Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/6ujLCxhW3Hyc17gvMtTfyzFndik.roa
File: 6ujLCxhW3Hyc17gvMtTfyzFndik.roa (raw, json)
Hash identifier: 5GAXoEGHuYdYgDRyGV1wBqBbMxD4o03hfcA+nEPZ93E=
Subject key identifier: EA:E8:CB:0B:18:56:DC:7C:9C:D7:B8:2F:32:D4:DF:CB:31:67:76:29
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01961ACB96C83F4D04E4F5C9071CF8A31276
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/6ujLCxhW3Hyc17gvMtTfyzFndik.roa
Signing time: Wed 09 Apr 2025 13:44:31 +0000
ROA not before: Wed 09 Apr 2025 13:44:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.67.230.0/24 maxlen: 24
103.113.68.0/24 maxlen: 24
185.235.242.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:cb:96:c8:3f:4d:04:e4:f5:c9:07:1c:f8:a3:12:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 9 13:44:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae8cb0b1856dc7c9cd7b82f32d4dfcb31677629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:af:a7:dc:70:f4:d5:39:5d:9d:fc:0f:88:
35:8d:c1:96:f1:5c:7a:9e:4c:65:a7:bc:7c:85:f6:
54:3c:b6:fd:e8:58:9e:86:6c:cd:e9:66:59:d1:d2:
c5:8b:bd:97:3c:ce:d3:4e:a2:13:f0:af:ec:f4:0d:
b2:c9:ea:9e:bc:94:2b:4c:dc:9c:69:1a:f2:ac:16:
5d:09:78:53:71:95:eb:64:55:15:04:79:e9:31:e5:
b2:ae:bd:c0:d7:4a:19:5c:47:d0:9a:78:ba:5d:8d:
47:e7:fa:4a:46:f7:0b:c9:d3:c2:a1:da:4e:e9:d7:
a1:dd:49:8d:4a:25:e4:cc:ba:b2:26:0d:90:5e:63:
8a:4f:df:6a:2e:38:ef:92:da:b6:a3:97:fb:d0:51:
50:3a:b9:e0:72:4c:56:81:24:43:e3:1d:50:78:d5:
36:82:2b:0b:11:6b:d2:ef:0e:08:ac:57:26:f9:dc:
07:1f:a4:a0:60:c2:a0:8d:0e:30:1a:f4:a7:c2:08:
68:11:60:44:3f:e8:4a:b3:0b:be:20:6a:5d:f6:08:
d4:ff:bc:d4:8a:cd:b3:6d:e0:5f:00:fb:6d:39:dd:
15:a5:91:60:88:f8:b8:30:ee:8b:64:ea:be:91:e8:
1b:3d:1a:1f:aa:26:ea:44:7c:50:93:ac:e4:34:33:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:CB:0B:18:56:DC:7C:9C:D7:B8:2F:32:D4:DF:CB:31:67:76:29
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/6ujLCxhW3Hyc17gvMtTfyzFndik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.230.0/24
103.113.68.0/24
185.235.242.0/24
185.250.149.0/24
Signature Algorithm: sha256WithRSAEncryption
36:78:89:73:21:aa:ee:c6:93:34:c1:80:1b:11:2d:5a:0b:68:
94:36:f5:38:53:ea:69:1d:af:ee:09:31:ed:7e:3c:d7:78:df:
3f:1b:6d:59:2d:a0:0c:e8:f1:ef:1e:21:97:ea:7d:1a:7c:19:
f0:44:dd:39:44:5f:14:18:ef:c7:1a:8f:22:1f:4c:20:a3:d8:
b5:98:36:2e:f5:b0:7f:6d:31:4f:a6:6e:12:6b:c4:01:0e:bd:
04:25:db:60:43:70:66:ad:57:de:47:c3:f6:80:f9:cf:13:19:
55:62:68:51:ff:0e:16:64:e8:42:36:bf:80:6d:18:46:3c:3c:
f9:80:7f:bc:75:84:b7:3a:63:03:cd:9b:59:b9:c5:17:e6:79:
62:e1:81:e4:fc:5c:19:3d:05:57:a5:10:47:3d:e4:d0:a5:31:
f3:30:0b:f4:42:00:14:4b:e3:5b:d8:48:71:e8:71:dc:8b:c1:
08:d0:3c:4a:31:2b:a4:32:9b:8e:b7:a8:de:10:bd:d4:36:64:
c2:07:55:bb:90:ea:a0:75:f6:82:70:74:02:9b:9a:31:94:44:
4f:f1:a2:92:c5:0d:ed:be:ab:42:36:89:f2:99:55:f3:37:f1:
ff:56:c1:c5:ba:38:bc:d2:a2:ba:38:54:b2:15:40:ec:69:50:
ac:f3:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:36 2025 by rpki-client