Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VuCusa3RJEer_vAnzPblrNRlw_A.roa
File: VuCusa3RJEer_vAnzPblrNRlw_A.roa (raw, json)
Hash identifier: gJpCIh5ONyqY/fx47w9T4cpHBYHV59Df7mzudFx95Rs=
Subject key identifier: 56:E0:AE:B1:AD:D1:24:47:AB:FE:F0:27:CC:F6:E5:AC:D4:65:C3:F0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196113E7D34F2E0391C263E3E9237D8FF49
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VuCusa3RJEer_vAnzPblrNRlw_A.roa
Signing time: Mon 07 Apr 2025 17:13:50 +0000
ROA not before: Mon 07 Apr 2025 17:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.135.39.0/24 maxlen: 24
45.151.103.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
45.152.200.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 07:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:3e:7d:34:f2:e0:39:1c:26:3e:3e:92:37:d8:ff:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 7 17:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e0aeb1add12447abfef027ccf6e5acd465c3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:43:58:df:b1:ae:48:57:40:f4:7d:84:b3:
db:c9:eb:dc:63:cd:76:ae:f9:2e:a4:73:db:95:d3:
56:c8:22:8f:93:fa:e6:71:f6:ed:27:72:61:f1:3f:
e4:11:95:3f:e3:bf:c8:59:41:1b:80:ed:b3:79:4d:
aa:2a:4b:91:a8:9d:72:c6:26:a8:53:11:41:10:ec:
97:5e:04:ca:9f:ac:f1:c2:66:59:cf:c4:57:cf:31:
7e:60:1e:03:c4:e1:f4:ba:1d:dd:3d:10:2b:9c:19:
14:17:f8:bb:4f:cb:89:7e:2c:e0:f5:ee:c7:21:33:
83:50:4e:30:9a:f4:98:a0:25:12:c8:9f:64:28:01:
a0:76:e7:4a:31:89:ba:ce:ee:86:4c:54:d7:58:8e:
a3:f3:1c:7a:08:73:a8:e9:dc:c2:89:69:ee:b9:ec:
9c:e0:dd:4d:c1:6d:2b:dd:61:d5:df:e5:4b:a4:cd:
d1:d5:44:8f:5a:f6:5e:db:00:67:52:89:c2:87:fb:
4d:05:7d:e2:ae:f6:7b:02:93:3c:35:21:69:66:33:
48:8c:ab:eb:2e:78:3e:e7:97:75:bb:44:a8:d1:0f:
1e:5d:94:7c:1b:49:4d:bf:57:7a:1d:45:59:54:f6:
04:6c:e7:49:a1:c2:d6:34:ec:ec:4d:4b:f9:3d:63:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:AE:B1:AD:D1:24:47:AB:FE:F0:27:CC:F6:E5:AC:D4:65:C3:F0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VuCusa3RJEer_vAnzPblrNRlw_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.39.0/24
45.151.103.0-45.151.104.255
45.152.200.0/24
45.153.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:68:7b:06:1b:12:4d:f3:09:bc:80:0d:d8:b8:b6:ef:0c:b6:
7a:86:5e:dd:f7:55:b2:a8:d7:f2:d0:f7:6f:56:da:39:bc:cd:
4a:45:d2:bc:cf:f5:45:22:f6:3a:c3:2b:ee:dc:b7:f5:c7:d1:
1a:0c:59:1f:1d:b0:63:7c:53:fd:a7:95:39:9f:df:2a:18:76:
55:7c:6a:c3:ee:e8:46:32:54:31:7d:3f:b9:f4:9e:6e:19:e4:
10:12:18:1f:3c:0f:10:27:d8:67:4a:dc:bd:b6:82:17:9b:34:
28:2a:41:e9:99:10:cc:75:55:cf:08:c5:ed:c4:8a:aa:94:35:
e7:a5:c9:1c:16:4b:ea:bb:41:8e:2f:49:e5:53:d0:80:4a:ca:
4b:23:17:15:09:e8:4e:43:d0:9e:4f:b1:e6:a9:5b:57:2d:af:
27:52:73:04:a9:cb:b0:64:f6:9c:8d:65:7c:59:99:76:60:12:
38:f6:aa:25:7e:00:5c:1d:02:f5:8c:e9:73:bb:8e:8b:a2:b8:
cb:ec:de:3b:0b:c5:1a:af:d9:56:6d:66:60:29:51:83:29:c3:
e4:66:14:91:0b:39:c0:e6:02:7f:2c:fa:d5:5a:60:d8:14:ff:
85:42:6e:28:8e:91:14:1a:e3:63:b6:bc:90:15:4b:81:8f:b0:
b0:d1:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:42:51 2025 by rpki-client