Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4W5ydI5Kyr-XHYlZ-ufvCYiBOtA.roa
File: 4W5ydI5Kyr-XHYlZ-ufvCYiBOtA.roa (raw, json)
Hash identifier: 0fe1z8dKT9nviTv6wIdXbQ1Ro3MPIqXkqzrNCuvohXc=
Subject key identifier: E1:6E:72:74:8E:4A:CA:BF:97:1D:89:59:FA:E7:EF:09:88:81:3A:D0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195F1D73DEC4A9A877DFDB5B70B318BA838
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4W5ydI5Kyr-XHYlZ-ufvCYiBOtA.roa
Signing time: Tue 01 Apr 2025 14:52:49 +0000
ROA not before: Tue 01 Apr 2025 14:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 10 Apr 2025 17:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:d7:3d:ec:4a:9a:87:7d:fd:b5:b7:0b:31:8b:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 1 14:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e16e72748e4acabf971d8959fae7ef0988813ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:e7:68:ab:3b:4a:22:fa:fe:9d:18:42:fd:
3b:1a:54:48:37:e7:f4:e3:1f:16:23:d9:ee:29:da:
18:2c:16:94:b9:0c:82:b5:1d:b5:a3:f8:17:03:cc:
c2:a1:1e:5d:f9:da:cf:57:39:81:41:00:27:bc:5d:
0b:de:b6:b3:86:46:3b:a5:24:aa:7e:9a:7a:28:63:
04:1c:6c:fa:29:bb:89:42:49:ca:ae:6d:e6:1c:eb:
af:5f:b2:28:98:19:fd:be:ae:4d:01:ab:1d:82:58:
92:da:fa:b0:7f:3e:c7:9a:f6:71:f6:19:bb:5b:e0:
de:c0:b4:75:68:4d:4d:0c:ce:27:8a:78:88:bc:12:
a9:74:1e:c7:35:6a:a5:a3:ff:3b:89:d3:7e:b7:8d:
5c:b3:75:73:d6:e1:6f:b4:42:da:8e:6a:71:81:17:
65:42:af:b6:d2:18:5f:a5:fc:2f:ae:83:32:29:44:
59:10:80:4a:df:5e:b4:a4:93:35:f5:de:b6:d2:f5:
c2:b1:b0:29:c9:20:e3:ac:c3:05:56:68:fc:4a:c6:
63:de:f0:63:8a:c3:1e:ed:c8:50:e2:54:17:29:a5:
83:36:53:39:93:72:8c:1c:b0:e7:10:c9:98:36:a7:
03:97:dc:b8:6a:00:c9:ce:c1:40:3a:06:0c:e3:50:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:72:74:8E:4A:CA:BF:97:1D:89:59:FA:E7:EF:09:88:81:3A:D0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4W5ydI5Kyr-XHYlZ-ufvCYiBOtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.131.215.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.146.131.0/24
45.152.208.0/24
85.209.128.0/24
103.114.43.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
193.8.215.0/24
193.23.245.0/24
193.27.19.0/24
194.33.29.0/24
195.158.192.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
83:0f:95:22:e6:5e:b7:aa:88:eb:99:72:eb:77:f0:3c:55:32:
a6:7b:35:bf:67:1c:ce:fa:8a:8b:b2:35:e9:61:2d:5e:c0:b6:
d3:d4:fe:08:ea:3b:35:e5:90:0d:34:19:c8:60:d5:97:cd:69:
a0:b3:e9:18:12:7d:04:c8:cb:54:3d:b3:b0:c7:87:d9:b0:4c:
c1:fc:45:9d:c3:f4:57:9f:c8:76:5e:d6:ed:3d:27:dc:33:3a:
bd:d4:cb:ec:4e:2f:fd:ea:1f:19:fe:79:06:8c:1f:33:42:11:
03:c7:ad:81:98:d9:9f:a9:55:ea:1a:bb:0e:72:b3:65:1b:c8:
a4:5a:42:5a:85:86:0a:fa:60:bd:25:80:2c:31:e9:5f:0b:b1:
84:31:bf:09:12:63:6e:36:60:22:df:a8:49:45:f4:45:c1:09:
7d:7b:07:cf:73:34:da:db:fb:d4:1a:46:b8:e5:cc:35:1f:bb:
1d:3a:e9:36:f1:2c:e5:52:ba:95:83:f3:a0:1d:1e:2c:18:fc:
12:82:89:72:bc:da:ef:e9:48:56:19:43:ab:88:fe:55:72:0e:
0b:2f:1c:8b:18:c1:40:23:e4:fc:f7:94:99:10:50:83:0b:95:
f6:97:e7:c5:95:c2:f0:19:ef:16:a3:6f:cc:16:72:68:8b:e1:
6c:57:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:20:11 2025 by rpki-client