Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7B28g9evm7nCj35z9-k-2ddlMbc.roa
File: 7B28g9evm7nCj35z9-k-2ddlMbc.roa (raw, json)
Hash identifier: PkCovwh4JjNzykr/RjR7hI9DPEjV8IRhWskDmwc2fGY=
Subject key identifier: EC:1D:BC:83:D7:AF:9B:B9:C2:8F:7E:73:F7:E9:3E:D9:D7:65:31:B7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193D4E9A6FFF83D8538F5D47FCAAA62FBF2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7B28g9evm7nCj35z9-k-2ddlMbc.roa
Signing time: Tue 17 Dec 2024 13:58:22 +0000
ROA not before: Tue 17 Dec 2024 13:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 45.118.248.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 15:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:e9:a6:ff:f8:3d:85:38:f5:d4:7f:ca:aa:62:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 17 13:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec1dbc83d7af9bb9c28f7e73f7e93ed9d76531b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:ff:65:3c:54:5f:a1:59:71:e0:6c:c2:8f:
71:7f:6e:76:8a:fd:08:ed:72:48:b2:a7:a8:1d:2d:
82:fd:f3:75:9f:6e:70:ac:2e:e0:61:90:30:83:ac:
25:04:30:1a:15:81:4e:05:97:c7:9e:41:9c:d7:89:
cf:07:51:73:34:a7:b2:7f:a9:44:e5:0e:a7:4d:a5:
17:e4:88:a3:ea:30:2c:dd:85:07:04:a4:3c:07:69:
17:2c:18:b5:f0:34:a6:bb:48:e4:1d:89:4d:eb:8f:
db:33:9f:17:af:49:ff:db:6f:23:b1:4f:d5:d9:d2:
49:2d:62:aa:84:16:c1:64:89:46:e6:9b:29:49:f7:
43:86:29:68:08:b5:85:ef:4e:09:5a:ce:92:e9:fc:
a5:eb:c7:d8:5b:5f:5c:59:ef:d6:09:e1:f6:c5:ed:
37:5d:73:c9:ed:3c:4c:a3:e6:7c:06:8f:6d:29:ee:
e0:32:dc:67:0a:c4:a7:36:fa:fc:4c:08:50:44:bd:
48:7d:32:07:42:60:e2:3d:da:1c:b1:ce:f8:88:fe:
89:b4:fe:9a:c5:77:4c:8d:f2:cc:8d:14:9c:18:92:
7c:73:8b:2a:72:e1:56:3a:ff:ee:c8:39:cf:0c:10:
4e:43:f9:5b:44:5a:20:80:43:5d:ce:5c:e4:91:bd:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:BC:83:D7:AF:9B:B9:C2:8F:7E:73:F7:E9:3E:D9:D7:65:31:B7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7B28g9evm7nCj35z9-k-2ddlMbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
45.131.215.0/24
45.137.81.0/24
45.141.177.0/24
85.209.128.0/24
103.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b1:36:68:d3:cc:af:bd:7c:02:f8:f3:6b:bc:06:ee:98:f6:
36:9e:96:fe:2a:ca:82:0b:77:0e:dd:4b:4a:5e:44:6c:c4:f8:
d6:8b:06:06:cd:cc:53:f3:e6:64:4c:1b:4e:89:6b:59:72:cb:
7b:8f:f8:d7:27:ef:37:a6:e6:00:b3:3a:2a:c5:ff:72:f2:c1:
66:a9:96:4c:92:9b:59:fc:f2:76:25:1a:74:21:a8:e4:76:76:
74:67:73:3c:70:85:a1:5b:9a:59:cc:b7:6b:53:47:08:30:f0:
ce:e9:a6:b6:65:01:f2:01:14:c3:26:6c:16:f4:b9:f1:ab:38:
de:18:95:df:5d:41:1c:0f:74:16:89:d5:0c:ab:0d:81:65:fb:
57:06:91:da:40:65:8c:60:f6:23:c1:e4:2b:eb:83:ae:14:68:
3b:60:0d:c6:01:bb:28:ff:ad:8f:25:6e:4a:a3:a4:36:92:6d:
5f:a2:72:fa:9a:01:c8:a0:fe:c9:64:d3:3e:e9:8c:04:9d:c0:
f5:2d:a0:af:d6:33:71:a8:f2:b8:04:1a:18:ad:33:76:7b:7b:
16:89:02:48:53:61:e6:47:af:57:dc:73:6e:7e:74:b0:18:e7:
fe:45:ee:2e:61:ea:91:ff:0a:bd:ab:2c:38:7d:27:95:5a:33:
fc:59:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:08:37 2025 by rpki-client