Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/54ObYKePsNgwghKcQCavB_cm7J0.roa
File: 54ObYKePsNgwghKcQCavB_cm7J0.roa (raw, json)
Hash identifier: Tq6mYog+sFf0ztMkSFDZsq/jprHjuBmJXDPF+UkCkHI=
Subject key identifier: E7:83:9B:60:A7:8F:B0:D8:30:82:12:9C:40:26:AF:07:F7:26:EC:9D
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01960C9B0BBF7C9B5A4A03A0F7839DD31D85
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/54ObYKePsNgwghKcQCavB_cm7J0.roa
Signing time: Sun 06 Apr 2025 19:36:49 +0000
ROA not before: Sun 06 Apr 2025 19:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.154.158.0/24 maxlen: 24
45.154.159.0/24 maxlen: 24
188.209.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 09:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:9b:0b:bf:7c:9b:5a:4a:03:a0:f7:83:9d:d3:1d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 6 19:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7839b60a78fb0d83082129c4026af07f726ec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:47:c2:ff:ac:71:85:b4:ad:d3:3b:75:84:
5f:11:e7:3f:2e:08:0e:ad:70:81:4a:22:c0:58:50:
d1:b3:56:f7:70:83:1c:4c:b7:2e:6e:57:db:2f:02:
2f:e3:a6:12:96:cc:87:19:ed:d2:e7:04:7e:aa:5e:
1d:f1:53:79:01:08:b8:38:f2:8a:18:56:ad:da:a3:
b8:61:f9:6e:09:15:5a:11:f7:c9:28:d1:a0:2a:66:
c3:0d:03:71:f6:dc:96:2a:d6:9d:07:50:b9:b9:95:
07:96:a4:55:27:05:73:2b:92:6a:1a:38:f6:ca:f7:
f7:e1:0a:81:03:21:f0:27:a0:b5:bc:2e:9c:da:97:
20:f2:fb:9c:a9:57:8d:41:35:81:20:75:67:61:ab:
7c:e9:ca:93:a1:11:9f:5b:de:40:31:78:2c:d1:59:
14:d9:63:7a:c9:93:4f:7b:01:79:f8:3d:d2:6d:d2:
ad:45:ac:5e:80:86:e6:d8:2f:d0:64:97:e3:f5:50:
5e:75:19:28:70:04:14:5e:56:b7:d4:0c:72:85:9a:
2d:30:c3:c5:4b:7e:5e:0c:24:51:0c:e5:36:de:95:
e5:06:41:b3:c4:57:b8:8b:50:e8:37:eb:ea:69:01:
67:4e:af:0b:dd:5d:93:df:2c:88:01:f1:5e:24:d6:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:9B:60:A7:8F:B0:D8:30:82:12:9C:40:26:AF:07:F7:26:EC:9D
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/54ObYKePsNgwghKcQCavB_cm7J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.158.0/23
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
76:15:49:9c:5a:56:90:ef:cf:99:ab:80:c4:62:e6:17:e7:74:
dc:2e:e2:96:6b:ae:05:9d:fd:4f:91:bc:fc:5b:65:82:83:22:
d1:14:a6:f2:90:da:6f:d5:09:d6:f3:29:70:49:cb:5f:bb:a1:
30:d5:0f:86:d6:3b:04:ce:ff:57:cd:c3:30:ce:01:6a:f6:fb:
2e:8a:a2:f8:8a:b5:98:12:bb:69:ec:4a:35:4e:c4:62:63:4b:
1f:24:d1:b0:1d:5d:4b:16:ce:3b:92:69:83:eb:30:6c:a8:3c:
28:5c:50:7f:21:8e:e1:0b:51:7e:ee:30:6d:2a:55:09:b5:2f:
0b:37:8d:8a:15:d2:40:1e:e5:46:ad:f9:a6:f0:77:15:4e:4e:
74:ed:80:18:13:ac:cb:ad:b3:39:6f:ea:25:37:b9:2f:13:44:
ff:04:e5:cd:0d:bc:25:a0:5e:7f:c4:96:be:41:43:e2:1e:ae:
1e:48:b6:a9:c7:6e:b5:60:48:70:07:48:3c:12:f4:57:ee:ac:
72:38:2b:ab:5a:d6:c3:6f:e8:bd:61:16:c3:56:37:cb:92:3b:
fb:06:81:52:84:54:08:c0:f7:71:70:6d:83:d9:d3:bf:12:b5:
c9:ae:5d:a0:0f:ef:30:2b:8e:93:0d:56:54:32:b3:63:e2:1b:
e2:a9:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:18 2025 by rpki-client