Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UUqnb6WYtHUBWiHoOYJXhDnksew.roa
File: UUqnb6WYtHUBWiHoOYJXhDnksew.roa (raw, json)
Hash identifier: u0QYSneCw/oDp7d2EEQ/c/d1aR20u05Z1OImD/BHS08=
Subject key identifier: 51:4A:A7:6F:A5:98:B4:75:01:5A:21:E8:39:82:57:84:39:E4:B1:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196C9FFDD85FA8224D362566C9D41E13058
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UUqnb6WYtHUBWiHoOYJXhDnksew.roa
Signing time: Tue 13 May 2025 14:15:10 +0000
ROA not before: Tue 13 May 2025 14:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.135.36.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 14:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:ff:dd:85:fa:82:24:d3:62:56:6c:9d:41:e1:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 13 14:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=514aa76fa598b475015a21e83982578439e4b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:00:09:01:da:58:54:16:91:36:96:e8:4e:
ca:65:81:56:d5:ba:64:ab:96:cd:c1:f5:20:f8:1f:
db:d8:42:d2:5d:1e:ef:e8:aa:7a:3d:78:97:d5:64:
76:41:e3:c7:36:70:b5:50:b8:bc:bd:88:85:7b:d9:
3e:45:85:7d:07:f8:16:9d:9b:a0:19:11:99:e5:d1:
ed:ac:69:70:a5:2f:c9:9e:21:19:3a:34:75:5a:d1:
14:a2:17:38:06:5a:2c:85:27:43:c6:fb:5b:8e:91:
41:36:48:4c:ed:e1:b2:eb:dc:dc:ed:99:b9:a9:f4:
f3:09:8b:03:81:08:29:df:98:a6:7d:88:ef:46:08:
5b:f9:c9:d5:d5:8f:43:1c:f5:2d:a8:06:60:da:c5:
34:6a:4c:3c:ae:28:42:99:98:1b:7a:cf:9a:04:e1:
51:13:f8:42:08:c7:09:d3:ff:bb:a0:c9:ba:a8:d9:
d3:c2:a4:66:f2:08:4b:0a:d0:6e:ef:ae:d1:94:c9:
da:f8:03:12:0c:bb:59:3b:c3:32:40:0b:27:eb:ee:
40:c9:fe:ec:e0:25:c4:df:54:3a:ae:f6:39:47:7f:
5b:2b:0a:fd:39:be:57:d8:c5:37:3f:75:a8:58:b8:
da:2e:f2:a6:d9:f4:06:0b:d9:76:7e:fb:d2:6c:fd:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:A7:6F:A5:98:B4:75:01:5A:21:E8:39:82:57:84:39:E4:B1:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UUqnb6WYtHUBWiHoOYJXhDnksew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.135.36.0/24
45.141.176.0/24
45.146.180.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ee:af:be:a6:8d:54:b3:bc:e1:1e:1a:13:b0:c0:bf:3d:e2:
c7:e9:8a:de:00:cf:9b:dc:62:97:e6:e3:8a:0d:87:8e:4a:f0:
cd:77:8c:dc:b6:6a:14:72:ec:e2:7a:64:fd:4b:d2:83:7e:ac:
f1:66:df:b3:05:93:9a:c3:b0:68:4f:eb:80:69:47:9f:a8:38:
7a:5b:c7:04:0b:34:64:96:3a:b7:08:df:67:c1:71:d0:35:cd:
2a:79:a1:92:9a:57:07:cb:db:b3:87:c8:fb:80:ec:bf:70:b6:
9a:fa:69:f8:c6:30:7d:37:c4:2a:74:f0:2d:33:83:f5:0d:a4:
0a:26:5a:6c:86:c7:27:40:a6:21:71:9e:4c:0b:2c:48:ae:de:
d0:48:55:48:d6:bb:53:93:d5:e1:7f:7b:4d:06:cd:57:91:45:
f4:97:ff:af:5b:cb:13:b9:f5:57:14:5c:b0:8d:93:64:e6:b5:
17:33:fb:f9:b7:bf:2e:0f:7e:dd:ea:20:80:c1:e2:fa:83:03:
c8:fa:bb:4f:ab:7f:90:0e:ec:b2:4a:ca:7f:5e:92:be:a2:fe:
8c:b2:a6:99:18:d0:d2:0b:b5:72:95:76:8e:15:19:09:98:cb:
f2:ff:97:ea:88:e8:b7:a4:ec:cb:5b:bb:72:ee:cd:2a:f7:71:
e6:b4:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:00:40 2025 by rpki-client