Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SejS3Afqqi8yUQArcl_g1poY5eI.roa
File: SejS3Afqqi8yUQArcl_g1poY5eI.roa (raw, json)
Hash identifier: 51VpoNJRQ858sUXIOCHRtdX/Io+8irNJsp+8xK6v53I=
Subject key identifier: 49:E8:D2:DC:07:EA:AA:2F:32:51:00:2B:72:5F:E0:D6:9A:18:E5:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196F3CAC32EA84BD5DA504A424F037F6278
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SejS3Afqqi8yUQArcl_g1poY5eI.roa
Signing time: Wed 21 May 2025 17:01:13 +0000
ROA not before: Wed 21 May 2025 17:01:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
93.88.205.0/24 maxlen: 24
139.28.99.0/24 maxlen: 24
193.58.239.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:ca:c3:2e:a8:4b:d5:da:50:4a:42:4f:03:7f:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 21 17:01:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e8d2dc07eaaa2f3251002b725fe0d69a18e5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:e5:ec:25:42:39:53:fe:4f:9c:20:4d:05:
42:c2:bc:c2:20:e0:fb:f1:4d:a9:4f:04:4e:e8:e4:
26:5a:e1:49:01:04:ee:93:95:b1:67:2c:53:e4:b9:
4e:f0:af:f8:b2:d0:70:51:c8:07:a5:2e:79:79:ff:
e5:97:55:66:34:92:b8:bc:47:31:ac:a4:e1:ba:3c:
e3:9c:73:2b:66:a8:c4:77:5b:9e:04:5c:f0:85:61:
3e:9d:78:d2:5d:f3:77:57:5c:0b:59:cb:5f:ba:6a:
2b:bc:d8:03:43:15:aa:23:ac:13:d3:c9:98:7a:a5:
58:27:d3:3d:03:8f:bf:64:ec:82:1a:f7:a9:3f:a4:
2f:da:7a:6d:c7:a8:5e:01:31:87:37:30:72:4a:4f:
51:96:ac:e0:5b:f0:a4:dd:0d:39:d6:8c:f1:2a:76:
27:21:53:6f:78:2a:71:c2:c1:57:b0:df:f8:d1:56:
ee:e7:5f:c1:4f:db:57:f0:51:9d:a7:e3:a8:8c:8a:
0e:00:aa:17:e9:19:bb:cc:d4:25:84:51:c4:cb:21:
d0:37:9a:7b:90:64:08:75:0e:a4:29:0b:86:9d:f5:
f8:d7:7e:a3:05:76:57:44:3e:e5:21:b9:d7:23:26:
d2:5e:3a:5c:35:83:2c:46:bf:c7:93:4d:2b:87:7a:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E8:D2:DC:07:EA:AA:2F:32:51:00:2B:72:5F:E0:D6:9A:18:E5:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SejS3Afqqi8yUQArcl_g1poY5eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
93.88.205.0/24
139.28.99.0/24
193.58.239.0/24
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1e:ec:a3:1c:17:60:da:af:d5:23:14:a2:ee:da:f6:50:1c:
a7:81:89:2d:d1:06:0c:ca:6e:17:9c:ab:9e:fc:dd:10:b6:62:
2c:29:26:8e:ff:c5:a0:b3:a8:38:82:55:2a:62:12:6d:87:6f:
e7:42:7f:39:a0:c1:cc:de:54:71:25:5a:f1:ce:4c:c3:66:30:
6c:10:70:d6:d6:ca:0d:3c:15:8e:47:8f:cc:3a:44:b0:88:88:
cc:04:45:74:5f:df:ec:ad:c7:58:d1:9d:e5:d2:2b:ef:5c:f7:
fa:7d:f2:b4:f4:13:ff:7d:2e:6e:2d:6d:a8:45:0c:28:d0:92:
a2:4d:ce:53:10:ec:68:22:c2:17:77:66:b6:56:41:7d:01:08:
eb:ab:56:8e:1b:d1:09:e5:bf:02:db:06:65:22:92:b0:43:4e:
13:ee:31:a5:b1:04:a9:a9:89:ce:77:50:fa:d1:1e:55:36:2c:
dd:af:86:67:3f:28:23:55:66:36:68:68:7f:6d:f1:be:da:40:
a3:39:08:be:99:59:40:93:99:ed:2d:db:a7:f9:27:95:82:58:
9c:ed:0f:dd:d5:94:ec:cb:ff:5a:ae:56:4d:e1:18:8c:58:9a:
9b:50:30:00:0b:5b:c4:d4:cc:3a:e8:72:14:52:02:62:b0:18:
99:eb:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:26:15 2025 by rpki-client