Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4-udNuQAlrpfrMX17Ey9oE6-yxQ.roa
File: 4-udNuQAlrpfrMX17Ey9oE6-yxQ.roa (raw, json)
Hash identifier: 7NrX3iRHeHHboHXGjmMuy312P5NmM5L3WSoPtGtasV4=
Subject key identifier: E3:EB:9D:36:E4:00:96:BA:5F:AC:C5:F5:EC:4C:BD:A0:4E:BE:CB:14
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195277FD2AE4775F6B7C2CC55FD8BC2AD5C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4-udNuQAlrpfrMX17Ey9oE6-yxQ.roa
Signing time: Fri 21 Feb 2025 07:54:03 +0000
ROA not before: Fri 21 Feb 2025 07:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 07:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:7f:d2:ae:47:75:f6:b7:c2:cc:55:fd:8b:c2:ad:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 21 07:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3eb9d36e40096ba5facc5f5ec4cbda04ebecb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:bb:82:0f:bc:65:33:ee:b4:77:bb:59:b5:
90:6b:6a:db:c3:a0:38:fe:36:10:8b:81:b2:e4:bc:
32:a3:ec:0f:6c:ee:df:6f:2c:cd:b7:d0:00:73:94:
52:8a:ef:c5:79:4a:12:79:b9:c9:2f:ab:1d:df:50:
01:2e:0b:a7:b1:f2:8d:30:1e:f6:a9:6f:73:41:c2:
b5:5b:f5:1c:40:37:c8:d5:8b:98:69:3a:2f:6f:30:
96:b0:55:b4:1e:f8:ad:5a:d4:a4:7c:bb:80:42:5e:
a3:b6:e9:65:f0:82:1b:8d:68:bb:41:f4:dc:9f:36:
e1:d9:6c:d0:03:d6:be:0a:b7:5f:b9:c5:c7:eb:40:
92:ea:c0:0d:17:35:a9:92:d1:15:28:40:79:e8:7c:
8f:10:e5:87:57:75:12:3d:86:2a:32:57:18:05:40:
28:f7:30:7b:df:b6:eb:0c:05:cd:e6:ad:f8:cb:53:
1e:1c:0a:eb:c9:29:de:6b:55:7e:58:60:e4:f1:f3:
27:8c:51:6d:30:1d:79:8f:6f:0d:70:68:fe:0f:4d:
00:98:4c:ad:d1:d6:51:d4:f3:e5:f8:57:9a:2d:03:
6a:cf:1c:4d:50:f5:7c:39:75:66:e9:a0:ce:b2:ac:
2d:3c:ea:e7:3c:59:00:c0:c9:4c:a5:f5:f3:e2:c9:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EB:9D:36:E4:00:96:BA:5F:AC:C5:F5:EC:4C:BD:A0:4E:BE:CB:14
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4-udNuQAlrpfrMX17Ey9oE6-yxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.118.248.0/24
45.131.215.0/24
45.137.81.0/24
45.141.177.0/24
45.152.208.0/24
85.209.128.0/24
103.114.43.0/24
185.122.171.0/24
185.126.64.0/24
193.23.245.0/24
194.33.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:84:16:22:62:6b:be:af:2e:42:8b:5c:c6:a0:72:ca:42:d0:
79:76:05:bb:bb:f0:58:d4:cc:ba:d8:a2:c3:83:f9:1b:75:90:
80:78:af:43:f0:fb:eb:d6:6c:fe:ef:74:fb:84:f6:b7:6a:62:
0d:43:42:b8:35:ae:fa:85:aa:b8:4c:4a:7e:5c:57:9e:58:ab:
0f:4e:c9:62:34:0f:61:66:e3:03:0c:1e:58:14:82:23:5e:a0:
6b:fa:78:af:68:e3:d3:32:3d:92:f5:46:92:8e:68:65:c8:00:
80:65:34:5c:d7:0f:85:58:69:8e:e4:b3:8c:71:b2:73:1f:eb:
ef:64:d0:d5:31:ea:aa:3d:ed:f4:44:bc:d2:6d:8f:4f:c7:b1:
f3:b4:89:23:35:31:c3:9e:42:20:46:be:c5:67:58:98:a8:41:
34:0d:9e:55:9f:34:0a:df:cc:9f:ab:3e:3f:c3:c8:34:4c:78:
13:9d:ca:70:39:c9:68:30:f6:cb:1b:7d:77:5f:98:d6:06:e3:
7a:f6:ed:0d:10:c4:80:9e:c9:30:c7:13:b1:97:cd:65:01:fc:
d7:8f:76:e6:9f:eb:3c:68:ec:7d:bb:2e:dc:35:f8:f9:ad:b7:
5e:f7:fd:fa:f7:4c:cf:1d:da:4e:79:f5:d4:d6:1e:6b:97:fa:
35:2b:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:51 2025 by rpki-client