Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KD3J9X723fLJtuTefopShfEqDCs.roa
File: KD3J9X723fLJtuTefopShfEqDCs.roa (raw, json)
Hash identifier: o+qwjG6XzieW5oWk/X3UOKcsMil17XAcrFY58tZiy/Y=
Subject key identifier: 28:3D:C9:F5:7E:F6:DD:F2:C9:B6:E4:DE:7E:8A:52:85:F1:2A:0C:2B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0194F422FA0212572A5F6981AD6A765B176F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KD3J9X723fLJtuTefopShfEqDCs.roa
Signing time: Tue 11 Feb 2025 08:32:00 +0000
ROA not before: Tue 11 Feb 2025 08:32:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 45.11.186.0/24 maxlen: 24
45.81.16.0/23 maxlen: 24
45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:22:fa:02:12:57:2a:5f:69:81:ad:6a:76:5b:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 11 08:32:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=283dc9f57ef6ddf2c9b6e4de7e8a5285f12a0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:0b:ec:95:52:c2:69:34:48:ed:49:ca:13:
b4:d6:f0:c0:1b:33:67:03:24:2b:f1:77:78:e3:9e:
a8:df:59:33:7e:3b:86:18:be:56:32:49:83:bc:f9:
4d:97:43:5f:c2:c1:6f:61:da:23:1e:2d:e0:21:e5:
dc:b0:c6:29:c8:66:55:f3:dd:cb:4d:b2:3b:1b:d9:
a7:18:b8:7d:9c:f4:92:bf:83:40:9d:68:4e:e9:e1:
b8:d8:85:51:6b:ab:f2:4d:13:b1:2a:7a:b7:52:80:
9e:2d:58:f2:64:3d:44:f6:35:a7:77:70:52:c1:44:
b0:3f:8f:a6:ab:d7:d7:28:2a:51:12:dd:35:fa:01:
1b:f4:b5:86:f2:96:59:b4:67:2a:61:a8:d0:98:19:
30:7e:d5:43:46:f1:e0:da:c6:bd:a2:23:9e:04:43:
22:64:e3:bd:d6:87:ad:75:2c:05:16:f4:81:26:96:
f5:bf:a9:40:1c:af:1d:56:55:79:ff:53:66:fe:d7:
c8:96:0c:d9:21:9b:b3:4a:b2:3d:63:3f:ef:f5:a3:
71:18:12:86:7b:d1:96:a7:fb:1f:7e:00:13:06:47:
e4:35:82:4a:7a:5a:3f:68:46:9a:92:63:8b:dd:f7:
a7:bc:3d:66:86:6f:07:00:46:c0:2c:93:fa:87:ba:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:C9:F5:7E:F6:DD:F2:C9:B6:E4:DE:7E:8A:52:85:F1:2A:0C:2B
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KD3J9X723fLJtuTefopShfEqDCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
53:24:3e:db:ca:7d:07:8b:72:43:1f:61:47:bb:5b:21:d7:a8:
c5:14:aa:85:d5:1c:54:8c:6d:ab:79:46:ad:70:77:a7:09:43:
04:ce:ea:4c:35:3e:bf:b3:36:cb:9d:5b:a7:95:84:60:2e:6d:
27:29:b4:05:1f:a1:ec:f6:c5:17:62:e0:e6:f0:64:61:b9:2e:
2f:65:d4:87:ea:c4:da:95:aa:d1:59:f7:e2:39:9a:d8:98:8a:
8f:1a:65:d1:d9:15:25:c2:09:e1:9d:13:3f:b8:36:29:c3:d4:
6a:a7:ca:74:74:23:3c:c4:98:e0:33:05:d6:70:4e:66:e8:3d:
52:df:b3:15:4a:60:81:a1:d4:b5:e3:26:8f:ef:22:04:26:7d:
27:b0:aa:69:3c:b8:95:c3:9b:55:80:82:8d:e3:ad:d7:f1:ba:
af:68:84:bf:ee:0e:eb:49:c2:68:2e:f7:62:ff:46:2a:64:6d:
6e:06:47:b5:1d:0b:fc:78:6c:98:be:cb:64:ca:49:c1:f5:a1:
b6:bc:8a:6a:4f:63:e0:ea:be:4c:06:8d:7c:5f:a3:60:ca:f6:
c7:45:89:56:4a:31:e2:8b:b5:ab:94:e8:83:06:52:dd:08:9d:
79:9c:7b:82:dd:b6:3d:95:9e:31:10:5d:d3:e7:10:87:b9:bb:
86:80:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:56:04 2025 by rpki-client