Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Eh0woCpAlt2V-svqymn15swUofo.roa
File: Eh0woCpAlt2V-svqymn15swUofo.roa (raw, json)
Hash identifier: OEaJvQe22VCJ34gUFt9Xk2gOs3VsWUUbLhbnF7jitso=
Subject key identifier: 12:1D:30:A0:2A:40:96:DD:95:FA:CB:EA:CA:69:F5:E6:CC:14:A1:FA
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01955BEF8A8B6BF13CB4056E77090D177D04
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Eh0woCpAlt2V-svqymn15swUofo.roa
Signing time: Mon 03 Mar 2025 12:16:19 +0000
ROA not before: Mon 03 Mar 2025 12:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.114.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 21:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ef:8a:8b:6b:f1:3c:b4:05:6e:77:09:0d:17:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 3 12:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121d30a02a4096dd95facbeaca69f5e6cc14a1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:90:23:9e:df:ea:12:d9:30:a9:9f:b3:c8:
0f:79:bf:5b:26:7a:4e:c6:9f:71:a9:46:12:e3:03:
49:ed:ec:c0:74:59:b1:f5:68:09:dd:f1:05:70:e3:
8e:f4:a3:65:ad:ba:82:a7:91:d2:65:40:de:2d:b2:
45:08:4f:32:fa:01:fe:c1:49:bb:58:c4:dc:bf:08:
50:76:62:b0:77:78:2f:80:fd:d1:c0:d1:1b:d7:0f:
5b:13:c0:1f:e7:28:ed:dd:6a:97:84:3e:60:62:bd:
16:83:03:e1:e2:0e:47:fb:a9:63:89:85:ae:59:78:
71:71:61:0d:0f:c3:ad:b9:3a:cf:4c:88:ac:c1:a4:
fa:23:66:cb:85:17:94:62:59:42:5a:2f:19:12:00:
ab:2c:d8:da:52:67:9a:06:df:56:bf:d0:2a:be:ea:
1f:cd:4c:67:59:a5:a9:41:38:9c:e1:12:d4:9e:31:
f5:d7:b1:c5:f3:bc:24:d9:90:a9:8d:08:56:75:67:
68:58:02:43:7b:04:75:1c:a3:23:be:54:a0:30:2f:
73:5a:44:1e:b6:65:54:22:ee:33:bf:f7:0f:9e:99:
bd:08:6b:64:bb:5e:52:84:e8:ed:70:1f:b5:12:8f:
94:bf:74:a5:70:f2:20:15:e6:74:f3:fa:96:a4:ae:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:30:A0:2A:40:96:DD:95:FA:CB:EA:CA:69:F5:E6:CC:14:A1:FA
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Eh0woCpAlt2V-svqymn15swUofo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
188.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
28:de:a1:ee:b0:32:f1:0c:35:87:19:68:64:fd:9c:c7:1f:67:
3a:a0:00:14:1f:7a:65:2b:7a:ef:cd:fb:63:75:75:db:5a:c2:
47:52:70:2c:b5:0b:11:13:b2:e0:85:4e:13:58:06:20:1c:44:
44:a3:01:8d:f1:34:65:bc:f4:7e:85:a6:5c:1b:78:aa:94:72:
89:6a:94:f8:31:4c:46:d9:f1:1f:f6:7f:3e:dc:42:7b:c1:98:
8c:38:fa:69:c2:69:73:fa:e5:c0:f9:a0:6c:e8:a4:d5:9d:21:
3b:a2:33:27:d5:4d:ad:21:ec:62:ac:bb:e4:75:99:1b:4f:ff:
91:31:11:53:d5:7a:48:cf:96:7f:d3:88:33:57:d3:a2:b7:a0:
dd:8c:2a:5a:0d:dc:34:e0:2d:81:a0:d1:d4:8c:67:56:22:b2:
34:e9:48:7c:ad:03:be:3c:df:38:50:e1:91:93:c0:28:db:a6:
7c:cd:8e:85:a2:4a:f3:c8:9b:bd:89:f5:7a:2a:2c:b9:b0:83:
53:a7:44:38:d8:e6:2f:7e:0a:80:67:f3:79:fc:a6:d2:42:c2:
13:b0:37:85:41:b2:5e:05:08:03:96:a4:50:a6:5c:c5:b8:a9:
96:75:5b:bd:87:32:14:6a:bb:e0:4b:d0:7c:a7:3f:de:10:60:
5e:2c:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:25 2025 by rpki-client