Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wsSXvFU2vbFsIVZ7iWG8d3p9vvo.roa
File: wsSXvFU2vbFsIVZ7iWG8d3p9vvo.roa (raw, json)
Hash identifier: gMoMGiwzSSOoEA6ovuUzJmBBETWNgNYMI1YfCHxVqF8=
Subject key identifier: C2:C4:97:BC:55:36:BD:B1:6C:21:56:7B:89:61:BC:77:7A:7D:BE:FA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC211D365ECFD96C94838F8344133A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wsSXvFU2vbFsIVZ7iWG8d3p9vvo.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 45.152.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 08:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:21:1d:36:5e:cf:d9:6c:94:83:8f:83:44:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c497bc5536bdb16c21567b8961bc777a7dbefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:ad:7c:69:c5:aa:ca:68:95:30:a9:4b:32:
d0:12:1b:c6:13:36:1f:47:a5:3e:c8:c2:c4:c8:7e:
93:52:ac:5e:b1:97:77:4e:5c:2a:e4:e4:73:ff:95:
9e:d8:fb:6d:e7:f9:d0:71:6b:d8:0b:51:6b:e3:a4:
8d:cf:a2:19:45:91:07:14:25:ff:4b:37:c5:23:85:
0c:f1:05:61:53:5e:82:68:ca:b7:71:54:16:ff:33:
29:72:07:32:ba:74:d1:e2:f5:da:bf:21:3a:bc:e7:
22:67:8a:7d:c4:09:7f:6c:4f:46:19:7d:62:3c:3b:
2f:54:ca:03:6e:62:59:1f:88:74:b3:ec:88:0b:c2:
25:b0:e9:84:28:f6:3a:84:bc:12:ed:2d:34:59:89:
83:d0:87:8d:58:b0:0c:bc:19:13:6b:aa:9c:c1:6e:
22:05:34:42:94:7a:f5:fd:4a:06:ad:4d:b4:72:1d:
0a:70:8a:50:2d:1c:ce:3e:bb:15:48:44:a4:cb:8e:
b9:c6:2b:70:92:72:da:89:57:0e:50:48:e7:83:80:
82:d7:24:1d:6c:62:48:43:10:8e:1e:c4:e8:c8:cf:
69:80:db:7f:6a:73:7e:f4:6e:2d:ae:e7:98:c6:e9:
ad:11:ab:78:6f:5a:e6:05:34:fd:2d:ad:b6:02:d5:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:97:BC:55:36:BD:B1:6C:21:56:7B:89:61:BC:77:7A:7D:BE:FA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wsSXvFU2vbFsIVZ7iWG8d3p9vvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.197.0/24
Signature Algorithm: sha256WithRSAEncryption
58:42:7a:e7:a2:1c:00:0c:f5:74:2c:12:05:b8:3a:d8:3b:06:
b1:5e:a3:7b:63:08:a6:b8:76:c5:52:9a:08:9a:dc:3b:d8:4f:
3d:5b:69:6e:ca:b1:43:f7:ae:11:30:09:3a:5b:b7:79:7f:db:
95:e7:a7:42:20:2e:18:c1:ab:6d:4f:8d:e7:cb:1f:2f:ee:46:
d5:ab:ef:ff:04:1b:8e:e6:a0:ea:d9:06:ed:24:d8:16:23:b7:
f6:9a:4d:a2:c4:4b:de:17:b9:c9:ce:59:c0:0f:bf:79:d7:f9:
7a:1a:23:db:5c:d8:66:03:b5:6c:de:b1:47:71:0b:bc:5f:3e:
0e:3d:ca:dc:68:89:92:ee:a6:43:54:71:ed:b2:0a:0d:10:3c:
35:50:fe:dd:b9:b7:dd:89:7b:c7:58:7e:a0:4b:f5:6f:94:a2:
5f:6a:6d:ca:65:7c:d3:3e:73:68:60:1e:60:b6:7d:0c:0e:81:
51:18:ad:01:2b:60:43:a8:d8:e1:97:ee:56:a8:d0:f6:1b:94:
3e:9a:8e:da:4f:70:7d:f6:df:94:16:a1:f4:72:ad:16:f5:e6:
8a:a9:6d:f5:8e:b7:7f:a3:8b:ff:0d:25:d2:2f:45:3a:95:84:
4d:d6:5a:67:59:62:67:eb:a2:1f:31:36:2b:37:fb:d6:1a:52:
b0:54:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:25 2025 by rpki-client