Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GmWGsOKVDhjqvJiPwJAm8ImZJY.roa
File: 1GmWGsOKVDhjqvJiPwJAm8ImZJY.roa (raw, json)
Hash identifier: xqt+oSKZ0zyJs6lkxiIwydZ6Dx6r3q7cYrBj/8kkLPI=
Subject key identifier: D4:69:96:1A:C3:8A:54:38:63:AA:F2:62:3F:02:40:9B:C2:26:64:96
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196F6F5A164A5F0C3C913F038AAA3F3793C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GmWGsOKVDhjqvJiPwJAm8ImZJY.roa
Signing time: Thu 22 May 2025 07:46:54 +0000
ROA not before: Thu 22 May 2025 07:46:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a13:18c6:66::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 25 May 2025 07:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:f5:a1:64:a5:f0:c3:c9:13:f0:38:aa:a3:f3:79:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 22 07:46:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d469961ac38a543863aaf2623f02409bc2266496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:b2:b7:75:8b:4c:aa:a5:a2:94:10:8f:28:
3a:c4:d2:cf:a5:14:02:98:c5:e3:d3:a2:ad:69:34:
8a:62:3b:e2:16:e5:71:13:a5:eb:3c:bf:9e:f1:7b:
a0:31:78:29:b3:2e:da:96:86:46:d9:fd:9d:aa:23:
20:ed:25:2f:8d:e3:a2:24:d5:bc:7a:6d:c0:cc:65:
aa:39:63:00:d8:0b:56:8d:b6:e6:ed:c3:9a:e4:ec:
d2:9e:5e:50:13:74:34:74:a9:cc:27:9c:de:9e:06:
5e:7c:4c:b1:09:f4:58:41:4d:26:67:b6:ff:9c:dd:
0e:62:bd:d2:06:9c:d6:47:50:b6:35:71:f9:b4:22:
08:d5:36:6c:c9:ae:97:55:76:34:69:34:7e:23:ee:
4e:a9:72:27:55:61:7f:f9:a5:94:29:01:3a:a2:e1:
ec:4f:ae:91:91:a7:0b:fe:07:d5:90:35:7c:97:ec:
0c:89:ca:e2:1b:5e:c3:cf:57:c5:c0:62:f0:1c:68:
86:a0:3e:2c:eb:7f:78:81:5c:a0:15:30:a1:fb:c4:
57:d5:7f:db:40:de:4b:91:14:47:15:12:60:92:8f:
bc:f7:04:a5:2b:47:83:27:59:00:f8:42:83:3f:38:
7f:f7:9f:2c:fc:eb:22:0c:43:30:0d:d8:99:d0:87:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:96:1A:C3:8A:54:38:63:AA:F2:62:3F:02:40:9B:C2:26:64:96
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GmWGsOKVDhjqvJiPwJAm8ImZJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
45.128.76.0/24
45.154.58.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:140::/29
2a0f:2500::/29
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e4c0::/29
2a0f:fc00::/29
2a12:ecc0:158::/48
2a13:18c6:66::/48
2a13:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
55:7c:64:86:24:66:9e:f8:a0:0a:54:76:4b:b9:53:74:7b:01:
28:8f:2b:70:a6:4f:f5:b0:0d:b6:2e:15:8d:9f:e5:cf:b0:00:
0a:47:d4:5f:44:c2:23:03:fb:1d:13:8e:e8:45:82:40:84:46:
54:6e:96:2b:02:ce:c6:6d:50:cf:aa:ef:d1:29:e1:0e:69:02:
fa:4d:48:f3:53:ea:36:02:3d:66:a4:55:19:d6:2d:2e:a1:3e:
cd:30:27:2e:c1:8f:0e:f2:cf:85:35:8b:ab:6d:23:ea:de:18:
a0:d6:56:80:59:b6:af:6e:99:e7:7b:c1:bd:db:b2:5a:fa:12:
1c:f8:c3:9e:80:c9:e9:de:b4:df:2a:9d:63:28:78:c5:0d:99:
2c:22:94:be:13:f7:e8:9a:e0:ff:63:67:c4:68:f0:1a:9b:16:
ce:6c:91:8c:8a:5c:e1:3d:8b:d0:4d:e4:6d:dc:c0:96:6b:78:
37:75:c2:88:20:30:31:22:cb:aa:e4:70:7e:5c:e7:1a:48:3b:
07:2d:43:c1:fb:b5:6a:5d:e2:ef:1b:01:14:87:36:a6:28:26:
be:f4:fc:78:9d:9e:a6:d3:66:f5:87:6f:bf:6c:66:04:6b:cd:
f9:9a:0d:bc:15:08:23:fb:de:10:31:21:ec:63:ff:fc:8b:ac:
ff:1a:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:13:39 2025 by rpki-client