Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/21BoQD8MX_U_XQ3DHpwDgiHR7E8.roa
File: 21BoQD8MX_U_XQ3DHpwDgiHR7E8.roa (raw, json)
Hash identifier: kByrczrjwL9ZcFLWxQc9tc9nCMBB8kMrrnOcV2ecAdg=
Subject key identifier: DB:50:68:40:3F:0C:5F:F5:3F:5D:0D:C3:1E:9C:03:82:21:D1:EC:4F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195140D2F5B6F751A6FFF37F18AD13939BF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/21BoQD8MX_U_XQ3DHpwDgiHR7E8.roa
Signing time: Mon 17 Feb 2025 13:16:03 +0000
ROA not before: Mon 17 Feb 2025 13:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 45.131.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 07:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:0d:2f:5b:6f:75:1a:6f:ff:37:f1:8a:d1:39:39:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 17 13:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db5068403f0c5ff53f5d0dc31e9c038221d1ec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:34:ba:6e:11:8b:94:ea:1f:2a:45:44:31:
9c:aa:d7:14:ae:1c:38:06:36:11:d4:78:d9:5c:21:
73:c7:f5:d2:b8:84:df:09:6d:6b:51:bf:5e:89:f0:
09:6e:c9:ee:ce:80:d4:25:53:21:d0:30:cd:90:72:
32:11:e9:1d:81:f6:22:c3:e6:18:55:6d:50:ea:11:
57:9b:8e:41:c5:30:4b:02:d1:cd:03:63:90:d8:4e:
ec:ba:5f:c5:58:b1:d0:d3:aa:7d:36:f4:17:b2:5c:
09:26:8c:05:b3:f4:dd:b7:40:58:fe:ca:8c:70:3a:
5f:a4:60:28:fc:55:4d:98:95:f7:ca:4b:41:77:1e:
61:66:22:1c:79:48:e4:f7:98:41:41:a7:82:5b:b0:
81:58:a6:d3:7c:e3:2d:dd:fa:61:dd:2d:0e:75:dd:
bc:fa:06:22:e2:3e:0f:5c:c9:06:bb:5d:08:e4:5f:
26:36:b1:1c:21:66:87:cf:3a:28:4f:c1:21:9f:44:
ff:f4:a9:77:43:83:e7:38:66:ad:69:50:c8:d6:d1:
ca:4c:fd:10:96:07:07:14:83:67:96:ca:bd:ef:35:
2b:5d:74:6f:a0:eb:0f:fd:d7:de:73:55:98:26:f0:
70:6e:96:20:ce:77:d0:28:83:b4:ba:4b:0a:27:ca:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:68:40:3F:0C:5F:F5:3F:5D:0D:C3:1E:9C:03:82:21:D1:EC:4F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/21BoQD8MX_U_XQ3DHpwDgiHR7E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
Signature Algorithm: sha256WithRSAEncryption
21:56:5d:c3:94:37:82:a9:c1:dc:d1:95:eb:bd:88:dc:1a:fd:
20:df:d1:f2:c7:ab:ea:36:e2:56:97:5e:d0:e1:74:07:07:ae:
d4:16:14:48:ce:35:e1:28:44:42:7c:e9:da:ae:82:5a:55:e3:
06:0c:8b:7c:9e:0d:72:ec:0a:c4:2a:40:1a:85:c7:c2:e3:19:
5f:93:7e:f4:ac:62:93:4b:62:78:15:dd:c9:41:e1:55:cb:67:
e8:cb:46:6b:4e:30:42:68:87:0c:8b:90:a4:34:5a:a6:37:87:
a6:43:53:de:41:e9:c1:af:d6:fe:a5:0b:d9:8f:e4:4c:86:87:
b4:5f:b5:ce:50:d9:56:03:ae:6e:30:58:2a:78:37:fd:04:a6:
0d:7a:a7:11:41:b6:7d:60:97:cd:f1:71:21:8b:10:50:1b:63:
f0:aa:70:a5:53:b2:c8:14:7c:e0:0b:03:74:ef:4e:55:fe:c7:
61:28:ad:62:2c:f0:a6:20:8b:78:a0:0c:a4:66:69:a0:f0:65:
ac:79:3b:ba:11:68:6e:f0:8d:c3:f6:ae:ff:99:1d:ae:00:c1:
98:1c:76:e3:a2:5b:d1:51:a8:9f:e5:b6:ff:a1:56:b5:64:e9:
63:dd:dc:de:c2:ba:66:d8:1d:88:a8:7f:8b:0a:3c:d4:32:5e:
0c:a0:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:04:17 2025 by rpki-client