Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-7cJAGUVHlu-0Fg8eqqlCz7PKCA.roa
File: 1-7cJAGUVHlu-0Fg8eqqlCz7PKCA.roa (raw, json)
Hash identifier: qOiCTqI+OwgLdSNMWmTPxfsLHe4xrs7wezCYuJC/FpA=
Subject key identifier: FB:B7:09:00:65:15:1E:5B:BE:D0:58:3C:7A:AA:A5:0B:3E:CF:28:20
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197181713A8EC57F07B25EF7B075ECB8E43
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-7cJAGUVHlu-0Fg8eqqlCz7PKCA.roa
Signing time: Wed 28 May 2025 18:10:54 +0000
ROA not before: Wed 28 May 2025 18:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.86.244.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.154.228.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
2a0f:8100::/29 maxlen: 29
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 06:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:17:13:a8:ec:57:f0:7b:25:ef:7b:07:5e:cb:8e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 28 18:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb7090065151e5bbed0583c7aaaa50b3ecf2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:3b:23:fb:39:23:67:93:5d:de:5c:a0:7b:
cf:6b:00:04:da:a8:2c:40:0b:d1:2b:fe:a7:6a:27:
86:fc:98:d3:69:96:50:84:a1:81:ff:15:09:71:9b:
bd:b4:fc:aa:8e:6f:bd:30:e9:09:4e:12:51:a4:75:
a9:b5:8f:2b:26:d9:b3:a7:a5:5b:33:16:be:cd:15:
84:e4:3d:5e:9d:26:35:5a:ca:52:46:f7:83:8f:93:
73:47:c9:eb:2e:e3:84:6b:e4:78:6e:4d:38:1f:ba:
90:f7:9a:88:a9:b6:4c:31:81:72:61:b3:75:01:aa:
e9:b2:d8:fd:55:cb:bd:5d:d8:b4:5e:b3:ef:a4:22:
37:78:8e:10:f0:ea:8a:9d:65:d6:ca:98:e4:5d:96:
b9:ca:e9:4e:d4:d0:a6:06:f8:36:11:ad:db:6b:0c:
f5:8d:82:99:00:85:07:6f:80:1b:59:f1:32:db:c9:
f9:4f:33:c0:fd:39:a5:13:75:59:b3:6e:9f:9b:e3:
81:41:42:6b:4c:97:4c:31:f2:f9:ec:b5:7c:f7:0f:
72:8f:32:c0:c8:75:e7:50:ed:ec:8f:a1:cb:33:dc:
00:71:f7:fb:84:bf:39:93:3d:c7:f1:94:54:47:3f:
68:69:aa:16:0e:16:25:34:94:2f:2c:9f:46:9b:e5:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B7:09:00:65:15:1E:5B:BE:D0:58:3C:7A:AA:A5:0B:3E:CF:28:20
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-7cJAGUVHlu-0Fg8eqqlCz7PKCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.244.0/24
45.94.47.0/24
45.95.97.0/24
45.130.128.0/24
45.134.184.0/24
45.154.58.0/24
45.154.228.0/24
85.209.130.0/24
185.164.59.0/24
194.62.30.0/24
194.62.66.0/24
195.66.26.0/24
IPv6:
2a0f:8100::/29
2a0f:e7c4:10::/48
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
3a:7b:ac:86:d8:13:83:4f:b7:f6:b6:b4:07:21:d9:75:6c:e7:
f2:18:30:75:61:f3:73:26:ad:3e:b7:2f:ea:54:42:b1:ec:d8:
99:fd:1b:d1:67:8b:23:13:bd:d1:38:98:31:e8:13:50:9c:88:
6d:ed:d0:58:71:e0:45:bc:4a:3c:03:c9:b9:af:dc:ce:8e:5f:
2c:82:e7:84:bf:c4:fa:50:87:1a:ba:c0:4a:b7:f2:fc:f0:09:
99:14:14:63:2c:1b:e1:67:2d:15:38:bd:86:10:e7:00:53:5b:
9c:90:e0:bb:14:f4:ac:9d:fd:2d:ec:f5:92:5f:bd:ef:2d:be:
a1:a8:b9:29:03:4f:8a:59:32:f4:b3:50:87:4f:3c:93:e7:94:
61:77:51:40:d0:66:0f:c1:22:1c:94:78:23:30:b9:cc:82:ef:
c1:7b:18:1c:cb:14:4c:6b:d8:21:38:8a:b9:39:c1:2f:60:2b:
fa:95:ce:c9:f6:bc:d0:49:bf:58:af:65:7e:60:20:7f:44:c5:
8f:34:16:3d:d0:b8:70:20:53:0a:53:ae:45:18:bb:73:50:b4:
3a:a9:29:56:2e:66:79:ea:49:06:53:98:e3:e1:b3:62:fa:a9:
14:2b:f8:4b:bd:10:22:b9:cb:e9:68:43:6a:2f:26:56:ed:0b:
9c:08:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:14:06 2025 by rpki-client