Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_zr80EeM3Zx5sw9TsMgQOAWDvuc.roa
File: _zr80EeM3Zx5sw9TsMgQOAWDvuc.roa (raw, json)
Hash identifier: Ud4rqJivOZrB2Usr0LDcKhaTZA+zGqBfWhVelMKnMRc=
Subject key identifier: FF:3A:FC:D0:47:8C:DD:9C:79:B3:0F:53:B0:C8:10:38:05:83:BE:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196F6F776A0E540F23090BD706BEB698EF4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_zr80EeM3Zx5sw9TsMgQOAWDvuc.roa
Signing time: Thu 22 May 2025 07:48:54 +0000
ROA not before: Thu 22 May 2025 07:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.135.36.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 14:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:f7:76:a0:e5:40:f2:30:90:bd:70:6b:eb:69:8e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 22 07:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff3afcd0478cdd9c79b30f53b0c810380583bee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:26:2e:ba:6b:fd:4c:31:23:67:74:8c:83:
93:1e:ca:dd:46:a0:28:4d:4a:a3:69:87:78:53:79:
c4:c6:73:5c:93:75:08:54:8e:20:ad:2c:e9:2c:9a:
3d:10:7d:1b:09:30:b7:43:50:4e:4e:41:53:01:d6:
4a:1b:11:ae:ff:0a:13:cb:8c:e5:80:d6:72:c2:00:
c8:34:dc:27:e6:f2:84:97:3d:27:af:9e:81:c5:ab:
50:cc:79:d8:16:73:42:1f:6c:a3:c9:ce:2c:13:14:
86:6b:a8:61:4e:0a:ce:bd:4e:f8:da:6d:35:58:11:
47:46:57:f3:ab:ad:85:d5:7d:01:65:13:c5:15:67:
50:e7:0e:4b:3d:72:71:f7:4f:f7:f5:68:2c:93:fd:
9c:9f:9e:4e:ff:92:c7:bf:f9:58:5e:cf:d9:0e:7c:
8a:39:fe:96:39:a5:f4:13:6e:d9:a1:ec:e1:1f:91:
24:df:3f:8a:d5:2c:58:5e:48:b5:ff:69:f6:cf:31:
d4:17:38:15:40:29:58:b2:e2:d7:fe:62:07:4c:38:
d0:02:73:e1:f4:e6:6e:f3:7f:32:76:8d:48:8c:61:
e1:24:f4:73:ed:db:f4:93:3a:58:ff:01:a3:fc:96:
6d:93:69:9d:66:e5:bc:6c:b1:f6:9b:51:2a:8f:75:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:FC:D0:47:8C:DD:9C:79:B3:0F:53:B0:C8:10:38:05:83:BE:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_zr80EeM3Zx5sw9TsMgQOAWDvuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.129.124.0/24
45.135.36.0/24
45.146.180.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
15:00:14:b5:08:d3:68:f7:34:a7:03:9b:b8:e0:ee:6d:3a:e3:
7f:bf:45:6e:57:5f:03:f6:f7:05:36:ab:69:f9:47:df:b3:41:
84:04:76:aa:22:dd:f8:ff:e4:a0:ee:7f:e5:99:d4:44:23:84:
e6:a6:57:02:b1:20:33:15:9d:00:de:ba:0d:ac:6a:e2:61:bc:
a5:5a:ca:41:6f:a8:c6:62:73:e2:9f:d0:f7:8b:4b:4d:6b:8f:
e4:ee:eb:6a:68:90:30:70:0c:92:40:5e:21:9e:6c:0e:c0:02:
1b:6a:ef:99:e2:20:bb:fe:b3:7a:26:8a:a3:43:4d:19:68:41:
8f:a3:27:76:24:47:8f:35:0c:d0:21:d5:32:94:5b:4a:98:24:
4a:3b:61:1a:54:43:33:21:de:85:ac:b9:a0:ed:33:2e:e4:2b:
a6:f7:7b:95:5d:0b:fa:82:57:bf:d9:43:f3:3a:ef:4f:bb:24:
9e:ed:ad:4a:21:39:e3:97:20:e2:f1:d4:36:df:07:27:c4:7d:
29:56:cf:02:0b:f3:56:e4:24:21:d5:c8:c3:d9:aa:33:c5:3f:
82:42:c9:44:06:f0:24:36:67:80:42:f4:dc:14:8b:ad:be:06:
82:a2:b7:fa:ba:30:9d:67:e7:2f:38:ea:5b:52:b4:43:07:67:
f1:12:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:02 2025 by rpki-client