Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Kd7Bmk-9SDrOSrz6mUwq8x2IVIw.roa
File: Kd7Bmk-9SDrOSrz6mUwq8x2IVIw.roa (raw, json)
Hash identifier: gK2CQveE0FLrH2E6VeYVfdI3iDzrVK4qo5qh8gS+MoY=
Subject key identifier: 29:DE:C1:9A:4F:BD:48:3A:CE:4A:BC:FA:99:4C:2A:F3:1D:88:54:8C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01973AE46D31CF4B919907C06889B0E8748D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Kd7Bmk-9SDrOSrz6mUwq8x2IVIw.roa
Signing time: Wed 04 Jun 2025 12:22:17 +0000
ROA not before: Wed 04 Jun 2025 12:22:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 45.80.158.0/24 maxlen: 24
45.83.31.0/24 maxlen: 24
45.92.1.0/24 maxlen: 24
84.54.33.0/24 maxlen: 24
185.241.208.0/24 maxlen: 24
192.159.99.0/24 maxlen: 24
193.26.115.0/24 maxlen: 24
203.159.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 12:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:e4:6d:31:cf:4b:91:99:07:c0:68:89:b0:e8:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 4 12:22:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29dec19a4fbd483ace4abcfa994c2af31d88548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:49:fd:a6:9c:63:35:b2:d9:81:6e:65:3e:
3d:4e:ba:0e:25:2f:59:7a:7c:73:90:04:6a:e9:94:
39:36:6d:1a:f3:c0:17:09:df:3f:f2:2c:86:42:1a:
fe:81:bb:41:0f:ef:cf:cf:d3:5a:23:82:40:86:44:
93:d8:a1:ad:00:d3:82:db:81:b9:e1:8d:c9:dc:d1:
6f:83:3a:4c:8a:5b:c7:32:c2:10:c8:a8:33:81:3f:
92:5c:e9:b5:fa:d5:55:a0:63:e4:c7:3a:3d:98:25:
fd:e4:52:96:68:de:3c:ed:74:68:7a:13:8f:b0:b3:
c4:d9:a1:f7:a4:b4:96:d1:68:20:29:93:c1:da:ca:
d5:35:c2:fa:a9:3a:5a:d3:b2:78:5c:62:0a:c9:f3:
19:7d:cf:9b:40:64:71:e2:77:b7:05:6c:06:29:c5:
14:45:26:31:4d:83:06:7a:ad:57:f1:4a:c7:55:6a:
1e:09:28:e1:ce:2c:8e:1b:19:b4:8a:09:81:54:68:
20:52:c5:60:c7:04:e7:ea:96:46:db:8c:13:33:1b:
d6:88:4f:ae:52:fd:49:6b:ce:11:cd:84:54:84:f8:
db:41:4c:bc:8d:0a:0d:ac:8b:43:fc:52:a1:51:e7:
c9:81:6d:b4:32:e9:96:0d:47:97:80:00:45:12:58:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:C1:9A:4F:BD:48:3A:CE:4A:BC:FA:99:4C:2A:F3:1D:88:54:8C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Kd7Bmk-9SDrOSrz6mUwq8x2IVIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
45.83.31.0/24
45.92.1.0/24
84.54.33.0/24
185.241.208.0/24
192.159.99.0/24
193.26.115.0/24
203.159.90.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f3:9a:11:96:3e:e9:22:7e:0e:30:e1:be:5f:60:3a:6b:c1:
66:ee:bf:87:bb:09:1d:b5:07:7f:a6:e6:ce:47:db:b2:d3:7f:
33:ee:26:2c:14:fb:cb:dd:90:bd:36:fc:59:61:76:8d:46:40:
e2:81:1f:01:db:6b:a8:af:b6:dc:bd:b2:cd:bd:61:c2:1b:55:
58:e1:ba:83:ba:00:b9:1c:d1:08:58:6b:7e:f6:3e:88:59:65:
93:95:4e:90:51:78:39:a1:b1:d7:11:52:73:90:a7:2e:56:a0:
70:76:c3:68:7b:0e:20:ee:6f:4f:75:0b:f0:e6:9c:91:d7:7f:
f0:81:14:20:e4:13:81:a2:ed:55:e8:d7:a0:d6:87:72:53:b3:
68:8a:21:00:59:94:f0:39:c0:f7:89:c3:72:1f:6d:55:8c:6f:
e5:c4:d5:6c:40:ef:68:f9:d9:fd:0a:d9:91:b1:45:f3:16:54:
4a:60:cd:58:8d:6a:f0:39:9c:4f:20:e2:38:df:ce:16:7b:b9:
27:eb:0f:18:f8:cd:45:93:28:98:5c:9c:47:e0:3e:65:69:40:
a8:e9:d8:20:90:54:17:54:c9:0e:1e:12:ce:5e:f0:82:79:ad:
d2:7b:54:d2:2c:c7:3f:bf:e9:58:9e:0e:da:71:29:1b:b8:a2:
8f:49:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:18 2025 by rpki-client