Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7VsyMCV8XUzSwpHqK2CicL7mKOw.roa
File: 7VsyMCV8XUzSwpHqK2CicL7mKOw.roa (raw, json)
Hash identifier: gWyptJZewZmzneQqa/Gge45XbPFXQg0Txvr8QYmrVas=
Subject key identifier: ED:5B:32:30:25:7C:5D:4C:D2:C2:91:EA:2B:60:A2:70:BE:E6:28:EC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019495DA1CCFE7BB527BAE52049E4F1677BF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7VsyMCV8XUzSwpHqK2CicL7mKOw.roa
Signing time: Fri 24 Jan 2025 01:08:06 +0000
ROA not before: Fri 24 Jan 2025 01:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/22 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.100.0/24 maxlen: 32
194.36.101.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 Jan 2025 14:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:da:1c:cf:e7:bb:52:7b:ae:52:04:9e:4f:16:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 24 01:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed5b3230257c5d4cd2c291ea2b60a270bee628ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:a5:ae:af:8d:69:12:44:d0:b0:f9:6e:50:
3a:ca:7b:37:d7:4f:0a:a4:6e:b4:40:9c:60:8f:1e:
35:70:31:cd:43:bc:57:3b:98:d3:d2:c4:34:32:1e:
04:e9:bb:2c:d7:f7:6a:96:06:7a:ac:83:99:d4:ed:
ca:0e:6a:96:8a:8d:6e:7b:27:c0:a4:aa:59:aa:a7:
2a:d2:67:89:c5:e9:f1:8d:11:3a:dc:e8:cb:3e:54:
91:0c:a7:7d:fd:e0:f7:96:e7:78:86:5c:de:ea:dd:
16:02:bd:df:26:2a:e6:81:d2:8c:13:79:6f:39:ad:
43:fd:fa:9c:03:a0:63:5b:e6:16:4f:84:e2:af:06:
2d:2a:01:6c:2b:78:9b:19:1f:25:6c:ec:5f:0f:37:
96:ff:33:24:87:32:5f:3b:78:a1:ae:e7:8a:12:2f:
ff:12:4f:02:9a:8e:ee:84:56:c6:ab:1a:ca:0c:0a:
34:7c:aa:7e:b5:a2:63:c0:af:47:06:f1:28:99:04:
48:29:fc:8e:35:a0:38:62:f4:97:28:d7:a9:c1:c9:
48:02:30:1b:07:65:90:48:34:5b:21:a8:5e:c0:87:
fc:97:07:bb:a6:14:68:8e:51:3a:9c:d6:a8:75:4b:
b1:99:13:7a:85:0d:02:84:ee:df:d2:28:ab:d3:6f:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:32:30:25:7C:5D:4C:D2:C2:91:EA:2B:60:A2:70:BE:E6:28:EC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7VsyMCV8XUzSwpHqK2CicL7mKOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
128.0.119.0/24
185.117.20.0/22
185.211.48.0-185.211.50.255
185.227.240.0/24
193.201.208.0/22
194.36.100.0/22
194.124.64.0/24
194.124.66.0/23
195.85.68.0-195.85.70.255
Signature Algorithm: sha256WithRSAEncryption
b6:b1:9f:ae:35:f2:84:2b:ed:3c:69:5e:88:ae:c4:94:c6:30:
e4:ed:f8:88:51:d9:a5:db:2a:32:ad:b6:0a:f8:df:d9:50:76:
d0:89:89:74:b5:ab:d5:0c:5e:20:c2:3f:f1:92:9d:c7:90:70:
09:45:58:32:95:ff:40:c0:ca:4d:64:97:6f:9b:73:e3:4e:45:
27:a5:d5:b9:67:55:9a:f1:d8:d5:b7:17:38:7e:33:3b:b0:90:
53:6f:e9:dc:12:d9:e0:58:36:ef:04:ba:4a:22:ea:88:c6:03:
7a:88:64:6a:03:12:97:70:ea:33:be:a2:ff:f8:00:9b:4f:25:
35:a9:9b:55:60:7c:4b:19:e1:af:00:e3:10:3e:36:6c:dd:c2:
70:67:f6:ae:f0:d8:8d:eb:39:ea:5a:be:3c:3b:e2:0d:8c:30:
1e:32:20:6a:e0:5a:c9:ef:b9:5e:cd:d9:17:40:06:0a:55:7e:
52:f8:2d:4e:17:5d:85:a9:38:ca:d4:a3:42:59:af:5b:03:56:
8d:9a:bb:33:0f:58:fd:b3:85:e6:e8:41:af:49:3b:7b:d5:9b:
d7:ef:16:a0:14:e8:14:23:d4:6d:2a:66:18:fb:78:20:ee:96:
e5:b4:38:35:f1:bb:01:9b:7a:51:9c:4e:08:e7:0e:33:e6:d3:
2a:c2:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:34:57 2025 by rpki-client