Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/x_5IcHvEuDecsqRhREShTjs0DUU.roa
File: x_5IcHvEuDecsqRhREShTjs0DUU.roa (raw, json)
Hash identifier: i5HlKZ8KhpNolXz/yrwV6ygMRDN6aLd4JNUprriY++A=
Subject key identifier: C7:FE:48:70:7B:C4:B8:37:9C:B2:A4:61:44:44:A1:4E:3B:34:0D:45
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019754C9C1F3C7C95E787C61CBE50AB8ECCE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/x_5IcHvEuDecsqRhREShTjs0DUU.roa
Signing time: Mon 09 Jun 2025 13:03:17 +0000
ROA not before: Mon 09 Jun 2025 13:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.24.0/24 maxlen: 24
89.21.86.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
91.210.145.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c9:c1:f3:c7:c9:5e:78:7c:61:cb:e5:0a:b8:ec:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 9 13:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7fe48707bc4b8379cb2a4614444a14e3b340d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:c2:8d:3f:59:28:4b:30:8f:d1:2e:2f:82:
0b:7f:b5:b1:b1:04:da:21:5d:10:69:11:de:70:3b:
5f:84:30:74:3b:aa:ed:b9:10:30:a6:75:5c:a9:a9:
2e:52:03:22:41:e0:29:bf:28:64:38:73:fa:74:e1:
7f:44:02:ae:33:14:7f:6e:3d:1a:32:a7:bc:14:34:
4f:26:66:34:b6:97:53:0c:8a:bf:05:ef:78:31:36:
62:68:de:67:52:ba:d0:7b:7d:6e:38:70:fd:08:d7:
b9:4b:5d:d5:f2:27:67:31:9d:89:61:d7:05:8c:51:
b9:9f:b2:b3:8a:be:d4:57:6b:7c:9f:60:f5:28:4e:
98:a3:d6:43:c2:ab:7b:be:2a:b3:e4:27:91:6b:13:
e0:67:0c:93:2e:56:4e:cd:c0:10:af:55:2e:81:38:
99:0b:a3:2a:11:e6:0d:60:ba:7a:c8:74:b4:13:0d:
fe:96:71:75:96:e5:42:67:33:a9:97:19:0a:33:c1:
38:9c:57:a9:f1:f1:27:6c:9a:d6:fd:eb:c8:1c:bc:
4c:71:54:02:41:8f:59:17:0c:05:70:08:34:79:8a:
aa:e3:9b:21:69:16:34:64:0f:da:ef:1a:bf:5d:6a:
60:14:b3:9d:ff:cb:03:e0:0c:b1:d0:32:5c:8b:2c:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FE:48:70:7B:C4:B8:37:9C:B2:A4:61:44:44:A1:4E:3B:34:0D:45
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/x_5IcHvEuDecsqRhREShTjs0DUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/24
89.21.86.0/24
89.251.18.0/24
89.251.31.0/24
91.210.145.0/24
109.122.43.0/24
Signature Algorithm: sha256WithRSAEncryption
05:38:a7:85:9e:c9:8c:a7:09:4d:00:f0:9e:70:69:4c:6d:0b:
28:f7:7e:bc:41:75:2e:0b:57:11:12:c7:59:6c:31:cb:c7:95:
7b:29:7a:2c:ce:47:a7:d6:88:22:7f:6f:cb:26:34:2f:5d:64:
c4:a7:0a:89:f1:a7:4d:68:d5:7a:9c:1c:4e:f3:fb:69:9a:09:
76:2f:03:2d:f4:00:28:bf:b9:67:75:03:0f:db:2c:56:ff:dc:
14:54:40:76:a1:d0:f1:2e:bd:8a:c7:e9:a7:61:74:21:a1:31:
27:ba:3b:fc:40:01:9e:32:f6:50:b7:ba:80:60:39:6d:5c:28:
a8:94:af:9f:94:23:16:b0:01:a0:cb:12:10:8d:58:03:f0:fd:
5e:84:5d:3f:e8:40:bd:28:c5:9e:0e:b8:b2:06:68:59:8d:1a:
ae:e5:0e:cf:e6:d6:c6:56:ac:8c:4c:64:de:53:bf:08:2b:44:
ec:ce:27:b9:65:00:26:b4:84:52:8f:79:3d:8a:66:4a:93:1f:
32:c9:2c:32:30:20:ee:ee:26:56:83:05:d2:3e:50:34:f9:3f:
6e:94:6a:f0:e5:09:fe:67:7b:fd:61:77:4a:c3:d9:4c:fa:b6:
d1:ac:de:ab:97:e9:0f:f4:26:3c:e9:e1:c0:90:a1:41:7e:bc:
d3:19:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:36:07 2025 by rpki-client