Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DzSWCtajcwcB-smnNpQqkg8OAQQ.roa
File: DzSWCtajcwcB-smnNpQqkg8OAQQ.roa (raw, json)
Hash identifier: UvnuKzCXRR05u9BVPZ65IWPj9mhmVefHjrUTjXfTAvE=
Subject key identifier: 0F:34:96:0A:D6:A3:73:07:01:FA:C9:A7:36:94:2A:92:0F:0E:01:04
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3AC77B942975D9760B5E8A841D99F065
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DzSWCtajcwcB-smnNpQqkg8OAQQ.roa
Signing time: Fri 31 Oct 2025 14:59:03 +0000
ROA not before: Fri 31 Oct 2025 14:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 45.128.244.0/24 maxlen: 24
45.128.245.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.128.247.0/24 maxlen: 24
2a0f:1207::/32 maxlen: 32
2a0f:1480::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:4f80::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 04 Nov 2025 11:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:c7:7b:94:29:75:d9:76:0b:5e:8a:84:1d:99:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 14:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f34960ad6a3730701fac9a736942a920f0e0104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:33:01:51:3e:0d:3b:ac:ad:ad:87:75:f8:
8a:76:ed:72:6e:03:f1:82:61:af:ba:52:9b:2a:e5:
4e:76:9d:3a:d4:ce:19:fc:a7:76:b3:1d:a2:c5:02:
49:9b:3a:be:42:71:f4:47:cd:6d:88:75:1e:b5:5f:
01:9f:83:c5:18:dc:da:71:33:88:8c:17:e3:4d:74:
41:39:80:cb:c5:b8:d0:e6:c6:99:df:d3:19:07:e0:
09:ae:08:fd:26:ae:f0:ff:0b:ac:85:8e:bb:c9:b0:
96:7d:48:d7:4b:87:79:17:6c:9b:58:50:96:cd:b7:
08:a2:c4:2c:a8:17:3f:48:f7:f5:95:94:f0:d4:56:
e8:24:28:24:2f:08:fd:59:36:fd:06:ae:f6:eb:cc:
41:ca:da:c3:fa:d9:1a:69:6d:be:da:46:6f:ef:af:
21:87:0e:06:d5:62:34:62:01:eb:8d:b7:49:72:98:
32:37:3b:0c:91:3d:76:93:f2:58:ac:58:c1:9c:3d:
ca:69:7c:28:01:cc:8e:90:4e:d6:8d:3b:f0:42:f7:
9d:34:4f:53:56:85:a3:8c:e1:96:b5:7c:64:26:13:
36:b2:57:3a:71:6b:1f:21:bc:1c:c4:36:40:75:12:
c6:58:6c:82:ce:8b:7a:40:38:5f:dc:7b:57:1f:48:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:96:0A:D6:A3:73:07:01:FA:C9:A7:36:94:2A:92:0F:0E:01:04
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DzSWCtajcwcB-smnNpQqkg8OAQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.244.0/22
IPv6:
2a0f:1207::/32
2a0f:1480::/29
2a0f:2f80::/29
2a0f:35c0::/29
2a0f:4f80::/29
2a10:6d00::/29
2a11:7440::/29
Signature Algorithm: sha256WithRSAEncryption
42:9c:36:eb:37:7d:7b:8f:66:52:79:7e:8a:76:69:f9:26:90:
f3:32:3e:28:3e:1d:10:47:66:82:f1:58:a8:fd:40:c6:00:c1:
2b:a5:59:7e:2c:7d:c0:89:b3:d1:bd:5b:fe:df:17:e9:0e:40:
16:31:e4:d7:93:86:5c:34:3a:a0:39:a6:d5:93:bc:3d:3c:6b:
26:e8:8a:d8:57:31:81:09:dd:80:d8:e6:06:5b:eb:7f:c5:b0:
b6:1d:9d:17:ef:1a:1c:46:ac:7f:4a:4f:ad:bb:12:1e:04:29:
fe:8e:27:83:9d:2c:22:85:3f:95:02:42:5c:64:fe:3b:80:7d:
bf:c9:63:fe:4e:ec:1b:f7:19:48:90:09:50:e0:c1:45:65:ee:
74:14:94:1e:c9:7e:af:5e:fd:de:74:1a:cd:19:39:f6:20:86:
86:d2:ba:1b:dc:1a:a4:56:ff:33:c5:d6:85:bf:d9:20:01:1f:
3f:fd:7d:65:2a:08:f5:b1:a7:43:33:55:b1:e9:62:3b:7c:73:
68:18:92:b4:fa:a3:06:06:04:50:21:7e:f1:19:63:cb:00:ff:
32:98:64:6b:1e:27:c2:b0:4d:47:c0:6f:da:78:4c:97:e9:2c:
85:af:a2:76:0b:fb:93:22:30:6f:f4:be:a7:85:61:66:77:2c:
b5:65:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:25 2025 by rpki-client