Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/znCd1utj0Mj_HgAHE_v709eCLag.roa
File: znCd1utj0Mj_HgAHE_v709eCLag.roa (raw, json)
Hash identifier: Ly1wlO97nTsURgAX83qLeXDrKXs5VKhzjZFwbWKcBys=
Subject key identifier: CE:70:9D:D6:EB:63:D0:C8:FF:1E:00:07:13:FB:FB:D3:D7:82:2D:A8
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019701E0BC1293422FB7134B6DF847FE5503
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/znCd1utj0Mj_HgAHE_v709eCLag.roa
Signing time: Sat 24 May 2025 10:39:54 +0000
ROA not before: Sat 24 May 2025 10:39:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273189
IP address blocks: 45.67.246.0/23 maxlen: 23
45.67.246.0/24 maxlen: 24
45.67.247.0/24 maxlen: 24
185.225.246.0/23 maxlen: 23
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 07:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:e0:bc:12:93:42:2f:b7:13:4b:6d:f8:47:fe:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 24 10:39:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce709dd6eb63d0c8ff1e000713fbfbd3d7822da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:35:d6:91:7b:98:ea:51:e9:68:da:23:86:
f1:07:bd:26:90:71:51:bf:3b:35:50:87:51:61:0f:
dc:53:47:d5:0c:51:11:fc:b3:6c:cf:07:37:a7:aa:
86:c7:be:96:1e:e1:72:d2:ed:f7:7c:54:87:95:6a:
8f:76:9b:c5:06:6c:8a:26:ed:fd:30:6a:11:2c:96:
50:6f:53:e8:68:2c:b5:f1:6d:45:2d:59:75:d9:d8:
30:e7:e3:5d:de:c8:04:d5:08:eb:2b:f4:c0:79:8a:
a5:87:8a:f7:6d:d9:42:aa:59:15:25:43:1c:4d:6a:
54:0b:f9:5c:59:f3:48:55:ed:ec:5b:40:0e:89:2c:
c5:64:ee:c1:4a:48:02:ed:16:ba:08:5f:fd:02:04:
24:dd:73:88:bf:7b:f7:94:1c:64:2c:5a:65:4b:83:
5c:3d:4b:75:19:d4:8b:7d:a4:37:74:a8:7e:f8:44:
a7:a4:f4:c0:63:52:73:07:29:e8:4e:96:cd:a7:9e:
87:20:35:e8:b2:09:18:aa:38:a2:65:8a:da:77:1a:
03:74:bf:55:31:42:9f:8b:74:f9:81:ee:ea:65:53:
a1:c8:53:d6:68:89:d9:a5:1a:71:a4:23:89:2c:c0:
36:a3:27:d8:49:d8:d0:6d:75:4f:94:83:39:be:ed:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:9D:D6:EB:63:D0:C8:FF:1E:00:07:13:FB:FB:D3:D7:82:2D:A8
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/znCd1utj0Mj_HgAHE_v709eCLag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.246.0/23
185.225.246.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:b9:fd:93:2d:69:1a:1d:00:e6:26:4d:ba:49:7a:7a:7d:c9:
67:b0:ba:86:0a:55:b9:ac:09:c4:54:b6:42:f8:1d:50:70:a6:
db:e3:71:fb:7d:4d:3b:b0:57:0e:e6:52:76:f3:e8:7a:1f:b8:
24:c0:7c:fa:5f:8b:71:eb:7c:07:08:00:67:8f:7e:f8:35:33:
e7:da:26:39:49:c3:a5:3b:40:8b:04:d8:43:e4:f0:67:df:7a:
df:fe:05:d6:d8:19:0f:28:e5:4c:d6:63:f8:38:be:df:05:93:
c0:02:8e:33:74:bf:73:50:66:ea:89:82:0e:af:7e:2e:55:7c:
f5:7f:55:eb:6c:37:06:32:76:c4:f9:73:ee:ab:ce:37:42:a9:
41:95:23:2c:ef:3e:69:b5:de:d5:33:36:a3:40:c4:1c:90:11:
57:c9:fe:2e:ec:96:c3:bb:ce:37:fa:78:d1:50:8a:db:b2:df:
d9:97:79:41:6a:94:b1:e1:ab:fd:b1:06:78:1f:6d:4b:38:99:
f4:29:13:bf:de:44:3c:72:14:ba:cc:f6:76:0e:7b:81:72:f8:
47:25:8b:03:3c:3a:be:bf:ac:40:46:77:71:24:c6:06:40:9b:
99:ae:3c:1f:27:f0:55:35:9a:1d:a1:cf:3a:ee:fb:54:a3:be:
d4:60:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:40 2025 by rpki-client