Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dbtzra4ZK1ObvC23S6yReWpUNYk.roa
File: dbtzra4ZK1ObvC23S6yReWpUNYk.roa (raw, json)
Hash identifier: g4nx/cvaq67XAMtRtosqQp63NlIYDplB4P94iaa8OAk=
Subject key identifier: 75:BB:73:AD:AE:19:2B:53:9B:BC:2D:B7:4B:AC:91:79:6A:54:35:89
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196E73F0A00CE371DF3BC4E9E63B94F3017
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dbtzra4ZK1ObvC23S6yReWpUNYk.roa
Signing time: Mon 19 May 2025 06:33:10 +0000
ROA not before: Mon 19 May 2025 06:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.145.56.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.242.244.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
192.153.171.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 14:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:3f:0a:00:ce:37:1d:f3:bc:4e:9e:63:b9:4f:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 06:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75bb73adae192b539bbc2db74bac91796a543589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:56:ac:79:9b:60:69:52:54:7b:b7:70:cb:
dc:31:52:ea:92:fe:27:98:f0:19:08:98:a8:f3:d8:
17:c2:21:86:9d:ba:7f:1a:10:1b:59:cd:1d:3f:02:
32:44:82:04:37:b3:e6:b3:f5:ac:09:41:3f:0e:0d:
3b:32:0a:3d:28:5e:ab:5d:f4:23:73:a3:72:15:82:
35:9b:7c:35:1b:7a:82:aa:b9:f6:50:c9:ca:30:f6:
83:09:d4:60:49:95:13:75:f0:9d:c0:a2:fb:6a:61:
14:83:31:8a:3d:4e:17:96:5e:33:54:21:9b:7a:ba:
6d:34:52:c9:2b:df:dd:26:97:3a:1a:b2:6b:c0:94:
8c:1c:19:6e:67:b0:ef:53:c8:e6:5f:80:94:73:7b:
49:53:84:2f:4b:78:f6:8f:fd:41:96:0d:65:90:a1:
f5:86:dd:49:97:c7:85:12:40:e4:cb:c9:70:6c:b6:
ef:7a:e1:b4:9d:48:f1:5d:64:13:91:70:ed:40:cb:
76:26:8b:27:00:aa:e6:3a:e4:ba:6d:da:69:aa:94:
4a:af:e2:40:8b:eb:c7:b9:f1:cd:e7:3d:95:6b:24:
ee:ef:1b:67:10:39:3a:01:16:21:07:d9:cf:1f:83:
45:95:f7:8b:d1:8c:39:23:6a:73:4b:fd:9c:c8:6d:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:73:AD:AE:19:2B:53:9B:BC:2D:B7:4B:AC:91:79:6A:54:35:89
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dbtzra4ZK1ObvC23S6yReWpUNYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.131.212.0/23
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.145.56.0/24
45.146.131.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
45.158.185.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
185.155.200.0/24
185.242.244.0/23
192.153.171.0/24
193.8.215.0/24
193.23.245.0/24
193.23.253.0/24
193.27.10.0/24
193.27.19.0/24
193.27.21.0/24
194.33.29.0/24
194.33.61.0/24
195.158.192.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
9a:e7:85:1a:04:da:da:89:bf:5d:e1:62:65:91:ab:13:d6:87:
2f:89:39:ba:5e:93:59:6b:89:10:9c:d6:08:4d:ea:d4:97:67:
4f:12:68:74:af:df:1f:8f:23:0e:b0:bf:41:df:36:93:ae:5a:
63:9f:80:99:71:36:77:4e:2d:f1:68:00:da:e9:3f:2f:50:fb:
12:62:1f:f7:2d:41:22:3f:cc:24:86:d4:5d:ca:a3:cb:ea:f4:
22:21:07:c6:5f:5d:da:6f:a6:1e:42:7e:a4:11:0c:13:f4:e1:
bc:b5:e3:3a:ca:68:68:e7:bd:88:9d:27:36:00:cd:b9:68:e5:
fa:ce:ec:75:8d:10:35:72:8e:6e:e6:f0:cb:fc:2b:60:0a:7d:
df:23:a5:c1:a6:11:35:c2:f7:fb:a3:8b:d8:da:73:08:a2:25:
45:14:a1:27:ce:0c:fa:f1:16:4b:54:27:de:e8:c2:b2:27:aa:
12:29:de:77:81:80:cf:d3:8f:28:09:aa:58:d2:74:d5:8e:d6:
52:98:a9:03:d7:9b:39:e7:b5:3b:6d:00:7a:a2:e9:37:57:a3:
db:eb:e1:40:a4:61:fa:6b:7e:61:af:44:e2:d6:9f:b9:83:5d:
b7:24:2b:e5:49:2d:59:7f:74:ad:a0:2a:5a:e9:9c:c2:5e:21:
3c:88:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:47 2025 by rpki-client