Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rGFDJ-t-8seyJ59x0Uvud4CzIZ0.roa
File: rGFDJ-t-8seyJ59x0Uvud4CzIZ0.roa (raw, json)
Hash identifier: iOfUTo7lyDPeUZkjBhb29pcQGlVSjvUH/DX7WFsrSvo=
Subject key identifier: AC:61:43:27:EB:7E:F2:C7:B2:27:9F:71:D1:4B:EE:77:80:B3:21:9D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196D8F582F5C134BE7F0235A7C36CEF007A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rGFDJ-t-8seyJ59x0Uvud4CzIZ0.roa
Signing time: Fri 16 May 2025 11:58:10 +0000
ROA not before: Fri 16 May 2025 11:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58349
IP address blocks: 45.92.247.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
185.242.247.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 06:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f5:82:f5:c1:34:be:7f:02:35:a7:c3:6c:ef:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 16 11:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac614327eb7ef2c7b2279f71d14bee7780b3219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:7f:99:f9:b8:4a:7c:b2:25:cb:31:df:6e:
21:1c:55:0a:d2:96:20:73:9f:e7:a4:0b:f8:15:c8:
63:75:83:46:81:11:88:8c:1a:56:0a:ca:da:85:16:
34:b3:14:9f:7a:e2:55:df:76:9f:6d:ad:24:41:75:
94:d4:26:19:a2:a8:13:ac:1b:dc:27:53:31:67:c5:
9e:b3:a1:f5:31:6e:04:96:57:fa:a5:0a:fa:6f:e8:
29:01:12:0c:4c:84:e2:da:a6:08:af:48:c2:7b:69:
8f:8f:c3:52:47:e9:bc:1d:00:19:31:df:aa:1a:ad:
73:44:38:49:78:5e:41:c3:57:59:f5:ef:e9:7e:6c:
50:54:80:b0:1a:4e:c7:a2:bb:8d:83:71:f5:ab:fc:
d9:30:97:59:70:72:ed:fa:6e:1d:18:2f:ea:28:46:
9a:94:50:b0:e6:77:34:b7:d6:89:ee:46:cf:c9:38:
03:a0:ab:36:29:3c:17:ce:bd:33:c5:21:4e:03:89:
58:56:67:33:73:16:30:c6:2d:e2:99:5a:78:f2:ac:
9c:54:41:e4:01:66:76:2b:db:ae:44:f3:61:56:70:
75:de:33:24:da:e6:89:e4:56:db:1f:7c:fb:e4:8c:
21:35:f7:4f:b9:20:40:8f:f1:28:70:8c:f6:ef:d4:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:61:43:27:EB:7E:F2:C7:B2:27:9F:71:D1:4B:EE:77:80:B3:21:9D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rGFDJ-t-8seyJ59x0Uvud4CzIZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.247.0/24
45.94.46.0/24
185.242.247.0/24
195.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8f:9b:44:fc:1d:35:89:39:98:7d:97:e7:4f:14:9d:00:86:
58:fd:d1:46:73:b8:bb:58:28:a4:5b:fd:b2:6f:c2:51:d2:5f:
44:15:81:8a:c4:72:a4:fd:65:9d:18:22:79:42:d2:d0:4f:4b:
8b:15:a5:8e:6e:7f:07:07:9d:1a:23:49:f5:01:f7:2a:47:9f:
ae:d9:74:4c:33:22:13:e4:52:8f:58:fc:d6:cb:05:ca:7f:a6:
42:ef:cf:cc:26:c1:69:2b:a8:4c:44:10:29:0a:b4:67:5d:d5:
5e:91:54:3d:a9:3e:d9:73:8a:b3:15:08:e0:1d:4d:12:d4:59:
e8:d6:e9:cf:06:3d:a2:b4:d4:4d:82:9e:1b:a0:13:d2:3f:84:
54:20:e6:d0:70:d1:c9:af:df:b5:71:fb:5b:35:88:7c:dd:22:
69:a2:2e:64:a0:8b:11:e1:6e:e0:30:04:6e:52:63:bb:e3:26:
d7:36:62:36:da:c5:6b:c5:f6:17:9b:d8:02:77:96:eb:3a:eb:
32:66:45:8b:f1:39:eb:0b:9d:60:a2:5b:b7:cb:0c:03:08:5b:
c9:8e:d5:bd:78:5a:b3:87:65:bf:d4:36:bd:98:71:0b:92:57:
8e:42:81:8c:1f:eb:cf:d3:e3:93:e8:71:22:64:0c:16:b4:7c:
eb:06:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:06:46 2025 by rpki-client