Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eD_EjSnUlLAH5rL75_zIdbtfx8M.roa
File: eD_EjSnUlLAH5rL75_zIdbtfx8M.roa (raw, json)
Hash identifier: vVwnGXDUiqi3Ry+5EuQv0q7RVvn8nOrDuR/EuXyyT1w=
Subject key identifier: 78:3F:C4:8D:29:D4:94:B0:07:E6:B2:FB:E7:FC:C8:75:BB:5F:C7:C3
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019621151571340D57204A13C73BA030171F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eD_EjSnUlLAH5rL75_zIdbtfx8M.roa
Signing time: Thu 10 Apr 2025 19:02:31 +0000
ROA not before: Thu 10 Apr 2025 19:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215314
IP address blocks: 45.158.46.0/24 maxlen: 24
185.42.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 18:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:15:15:71:34:0d:57:20:4a:13:c7:3b:a0:30:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 10 19:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=783fc48d29d494b007e6b2fbe7fcc875bb5fc7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:6e:83:17:ca:a0:f5:31:b4:44:80:9b:08:
c2:be:1c:ef:12:7c:d8:cf:22:df:c9:f9:97:22:4c:
0d:66:01:67:44:82:c0:db:23:f3:89:5e:7d:13:64:
17:ef:52:d2:aa:0d:af:5a:75:51:99:f1:af:ed:31:
69:35:cc:b0:87:91:f0:13:f8:53:5c:d8:99:e3:55:
ba:63:c6:45:39:e0:06:ac:23:17:ca:25:7f:dd:e4:
fb:19:46:b0:73:e2:fc:36:1b:ca:9f:b6:90:53:d7:
af:2e:5a:76:9b:37:28:c4:00:18:dd:ea:25:ad:91:
d4:2e:39:ad:a6:1e:3a:80:f8:d7:b5:a6:ed:24:ef:
4a:61:9c:f0:17:d3:12:9d:d3:cb:bb:ff:5f:20:6c:
b8:9c:d7:1b:31:78:09:88:be:f6:72:6e:0d:e2:e8:
b2:a4:bc:72:04:32:3e:0e:cb:f8:2a:99:8a:30:a3:
21:4e:f0:ac:37:a4:e1:ac:c5:70:cd:db:1b:3a:a7:
f8:bc:ce:6e:06:92:73:fb:4d:52:88:12:3a:09:db:
da:7b:9c:7c:8d:7a:08:2d:b9:59:26:2e:88:09:60:
67:81:46:86:a3:48:a6:95:b0:90:95:4b:fe:74:3a:
e1:cb:a6:b1:b6:1d:83:5a:41:7e:7c:b4:ef:76:07:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:C4:8D:29:D4:94:B0:07:E6:B2:FB:E7:FC:C8:75:BB:5F:C7:C3
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eD_EjSnUlLAH5rL75_zIdbtfx8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.46.0/24
185.42.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:be:21:9e:b6:5e:87:5d:39:55:bf:93:35:b4:1c:1e:e6:6b:
24:c6:5b:9e:95:92:29:00:f7:73:70:0e:0b:e7:ae:64:ba:12:
dd:4b:23:4a:d7:86:07:04:cd:24:48:0f:eb:b3:62:e2:6f:14:
a6:fa:bb:1c:4a:74:d6:b9:a1:12:13:0f:61:42:b9:6f:b4:f7:
3c:57:9d:61:b3:82:bd:56:cb:4c:82:ad:f3:d4:4b:ec:ec:d7:
29:f8:13:d8:b4:85:a3:94:59:cb:f3:c7:a0:11:5d:fe:d4:7e:
56:1e:96:85:50:ec:38:ff:c1:66:59:1b:54:91:50:a1:1b:84:
55:13:68:bf:93:07:fc:86:bd:9f:f1:b5:14:f1:f0:ca:67:6d:
e2:95:3e:e2:02:b4:e3:b9:31:88:28:4f:4a:4c:9f:c4:7d:d6:
49:11:b8:6b:5d:15:a4:f2:31:b1:53:af:58:8a:19:2f:95:8e:
ff:64:0b:3f:92:cd:19:1e:2f:50:1d:5e:7d:78:9f:9d:05:42:
a2:32:a7:6c:6f:b9:54:99:c9:1b:2c:ea:3a:79:87:55:65:50:
57:a2:79:2c:66:86:ef:d7:12:d7:96:69:b1:29:04:fb:c0:9a:
52:77:0e:7b:e8:bb:9a:ae:2a:f7:a7:6d:9d:51:34:4e:92:b7:
54:24:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:43:37 2025 by rpki-client