Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9rmJ_cT9nPfpVk9DxG2X2cfQkW0.roa
File: 9rmJ_cT9nPfpVk9DxG2X2cfQkW0.roa (raw, json)
Hash identifier: y1Bw2vWZd4Xfk55LgGbH3h+oCWoeTkkkUqXD4gm7CdA=
Subject key identifier: F6:B9:89:FD:C4:FD:9C:F7:E9:56:4F:43:C4:6D:97:D9:C7:D0:91:6D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CD36E92F8641461A5F6D3E5278E7E05E7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9rmJ_cT9nPfpVk9DxG2X2cfQkW0.roa
Signing time: Thu 04 Jan 2024 07:44:48 +0000
ROA not before: Thu 04 Jan 2024 07:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
2a06:b5c0::/29 maxlen: 29
2a0f:e840::/32 maxlen: 32
2a13:fd00::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a13:18c4::/32 maxlen: 32
2a06:bf40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 08 Jan 2024 07:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:6e:92:f8:64:14:61:a5:f6:d3:e5:27:8e:7e:05:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 4 07:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b989fdc4fd9cf7e9564f43c46d97d9c7d0916d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:ab:4e:98:f7:57:21:c4:44:10:1f:ff:d9:
a0:a2:96:54:56:13:35:d9:90:26:3e:53:25:7d:c8:
37:73:f8:52:6d:91:54:c9:d8:d4:4e:4f:fb:39:3b:
c1:0e:3a:40:f2:1e:c3:99:5a:8d:da:43:a8:21:e5:
5b:36:af:67:aa:9e:fd:eb:89:de:07:aa:0b:bb:23:
c2:66:01:b3:6b:c3:b8:93:6e:bb:87:48:44:86:78:
46:8c:93:ef:a0:3e:9f:c9:ab:af:5d:f2:a4:cc:f5:
a3:3e:38:bc:8c:8e:e3:c8:70:46:b3:b1:62:f2:cc:
bf:9b:f3:f3:4d:d0:38:bd:60:ee:c1:11:1d:91:73:
b9:00:10:e5:4b:ac:5b:33:13:f0:c3:47:8f:2c:8e:
a4:8d:01:59:17:21:ef:9c:c4:49:5d:16:6a:07:d0:
82:5b:91:25:f6:79:8f:ab:83:c2:85:3b:fb:d3:91:
ef:10:65:7a:53:80:71:32:26:74:58:ff:f2:19:da:
6b:70:62:5d:9a:63:46:66:b0:d5:2b:17:88:b9:b2:
92:2c:eb:16:23:f0:24:cd:ea:0d:28:58:61:cd:03:
20:a7:45:6a:ca:c7:c3:e4:42:fb:0a:e0:ed:a0:01:
02:49:0b:df:6a:6e:0a:7e:70:ee:00:51:3d:91:38:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:89:FD:C4:FD:9C:F7:E9:56:4F:43:C4:6D:97:D9:C7:D0:91:6D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9rmJ_cT9nPfpVk9DxG2X2cfQkW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a06:b5c0::/29
2a06:bf40::/29
2a0f:2f80::/29
2a0f:e840::/32
2a13:18c4::/32
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:a8:30:ad:5c:17:05:0e:b0:03:59:bd:7c:db:38:7d:29:34:
d3:4d:00:99:c8:c1:4a:fd:e7:4a:64:46:74:7e:a9:5a:67:a8:
ed:c7:8a:7a:f8:b5:6d:78:26:67:07:b8:56:13:dd:e2:71:20:
61:e8:2e:d8:21:a3:8d:9f:eb:9e:94:8e:5f:57:97:99:7e:fa:
1d:f8:9c:79:7e:80:de:48:e2:2b:57:59:4a:93:5a:d3:dd:35:
cb:87:a4:41:35:88:3a:1b:b7:d2:bb:01:98:9f:4c:08:a2:06:
e7:b0:db:8b:d2:34:7b:87:eb:c8:45:60:27:7f:ce:8c:b1:a6:
70:3c:1c:a5:50:80:fa:1e:c5:8c:f9:72:1e:6c:e5:dd:3f:6a:
3b:65:0e:10:c8:0a:e9:0d:d1:08:00:1a:7f:a1:60:d1:26:23:
1b:10:4f:3e:72:03:35:ee:c1:30:83:5f:04:75:7f:c6:ad:9d:
69:68:6a:af:6c:f0:31:6a:16:86:16:2f:4a:48:b8:d8:39:f6:
b5:c9:52:a2:93:c3:7b:69:ec:c3:0b:e8:75:2f:90:2e:df:f8:
e9:ee:9f:2f:7f:c0:0c:7a:05:69:dd:9c:33:f1:aa:eb:87:cb:
58:63:8f:e0:e9:4b:0d:16:2a:b0:56:f0:2c:00:43:73:e5:c2:
75:80:5b:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:47 2025 by rpki-client