Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GjDROq4Dr9q4kx2TqLHO2cUkxY8.roa
File: GjDROq4Dr9q4kx2TqLHO2cUkxY8.roa (raw, json)
Hash identifier: ji8YXhgeg+0Dln1uWPPTduLs8t/HPvSf+H3UKluXbPE=
Subject key identifier: 1A:30:D1:3A:AE:03:AF:DA:B8:93:1D:93:A8:B1:CE:D9:C5:24:C5:8F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196EE050D1FAC7A8E7D479223F860C9E69B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GjDROq4Dr9q4kx2TqLHO2cUkxY8.roa
Signing time: Tue 20 May 2025 14:07:10 +0000
ROA not before: Tue 20 May 2025 14:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.135.36.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 07:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:05:0d:1f:ac:7a:8e:7d:47:92:23:f8:60:c9:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 20 14:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a30d13aae03afdab8931d93a8b1ced9c524c58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:0f:29:02:2f:49:38:98:12:ea:eb:9d:99:
48:c7:3e:dc:a1:55:b2:3b:9c:70:0c:b1:4a:47:fc:
33:d4:17:92:a9:60:c2:2e:29:79:a7:70:ac:3a:ef:
68:ed:06:d1:47:a8:f3:78:14:a4:db:e9:62:cf:f1:
8e:8f:0f:6a:fc:be:86:f9:ce:93:11:1b:12:27:c5:
be:23:be:67:4f:e5:f0:5e:90:e3:c4:2c:91:c8:d6:
fb:62:ea:53:68:77:61:1b:06:83:f1:5c:a7:f9:09:
02:1f:05:85:9a:37:05:ce:d7:5d:43:dd:a2:da:6b:
b5:bc:b8:4f:e9:b6:de:7d:05:a2:29:78:d2:b4:9d:
7b:af:68:85:8c:e9:04:72:65:41:86:46:53:cb:ce:
d9:7d:3d:e7:61:2a:d4:c2:28:ba:63:70:50:7c:7d:
3e:2c:02:19:c8:8c:88:1f:d6:ac:11:bb:6b:4c:82:
e4:7f:49:1a:b4:f9:fd:b6:8c:03:27:ab:ec:21:f0:
1d:5f:3a:01:ed:cf:32:53:d5:f0:a0:0d:4b:b9:97:
c2:3a:77:a9:c2:03:6b:0c:9f:14:67:be:8f:e4:7d:
04:0d:7b:31:3a:0a:10:80:17:5b:f7:96:dc:2b:49:
fe:e1:02:4c:d3:b1:69:3d:1a:ab:c2:41:03:8b:aa:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:D1:3A:AE:03:AF:DA:B8:93:1D:93:A8:B1:CE:D9:C5:24:C5:8F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GjDROq4Dr9q4kx2TqLHO2cUkxY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.135.36.0/24
45.146.180.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d2:13:76:15:e0:da:6f:ca:5b:a9:e0:21:67:cd:da:49:de:
df:fc:ad:b5:d8:9d:7e:01:0f:cb:fb:20:0c:c2:9e:5f:87:e8:
7e:b2:ae:d6:4c:06:1f:30:a6:94:85:64:a7:93:ac:6d:6c:14:
cf:5e:c7:e7:e6:a8:fd:bf:6f:3c:7f:b0:f4:27:01:83:e0:00:
01:83:40:57:1a:48:91:2a:02:4b:99:1e:87:56:46:83:3b:04:
1e:41:9f:25:4a:3b:48:6c:d8:76:e5:78:5e:f1:06:3b:d4:56:
3e:d8:a4:b5:99:ee:b3:1c:5f:a7:66:40:a5:a0:d4:cd:93:70:
0d:4d:41:7f:6f:d2:df:bd:03:93:4f:68:71:64:7a:80:0d:05:
3f:31:72:c6:41:c7:e9:77:d3:a1:6d:d4:ad:ac:19:2b:b3:12:
37:06:d3:e8:db:4e:0a:61:af:6b:b3:32:f6:1f:e2:bc:ec:ee:
7b:b7:54:72:58:b7:f8:3c:4c:ac:29:2b:23:b6:22:e7:f3:11:
d9:13:59:6d:7a:b0:aa:ee:21:01:ae:30:84:b0:df:dd:94:40:
80:21:40:6e:7d:51:f3:e3:5b:33:fa:bb:68:b1:4a:2e:20:d3:
79:d1:93:fc:2b:32:59:d4:76:d5:78:1d:0e:d8:ec:e9:98:03:
17:62:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:39:45 2025 by rpki-client