Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9lBgFr8a2m1s5P1Nzp2DH6RUHXY.roa
File: 9lBgFr8a2m1s5P1Nzp2DH6RUHXY.roa (raw, json)
Hash identifier: ht2KtjymaqFi0cOyAIEDhdowpcDiZnHWv+FM8CkXsJI=
Subject key identifier: F6:50:60:16:BF:1A:DA:6D:6C:E4:FD:4D:CE:9D:83:1F:A4:54:1D:76
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01956D1AFC9AB9264F56FF03A6E97497B681
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9lBgFr8a2m1s5P1Nzp2DH6RUHXY.roa
Signing time: Thu 06 Mar 2025 20:17:19 +0000
ROA not before: Thu 06 Mar 2025 20:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 45.146.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 14:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6d:1a:fc:9a:b9:26:4f:56:ff:03:a6:e9:74:97:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 6 20:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6506016bf1ada6d6ce4fd4dce9d831fa4541d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:85:b9:37:77:29:ff:d0:51:e2:eb:7c:f4:
ba:8b:1e:12:38:8b:59:3c:4a:2d:2d:f4:4f:b0:65:
a3:c2:bb:be:9a:34:4f:dd:ac:e2:04:71:5a:16:83:
7e:05:c4:a8:15:ac:e7:16:34:8b:b4:33:27:d1:92:
79:6f:d5:8e:c7:85:0b:2f:fa:ba:f8:34:16:98:c5:
2b:24:81:4b:30:0e:8a:1a:93:50:c2:49:f3:75:35:
0d:9a:5c:14:90:b1:0a:44:b7:27:32:b5:95:ef:98:
49:a4:7d:f3:07:80:83:82:e6:5e:fb:0f:a4:b3:a1:
02:0d:f6:4b:c5:65:67:e1:5c:75:fe:e8:77:39:72:
10:9c:e2:da:1d:ac:18:df:fe:5e:48:b2:3f:28:06:
4f:5f:1f:20:07:88:40:0d:2b:cd:6e:35:19:9d:7e:
df:01:ac:f0:1f:db:6b:43:55:7d:a5:e5:4f:8e:30:
47:11:b5:5f:73:db:6c:02:dd:e2:46:3f:07:b0:b2:
ea:d9:c8:07:1c:6a:dc:57:36:8d:b6:a0:ca:62:55:
ae:86:24:10:bb:1f:0e:fa:63:80:98:ff:48:52:17:
48:17:03:19:3b:51:00:60:18:09:a5:aa:db:1a:ea:
d1:53:8c:3b:03:7c:7c:48:2e:03:d5:b9:d7:18:ee:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:60:16:BF:1A:DA:6D:6C:E4:FD:4D:CE:9D:83:1F:A4:54:1D:76
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9lBgFr8a2m1s5P1Nzp2DH6RUHXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.40.0/24
Signature Algorithm: sha256WithRSAEncryption
22:17:c4:15:59:61:59:c4:a9:6f:2b:94:e0:55:be:8a:ff:a4:
77:06:92:3f:eb:92:9c:02:05:c1:31:ad:30:96:eb:88:95:c4:
84:a1:fb:c0:83:43:51:2a:5b:fd:90:11:3c:84:7c:12:79:0a:
15:7f:b2:12:46:7a:99:b1:b6:d5:f2:e7:1d:89:f0:17:d1:4d:
71:b8:0a:76:02:56:fe:ec:17:40:c1:d2:53:1a:c6:73:9a:29:
5e:89:16:9b:de:8c:1a:8a:1a:82:4d:61:44:c4:e6:98:db:ff:
bb:76:59:12:e6:65:b4:65:33:a4:9d:2e:65:e3:ef:19:36:8a:
4a:50:d9:4a:bc:da:cb:76:d4:01:9d:f9:a4:73:72:77:a7:22:
78:34:da:48:19:55:03:41:7d:99:73:32:10:6e:c2:7f:78:e3:
7b:54:c7:b8:d1:04:52:61:90:8c:5e:04:fc:55:d4:d4:c9:f4:
bf:9c:31:21:cf:e5:91:e1:cf:8c:16:c4:2b:69:af:c8:6c:b0:
5e:68:30:49:45:da:0b:e8:66:9d:00:a1:23:82:39:40:c6:f9:
7a:a7:46:3a:95:c6:1a:a6:7b:d2:b4:2a:e2:e7:d0:bf:21:c4:
f0:77:aa:59:6b:a1:96:f3:dd:57:80:d4:2c:2d:6c:5e:fb:ea:
a9:90:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:23 2025 by rpki-client