Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bnMpycDaKPhmznQA0sg2aSvCi80.roa
File: bnMpycDaKPhmznQA0sg2aSvCi80.roa (raw, json)
Hash identifier: jjmp7nS7SJDb4ZmR7jM90/RxBN7l0QIJC+gxGmoCTaI=
Subject key identifier: 6E:73:29:C9:C0:DA:28:F8:66:CE:74:00:D2:C8:36:69:2B:C2:8B:CD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194DCD83E34EB7624F05DCCDE9DA1C23A02
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bnMpycDaKPhmznQA0sg2aSvCi80.roa
Signing time: Thu 06 Feb 2025 19:59:06 +0000
ROA not before: Thu 06 Feb 2025 19:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 45.13.184.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 08:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:d8:3e:34:eb:76:24:f0:5d:cc:de:9d:a1:c2:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 6 19:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e7329c9c0da28f866ce7400d2c836692bc28bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:e3:91:f7:08:fd:27:48:01:4f:9d:0b:aa:
0d:cc:8a:ab:01:8c:1c:16:7b:c7:68:42:ef:db:ec:
4c:c4:99:db:14:40:55:9f:de:ea:20:4c:fc:82:dc:
e7:18:ef:a6:73:48:55:d8:50:d7:9c:1b:49:14:7d:
d2:4f:0f:0b:f9:68:30:71:c5:70:93:6e:a3:65:aa:
18:03:e9:be:f7:eb:19:cc:81:d5:a6:86:d1:0f:5e:
22:19:00:0d:91:95:a7:03:e8:2f:2f:fa:0c:5f:83:
a9:a0:06:0f:c2:0f:d3:6e:b5:4d:ea:52:2e:6a:21:
d2:6e:86:cc:c7:a6:ee:c5:67:9b:49:62:be:04:9d:
b5:7a:04:4f:6a:dc:b1:f4:b5:46:aa:ba:7e:e8:3e:
57:8f:50:cc:21:a2:b9:a5:4a:8b:d1:72:5f:09:24:
f0:05:a5:91:03:55:3f:eb:af:57:a1:6e:0a:fa:db:
43:d5:10:46:88:28:e5:67:69:0c:16:04:9b:47:a5:
b2:14:b7:31:3c:45:ed:cc:01:2c:c4:17:3f:2b:18:
12:9e:f1:64:07:e0:76:e9:cb:88:8f:73:a5:82:27:
54:14:03:e7:ef:b9:10:71:1b:b1:43:b6:7f:1b:e6:
1d:62:97:a2:7c:2a:6a:f2:23:a7:eb:51:4b:b2:10:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:29:C9:C0:DA:28:F8:66:CE:74:00:D2:C8:36:69:2B:C2:8B:CD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bnMpycDaKPhmznQA0sg2aSvCi80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.184.0/24
45.128.77.0/24
185.136.204.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
32:22:2d:9b:27:55:72:c0:db:60:8b:c8:0b:05:53:5e:d1:1c:
1c:96:ac:39:34:e5:fd:92:8d:b2:b5:d4:b1:66:db:f1:79:04:
03:b6:f8:ad:f9:73:df:e3:5b:69:61:81:b4:41:c0:1e:48:aa:
16:c0:6a:79:8b:43:33:a3:d0:0d:63:01:b1:a6:08:53:76:f5:
e1:7d:0d:3d:4d:e2:0f:1b:de:65:f7:0b:b0:53:12:38:87:61:
9a:ab:81:74:31:c9:89:cf:ad:e1:b2:ea:75:d7:b3:86:fd:5c:
72:76:0f:78:19:80:7d:13:eb:f7:18:82:ea:22:63:b3:ba:a1:
34:87:14:8b:4f:97:42:1b:df:3a:f6:61:9b:42:48:e3:a3:3f:
5d:68:f4:f5:94:1e:95:02:5e:63:12:23:d8:a8:76:b5:a2:7d:
d1:73:54:d1:78:c9:db:bf:b5:fa:2b:4a:6c:ad:0d:35:c8:2f:
e1:ff:05:59:76:9f:91:b2:a5:9e:99:cd:9d:c2:4d:08:2c:94:
cb:09:6a:10:1d:0d:ce:74:11:39:06:6a:bd:94:a5:1c:9b:1d:
10:01:b9:c0:c0:4e:39:69:d7:f3:52:89:be:80:3e:48:d5:98:
57:20:98:6c:21:e9:9a:5a:48:02:bf:2d:54:c8:3a:dd:ae:0d:
d9:b0:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:15 2025 by rpki-client