Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/7vS7HiallsZd-KyQWt-Cd8maOzM.roa
File: 7vS7HiallsZd-KyQWt-Cd8maOzM.roa (raw, json)
Hash identifier: /SGiT5an+9TeDqCbAyhTe4d7B+tUHHXqLKnYEjYDVQA=
Subject key identifier: EE:F4:BB:1E:26:A5:96:C6:5D:F8:AC:90:5A:DF:82:77:C9:9A:3B:33
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019427466B9C51F253E2F17FB685BCE65F5A
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/7vS7HiallsZd-KyQWt-Cd8maOzM.roa
Signing time: Thu 02 Jan 2025 13:48:33 +0000
ROA not before: Thu 02 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205285
IP address blocks: 45.11.224.0/22 maxlen: 22
45.84.76.0/23 maxlen: 23
45.84.78.0/23 maxlen: 23
185.223.4.0/22 maxlen: 22
194.110.140.0/23 maxlen: 23
194.110.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 13 Jan 2025 12:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:6b:9c:51:f2:53:e2:f1:7f:b6:85:bc:e6:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jan 2 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eef4bb1e26a596c65df8ac905adf8277c99a3b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:33:bf:28:d4:d6:81:0c:c4:ea:4c:ba:04:
f7:10:d1:54:d6:fe:f3:0a:88:8c:9b:07:7f:9a:e2:
15:3e:16:4f:72:e2:97:9e:9b:dd:22:02:5e:75:da:
41:82:23:55:78:9e:72:ac:69:a0:3b:f8:79:bb:96:
e0:3d:2b:de:71:1e:63:cf:e7:84:dc:27:ab:fb:14:
14:97:71:2d:fb:ff:53:56:78:65:9b:ec:80:a6:da:
5c:4b:2b:fb:46:e6:90:03:a5:3b:ef:2e:c5:a2:71:
ec:f5:02:26:f4:c3:74:dd:1b:ed:2e:83:b6:a9:94:
a8:9c:07:42:fc:45:89:82:55:4c:ff:10:2e:f8:11:
36:71:68:7a:7b:19:11:d3:1b:46:9d:05:fc:76:08:
75:8a:dc:cb:fa:ce:54:7c:05:c8:60:10:21:ad:23:
01:14:06:10:18:7d:d0:5c:15:0b:54:60:7c:62:9c:
e0:a9:35:6d:61:25:39:bc:54:61:31:0f:8e:0e:3e:
2f:8d:1b:4e:d2:91:d0:e7:42:72:df:5d:38:4e:23:
26:cf:d6:9a:86:f5:ab:e8:cf:27:c3:5b:0e:26:89:
1e:7a:33:62:b5:e5:b8:c7:cb:15:54:cf:4d:6d:f7:
aa:3e:4e:61:87:a0:0e:ca:f0:d6:94:d1:4b:53:57:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:BB:1E:26:A5:96:C6:5D:F8:AC:90:5A:DF:82:77:C9:9A:3B:33
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/7vS7HiallsZd-KyQWt-Cd8maOzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.224.0/22
45.84.76.0/22
185.223.4.0/22
194.110.140.0/23
194.110.148.0/23
Signature Algorithm: sha256WithRSAEncryption
34:66:c0:33:7e:27:c9:76:fa:cb:26:0f:fd:c6:84:17:6a:dd:
51:85:bc:e1:da:bd:7a:73:74:c1:af:b8:da:09:4e:cb:db:49:
7e:9b:87:66:e8:53:f3:2b:94:06:8a:8b:00:dc:a9:ef:0c:61:
30:6b:d5:9d:eb:56:a5:29:9a:b0:27:7a:1d:15:b1:f5:14:26:
db:37:e3:5f:99:8f:a9:a7:cf:ab:e1:43:52:68:aa:d6:3d:8c:
62:1f:a8:58:e0:07:02:f3:f6:8e:1e:78:17:97:49:8a:12:f8:
27:08:37:8d:0e:bb:bb:68:cb:16:89:9b:89:b7:c3:70:52:86:
a3:97:77:da:8b:48:b8:05:50:e3:45:f6:66:c2:f2:d1:fa:62:
92:fa:a0:da:91:af:56:2c:11:1c:e3:88:ba:a0:2a:d3:f3:41:
8b:e1:81:a5:c0:8d:ed:0a:00:91:98:a0:9e:22:99:ae:11:26:
b7:f5:62:1d:b6:21:e1:44:3d:29:e0:6f:57:13:57:9f:3d:f4:
97:54:4d:31:ab:72:db:f9:01:82:56:7b:17:e9:8e:55:3e:49:
6e:f9:df:f8:81:38:27:90:ca:13:99:15:11:36:3e:1a:39:1d:
28:c4:55:c4:05:84:19:6b:9b:63:d6:ed:02:6f:71:42:bd:3b:
cb:0e:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:33:59 2025 by rpki-client