Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_5qfJyW3eeSiA1yzpONXjlPAhZ4.roa
File: _5qfJyW3eeSiA1yzpONXjlPAhZ4.roa (raw, json)
Hash identifier: glXEk6U7ECxVpRpDrPeAVKsX4d/fuq8LSWzabQP1rN0=
Subject key identifier: FF:9A:9F:27:25:B7:79:E4:A2:03:5C:B3:A4:E3:57:8E:53:C0:85:9E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019504D59C1C7EA38D85369D6702CD1E5E1E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_5qfJyW3eeSiA1yzpONXjlPAhZ4.roa
Signing time: Fri 14 Feb 2025 14:21:02 +0000
ROA not before: Fri 14 Feb 2025 14:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 07:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:d5:9c:1c:7e:a3:8d:85:36:9d:67:02:cd:1e:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 14 14:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff9a9f2725b779e4a2035cb3a4e3578e53c0859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:c4:c1:49:bc:4b:38:be:87:fe:36:1d:f3:
ed:36:c1:b5:ff:10:33:59:68:5f:08:b3:61:39:a2:
ad:60:2f:7e:8f:7c:9a:f3:fc:05:9f:e0:77:32:d5:
b8:03:18:25:e9:54:6b:3f:c6:3b:21:28:99:b1:e0:
6d:42:67:48:38:b8:41:8f:d3:7b:13:b1:cb:c8:42:
1e:ed:b3:ca:37:f0:a4:9d:ca:ba:db:5b:9d:84:19:
b9:a1:9d:a5:6d:0d:98:b9:07:03:48:19:b9:31:6d:
1c:a6:8f:b3:b6:e6:de:61:11:ed:94:de:85:10:7e:
7f:ce:ea:05:4f:c5:0e:01:4c:7c:37:03:9e:36:1f:
95:89:1b:e6:e8:90:65:d5:25:af:ad:0f:be:09:76:
a3:fc:38:46:a9:98:f9:e2:04:d6:b9:65:2e:00:6f:
b7:9d:0e:b0:cf:60:99:52:a1:44:91:b5:32:dd:86:
a1:8f:e1:f4:c9:da:20:58:56:43:00:e9:96:8a:ea:
b7:74:6e:7e:86:07:01:6b:0d:9f:70:c1:c9:2b:65:
bf:d3:ae:87:eb:1b:37:1c:ec:9a:7c:9d:6f:bb:7f:
08:82:40:8d:ad:31:66:d2:e2:f6:71:2a:19:aa:78:
9a:04:9b:c2:2e:55:bb:12:b0:a7:86:a6:58:2f:33:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9A:9F:27:25:B7:79:E4:A2:03:5C:B3:A4:E3:57:8E:53:C0:85:9E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_5qfJyW3eeSiA1yzpONXjlPAhZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.118.248.0/24
45.131.215.0/24
45.137.81.0/24
45.141.177.0/24
45.152.208.0/24
85.209.128.0/24
103.114.43.0/24
185.122.171.0/24
185.126.64.0/24
193.23.245.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d4:bb:45:72:94:07:c5:01:81:3f:85:95:c5:03:57:ac:9f:
2a:d0:a2:8d:ad:d0:22:a2:ba:9a:ab:94:bf:d3:82:a7:e2:0f:
68:48:6e:0c:20:0d:0d:b6:2a:43:87:a3:64:cb:73:34:43:c7:
33:6a:4a:8f:c1:8c:c0:6b:57:be:01:13:24:c9:a9:b5:d2:41:
8c:69:41:9e:a9:67:bf:07:fd:57:62:c6:12:60:9d:c7:45:6f:
f2:09:e1:1c:65:33:7f:4c:3e:c3:30:d1:d8:ba:b5:43:9f:89:
22:ed:5c:75:1c:2e:85:45:73:a6:ed:42:32:9c:af:df:15:8e:
a1:b9:e0:bc:f8:50:92:4a:47:a1:51:ca:fc:ba:fb:2e:83:1a:
59:3b:34:0c:de:65:0f:44:34:e3:b8:f6:c6:5b:75:a6:37:5f:
80:25:29:c2:b9:7a:2b:23:f6:1c:3e:97:7a:d1:e4:c1:8d:d9:
6c:49:1f:44:2a:bc:06:b3:67:c9:19:f6:db:ed:28:df:01:39:
1b:40:87:92:69:b0:8e:fe:94:c8:5a:eb:11:98:47:81:73:b9:
2c:95:2a:ed:e1:c0:4d:74:d3:26:91:82:81:d1:54:95:eb:c6:
e2:42:e4:94:f6:6b:55:1d:a8:cf:f7:ec:ca:70:3e:1c:45:58:
9c:58:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:16:05 2025 by rpki-client