d53fd2c113159d7ec8c9b584ebd697acdf62e4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:cd:6c:b3:ff:f3:4e:44:40:79:0a:c3:25:
e8:c2:dd:22:cd:28:4d:9e:4e:b5:b5:fe:3b:57:08:
59:49:a7:41:de:94:e0:44:6f:31:cf:5d:b5:36:9e:
49:44:9c:4d:06:27:bb:fb:fa:6c:66:ce:37:7f:33:
fa:b8:eb:32:aa:62:f4:a3:ee:7c:47:bc:e0:b3:54:
e9:f2:18:91:50:99:ff:9f:ef:87:b7:30:26:c4:30:
8f:b9:20:6b:9f:ec:77:2f:20:15:af:cf:ce:62:80:
42:42:09:4a:8b:7f:a6:dd:e7:08:e0:3f:e8:a7:1d:
1a:04:36:e7:07:73:d0:05:b2:c4:8a:a0:f9:91:da:
f2:f7:5e:0f:9e:c8:ed:64:1a:81:a5:56:1b:10:23:
d3:03:f7:f8:ec:50:0f:73:b7:87:89:45:f3:a7:f8:
0f:54:51:ca:97:c9:39:24:cf:fa:38:e6:15:da:85:
6a:96:e7:9f:92:86:c3:71:4e:73:7c:a9:eb:43:69:
10:0e:85:27:b5:6e:d6:93:8b:0d:0e:18:cd:95:7b:
18:f7:97:32:d0:a3:ca:c0:d2:8b:29:1b:4a:c8:9a:
6a:79:04:32:8e:0b:40:af:65:62:fb:70:48:9e:e8:
93:87:e1:8c:55:bc:1f:da:f9:ef:b0:5c:43:00:84:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:D2:C1:13:15:9D:7E:C8:C9:B5:84:EB:D6:97:AC:DF:62:E4:AE
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1T_SwRMVnX7IybWE69aXrN9i5K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.145.0/24
Signature Algorithm: sha256WithRSAEncryption
85:80:96:8f:8b:af:31:62:92:60:18:7a:83:a9:d9:84:18:82:
75:5e:45:6a:6a:8c:ed:af:99:56:a1:d2:7c:58:f2:a0:9a:a7:
bf:b2:ae:4a:33:ad:d9:52:90:ef:4a:bc:d7:74:48:4b:8b:b3:
ba:62:b9:05:38:9a:43:67:21:46:91:e9:11:a1:6f:8a:94:6e:
3c:41:8c:29:07:15:b3:11:13:1a:f4:75:aa:ee:05:85:94:0c:
0d:ad:c3:f3:d8:05:d0:85:6b:57:4b:17:33:eb:c5:ae:00:4c:
d5:e9:2d:6c:2e:af:73:c9:f8:a1:34:21:49:da:67:ba:c9:eb:
67:35:77:77:d9:57:68:98:69:51:45:54:c8:82:da:b7:3f:f2:
3c:05:bb:83:6b:f6:64:10:e5:39:51:84:4c:f1:b8:c3:6d:06:
3b:94:d6:b7:4d:a9:ec:13:29:d9:05:68:21:a3:41:bd:c6:c0:
bc:cb:56:d7:0c:e7:0d:8d:85:13:9a:2c:8d:2e:65:c7:87:f4:
21:1c:a8:d2:7d:90:d3:3e:aa:cd:1b:6a:7b:e4:85:6d:ab:1b:
2e:85:5c:8d:bc:b5:e6:de:1b:d2:7c:eb:6d:7d:1a:d8:8c:2e:
81:1a:7e:ae:69:9f:ea:9b:78:bd:7f:1c:0f:94:eb:5f:28:74:
47:1a:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:07:32 2025 by rpki-client