Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zd896vBTSZUszG6Bz-sxWNsRYXo.roa
File: Zd896vBTSZUszG6Bz-sxWNsRYXo.roa (raw, json)
Hash identifier: 5MWrRGJQVVK1034LoHcPCgvACiSuIbUHg/8fXoV4+Ys=
Subject key identifier: 65:DF:3D:EA:F0:53:49:95:2C:CC:6E:81:CF:EB:31:58:DB:11:61:7A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194EA784F1BC5B4AADCD5B88FD39A5455D4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zd896vBTSZUszG6Bz-sxWNsRYXo.roa
Signing time: Sun 09 Feb 2025 11:29:00 +0000
ROA not before: Sun 09 Feb 2025 11:29:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.12.61.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
2a0f:7d03::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 12 Feb 2025 07:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:78:4f:1b:c5:b4:aa:dc:d5:b8:8f:d3:9a:54:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 9 11:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65df3deaf05349952ccc6e81cfeb3158db11617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:1d:b4:95:11:4b:b0:b1:93:45:76:2c:df:
cb:19:95:9e:4d:95:bb:d9:e6:74:b0:98:ae:e6:78:
7f:7d:08:16:f7:9d:82:24:d1:c1:ea:6d:bb:ed:c0:
79:94:f7:02:9c:f1:0a:ec:25:a2:fd:9e:6e:89:20:
27:c9:b6:6b:b6:03:36:5e:ec:c0:3e:7b:99:d0:7e:
79:dc:1b:27:dc:d7:88:27:7c:3c:23:46:a7:15:41:
a2:7c:d9:28:dc:79:15:c2:c8:6b:23:67:00:76:22:
e3:4a:eb:85:d9:7b:79:5e:58:33:2d:51:22:cf:95:
e5:0f:c7:32:bc:89:3e:80:be:bc:68:01:02:4d:09:
ae:ea:e8:3d:65:f2:61:8a:e8:31:3c:e9:dd:d5:b4:
d6:57:bd:50:3b:fa:b7:2f:21:7d:93:be:16:a1:8a:
7d:f5:71:c8:28:f3:b8:aa:87:75:e7:58:a1:65:6b:
7d:43:bb:08:60:35:6d:ce:f9:f1:91:a2:28:87:bd:
01:de:75:64:cf:64:d9:8f:31:40:28:de:14:82:35:
04:42:8a:1e:05:18:51:b6:76:9a:1c:1f:f2:9e:65:
d4:1d:b3:fb:f1:20:d7:f3:6e:25:92:1c:dc:a2:7d:
56:2e:c0:37:0a:4c:a1:a7:cd:b7:1e:a0:2f:6c:09:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:3D:EA:F0:53:49:95:2C:CC:6E:81:CF:EB:31:58:DB:11:61:7A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zd896vBTSZUszG6Bz-sxWNsRYXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.61.0/24
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
IPv6:
2a0f:7d03::/32
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
ca:be:ea:2b:58:34:4d:da:3d:17:40:bd:42:0b:b8:fc:4f:6a:
4e:60:7b:27:8b:ef:56:49:27:0f:83:3b:77:d0:00:ec:83:ab:
65:0c:0c:be:96:a3:76:00:cb:73:b1:fe:5e:51:bc:0a:46:53:
a0:51:3c:f4:da:f0:63:b3:a8:30:a2:08:21:de:a4:63:66:ff:
c9:b3:d0:a2:e2:fd:c5:8f:d2:49:15:eb:ed:b2:c4:3f:08:bb:
e6:83:17:82:7e:21:99:06:73:1e:ef:6e:00:79:3a:36:50:18:
bb:15:93:62:d1:85:32:32:13:de:ed:e0:81:cf:ea:3e:d4:2b:
20:5a:c6:dd:6b:e1:b8:ee:92:6e:a9:11:6f:64:49:b5:42:b9:
fb:09:29:a5:f1:91:71:27:77:fb:a3:ff:65:a1:0a:b6:e3:af:
36:77:f4:c8:6f:0a:f1:27:1e:7b:ee:f8:36:2d:fe:47:55:33:
a9:d0:c8:86:68:58:c7:da:7b:0b:15:ef:8e:bb:3f:b0:48:3e:
c6:7d:9b:e3:b4:3b:ec:46:1c:45:32:1a:ae:f0:eb:48:4d:3e:
69:0e:9a:36:ce:28:12:f7:22:5c:bc:4f:c8:dc:7c:56:49:b3:
8c:8c:85:de:1c:35:12:42:04:40:80:b8:47:4e:7b:e3:75:10:
4e:e7:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:23:30 2025 by rpki-client