Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7GECS3v-H-ywnIe-yeD1N7toPY8.roa
File: 7GECS3v-H-ywnIe-yeD1N7toPY8.roa (raw, json)
Hash identifier: kiVDpnRCMjeV47327s7tQX5XF4ox8KgO40nqdmBIB4M=
Subject key identifier: EC:61:02:4B:7B:FE:1F:EC:B0:9C:87:BE:C9:E0:F5:37:BB:68:3D:8F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F3D89DFDFB96D9D91B77364F0B98A829A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7GECS3v-H-ywnIe-yeD1N7toPY8.roa
Signing time: Fri 03 May 2024 08:19:56 +0000
ROA not before: Fri 03 May 2024 08:19:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a13:18c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 08:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:89:df:df:b9:6d:9d:91:b7:73:64:f0:b9:8a:82:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 3 08:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec61024b7bfe1fecb09c87bec9e0f537bb683d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:56:f9:eb:1d:45:16:57:be:f8:73:da:f1:
55:8b:07:85:0b:fc:a1:28:30:ac:6b:7b:66:b7:7a:
ac:2f:a4:c5:33:5e:d4:60:fe:1d:b8:bf:dc:bf:df:
fe:63:4c:ea:01:4a:b4:74:dc:ca:2f:94:e1:ca:14:
2a:a0:5f:d1:dd:98:6f:47:d3:46:e7:4c:73:27:de:
4d:0b:cc:31:49:24:bd:ee:bc:21:34:69:73:05:39:
8e:42:a4:3e:1c:3c:dd:81:3e:32:0c:0c:b6:2e:87:
52:35:d8:3c:f8:6c:30:c3:21:7e:67:75:25:ed:ef:
11:18:c6:e9:ec:9c:73:9b:97:eb:51:b7:49:9b:2d:
c2:55:68:b0:d8:ad:76:ec:9a:dd:dd:82:04:f4:0a:
42:67:b4:54:18:85:e9:80:9a:4d:6e:6a:89:1c:42:
e5:85:4d:ca:5d:6b:fb:3f:77:5f:4d:49:cd:86:e7:
88:20:bc:21:e5:29:cf:e0:13:ee:11:4d:93:18:95:
cf:2d:fd:e9:bb:63:cd:0d:d1:e2:86:4d:79:7b:e5:
11:5f:3a:69:88:d8:23:26:17:f5:f0:8d:46:04:6e:
ac:96:6f:bd:14:83:4b:c2:d0:70:cd:e4:cc:a4:34:
b5:b7:09:3f:e6:93:36:fe:48:3e:61:05:71:3a:49:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:02:4B:7B:FE:1F:EC:B0:9C:87:BE:C9:E0:F5:37:BB:68:3D:8F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7GECS3v-H-ywnIe-yeD1N7toPY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a13:18c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
a0:af:75:d9:9c:d2:57:d5:e0:b6:35:26:84:50:0f:64:c9:e9:
48:41:06:71:09:4d:3d:4a:19:2b:75:7f:56:42:68:a6:56:9f:
7e:a8:1b:2e:1c:0c:f6:eb:67:fa:ac:e1:0e:c2:d5:2b:3c:2d:
01:80:7e:ec:f1:5f:c7:28:47:05:72:1c:64:78:67:52:bc:29:
07:cb:c8:e4:f5:d6:2f:6f:03:5e:98:e1:37:78:36:84:91:a7:
08:d0:a4:44:bf:58:50:f2:e5:56:10:95:89:f3:6e:a7:ec:b3:
de:18:6e:97:2a:3a:a9:2e:9a:1d:9d:06:c8:56:b3:04:54:b5:
11:74:35:cf:a6:2b:de:0b:de:db:13:d6:78:25:fb:20:0e:e5:
38:eb:f0:91:f8:ca:42:d8:8c:da:b8:50:a4:b1:af:c9:ff:93:
93:0f:53:26:3b:92:65:b8:98:91:8a:ee:de:c4:c3:ed:69:cb:
3b:50:ad:f5:56:2b:b2:d2:21:fd:ef:96:b3:ee:be:eb:6b:bc:
e5:2d:e4:f4:a1:af:ec:cc:e3:fe:e8:63:aa:7c:c4:51:11:c6:
41:0a:9e:0d:71:b2:12:69:ae:6e:e6:09:67:9a:bc:8d:33:a6:
55:7a:f5:c1:0e:76:a0:94:37:7e:d6:41:ac:97:2e:92:27:a7:
0a:f4:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:06:25 2025 by rpki-client