Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sN4YyrWApvcU_6UX-9SaPPeK-_M.roa
File: sN4YyrWApvcU_6UX-9SaPPeK-_M.roa (raw, json)
Hash identifier: 9/c3L2tKNNt9Vmt7MnHxj5x1G52EJeni9UCJWbesRQ8=
Subject key identifier: B0:DE:18:CA:B5:80:A6:F7:14:FF:A5:17:FB:D4:9A:3C:F7:8A:FB:F3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019758C77C4C9DA946E6692DD8FE2655276B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sN4YyrWApvcU_6UX-9SaPPeK-_M.roa
Signing time: Tue 10 Jun 2025 07:39:17 +0000
ROA not before: Tue 10 Jun 2025 07:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.26.0/24 maxlen: 24
89.21.84.0/24 maxlen: 24
176.97.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 14:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:c7:7c:4c:9d:a9:46:e6:69:2d:d8:fe:26:55:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 10 07:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0de18cab580a6f714ffa517fbd49a3cf78afbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:c8:b6:cf:6a:05:ba:5e:7f:f1:ea:46:02:
87:8e:d7:4e:79:55:71:05:52:c6:90:5b:3f:7e:53:
53:8e:90:58:d0:7d:ee:1e:dd:90:4f:6a:1e:d9:6b:
e1:ba:cb:e5:03:53:15:7e:c0:0f:d3:d8:63:86:c8:
43:f2:11:5c:51:a8:1a:86:d9:bc:55:40:54:e2:e5:
62:81:59:78:e2:40:ec:b6:9b:2f:d4:b3:e7:c1:3a:
35:f9:7c:1a:46:4f:bd:02:88:e3:c1:53:20:8f:88:
8c:26:cd:b3:38:49:dc:f0:c3:c5:9f:fe:86:e5:71:
84:8f:2a:9b:37:50:72:4b:7d:ca:e0:43:e3:fe:1d:
03:23:0a:2a:51:6a:97:c0:07:5f:bb:dc:06:86:50:
da:99:94:4a:6c:c0:b2:d0:38:25:5d:aa:d7:c2:12:
fc:be:59:b4:da:7e:49:d0:33:85:2a:8c:ed:9e:7a:
cc:aa:06:28:a6:77:2f:ee:1a:5e:78:d9:d1:a6:1f:
ab:ad:7e:9b:44:60:72:94:e0:34:af:1e:f2:3d:39:
36:a3:d5:59:f3:75:ad:49:74:72:43:13:b7:62:a9:
9b:d0:93:a7:1d:d1:4d:d5:65:57:36:b1:59:c1:af:
78:82:7c:9b:2f:f8:5f:14:e0:a8:d4:53:77:c3:8c:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:18:CA:B5:80:A6:F7:14:FF:A5:17:FB:D4:9A:3C:F7:8A:FB:F3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sN4YyrWApvcU_6UX-9SaPPeK-_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.21.84.0/24
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3e:67:a8:92:b6:26:ce:b2:5e:ce:7f:e1:c6:41:7f:60:8b:
f5:3a:4e:50:aa:ed:d9:b8:fa:55:0f:3d:22:25:31:e2:2d:aa:
d0:24:64:4d:ac:90:4d:b3:7b:96:49:46:b2:ca:cd:7d:3a:b3:
70:b9:01:26:25:8b:ba:08:70:7f:c9:20:e8:ca:01:54:99:33:
40:d5:87:95:c8:c7:2b:f4:e9:ee:48:fb:54:fe:48:ab:52:e5:
17:d9:8e:fc:86:cd:01:99:af:ca:ef:0a:f4:9d:30:2b:72:59:
36:f5:82:c8:81:ad:95:aa:a3:69:9c:72:4d:d8:a2:48:2b:c1:
db:7f:e3:46:21:1d:39:9e:3c:4b:36:a3:ba:f2:75:bb:c6:46:
ef:fe:ff:9f:16:f3:64:39:1d:94:15:a9:a0:72:96:36:30:cd:
71:c5:6b:d7:dc:b1:e7:83:d6:fe:3a:e3:82:dd:d7:83:7f:d3:
2a:8e:d8:a6:93:b0:45:ae:0f:aa:ed:51:3e:11:b3:fe:57:2d:
39:45:f4:b8:89:63:73:7d:3d:6a:33:34:4b:3f:82:4b:3a:12:
24:4f:7a:62:8b:1b:f7:83:93:62:9e:ff:4d:15:6c:00:67:4e:
a9:0d:7e:dd:29:59:06:c1:85:bf:bd:10:00:53:f1:7f:7b:77:
f2:b8:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:10:14 2025 by rpki-client