Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Mo25hi_oMqrSMgSL8wVpjjnJEuw.roa
File: Mo25hi_oMqrSMgSL8wVpjjnJEuw.roa (raw, json)
Hash identifier: cj9vkI0aTpBqCIRkFnExaDG6NO5Kuh1HqMdooIpxCdg=
Subject key identifier: 32:8D:B9:86:2F:E8:32:AA:D2:32:04:8B:F3:05:69:8E:39:C9:12:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01958E59450E6148ACE77C6BBE942B055C0B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Mo25hi_oMqrSMgSL8wVpjjnJEuw.roa
Signing time: Thu 13 Mar 2025 07:12:49 +0000
ROA not before: Thu 13 Mar 2025 07:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
193.5.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 08:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:59:45:0e:61:48:ac:e7:7c:6b:be:94:2b:05:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 13 07:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=328db9862fe832aad232048bf305698e39c912ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:ed:3e:22:3d:4f:5f:b5:85:e2:bc:e2:9a:
aa:61:ce:3c:42:72:5d:b0:bc:a2:b2:32:9a:2d:4c:
a7:bc:2e:9e:f8:bd:31:e8:2a:e1:ac:af:b5:4b:9f:
fd:ce:2c:ee:62:cb:fc:0a:98:89:1f:a2:ed:32:eb:
d5:88:8e:f7:46:c0:29:c6:78:92:64:35:fb:a3:62:
10:52:68:85:88:c5:5e:41:cd:42:da:a3:3b:a7:34:
0e:45:c1:83:88:8f:f8:fe:00:03:7c:3e:6b:77:55:
47:37:32:1d:11:fc:76:3d:89:b5:73:d7:3e:90:07:
18:52:95:59:96:3e:ab:a0:86:09:74:2c:76:0f:91:
5d:9c:50:f0:6a:69:c1:2c:63:86:8e:cf:fe:19:b4:
83:23:5c:53:ef:64:e2:3d:86:d4:19:6a:07:af:18:
68:92:ab:d8:4b:d5:a5:95:9b:44:39:c9:da:8a:3c:
2d:40:c0:42:45:8b:22:09:76:c7:a6:98:cf:14:cc:
bd:c0:18:cb:25:a2:e2:7d:66:3f:7b:f8:5a:0c:a1:
27:0d:c5:1d:0f:9e:6d:73:92:c7:7f:76:7d:82:54:
b8:16:d2:c8:ef:00:db:c1:dc:2b:2e:4e:32:10:68:
90:61:bb:8f:c2:33:c8:31:1a:9f:a4:a3:7f:7e:26:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:B9:86:2F:E8:32:AA:D2:32:04:8B:F3:05:69:8E:39:C9:12:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Mo25hi_oMqrSMgSL8wVpjjnJEuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.146.91.0/24
193.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
37:80:09:34:cf:d9:bc:33:5e:cc:1b:c3:5a:8f:e9:3a:5e:da:
19:ed:bd:14:19:b1:43:84:44:c6:a2:02:99:f8:31:ac:43:9c:
6d:02:ec:33:a3:ed:2c:8f:eb:ed:48:85:f9:24:f9:fb:d3:09:
66:87:ec:d8:b9:ed:d2:e3:e8:c2:ec:64:b6:65:3c:59:47:86:
5a:73:fd:0d:34:9d:34:44:3e:1c:6c:ec:39:c2:7a:08:75:e8:
53:8f:ff:ab:b2:53:fd:67:a5:9d:9d:5c:24:5d:26:a7:33:84:
b6:30:a5:78:2f:0f:54:59:11:17:f9:55:14:57:68:88:ba:12:
d2:62:c5:8a:d3:f6:df:b6:a6:37:33:d8:43:f1:ef:fc:62:14:
f8:5f:bb:a6:dd:c2:2d:bf:75:9b:2f:3b:8d:3a:1c:d8:c8:89:
d7:cb:4e:36:2c:e3:a4:6a:a2:66:39:8f:e2:80:38:40:73:b2:
16:d0:83:b0:b3:a5:a3:e5:e1:96:4d:42:1e:47:eb:1a:71:fb:
fb:ae:76:8f:1c:05:c6:26:6d:cc:2f:51:29:36:ed:69:f0:d5:
39:cf:f1:5d:c1:89:ef:fa:0b:9a:46:64:07:35:ff:46:66:e7:
54:db:91:d4:4d:50:f2:fb:ad:74:d2:73:c4:3c:07:a0:2d:d7:
29:e9:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:21 2025 by rpki-client